scurvy

87 ms·

901.
by scurvy 11y ago
Keep TTL's low (3-5 minutes). Things don't have to happen instantly. Clients understand. You had a bad day on the Internet. Guess what, stuff happens. Remember when "XYZ company down for 2 hours" made headlines? Yeah, th
902.
by scurvy 11y ago
Multi-master MySQL is generally regarded to be a very, very bad idea. Single master with multiple GTID replicas and promoting a replica to master upon failure is BCOP.
903.
by scurvy 11y ago
1) Why in the world are you exposing your router control planes to the outside world? That should be ACL'd off (in stateless firewall rules and routing engine) to only allow access from a few IP's. 2) Your transit providers should
904.
by scurvy 11y ago
How though? There's remarkably little information in there for being a whitepaper. If all they do is drop Christmas-tree packets and bogus UDP/ICMP traffic, that's not much in the way of protection. I'd like to see exact
905.
by scurvy 11y ago
Real talk: it's not that hard to run your own network. It sounds like Linode was skirting by on not making the infrastructure investment both in hardware and people. It's finally come back to bite them. No excuses and no pity for
906.
by scurvy 11y ago
Where did I say that purchasing transit relates to an AS? I was speaking out them separately. "House bandwidth" in most colos is pretty garbage, and you don't have much control over it. I'm a lot less impressed with Lino
907.
by scurvy 11y ago
I was referring to routers. They have to buy routers from someone.
908.
by scurvy 11y ago
You can definitely dual source for separate parts of your network. Just don't dual source for the component in the same deployment. You do not want to run a Juniper and Cisco router in a pair, both talking with each other running IS-IS
909.
by scurvy 11y ago
I'd imagine they use VRF's to quickly segment the traffic after ingress. Google.com might have DDoS protection, but I'm wary that it extends to GCE. I've read about Google Andromeda, but there's no real meat in any
910.
by scurvy 11y ago
I don't know if there is any reading material. I heard the story from someone who was on the front lines in the outage, directly dealing with the situation. Vendor diversification is a bad thing for critical infrastructure when interop
911.
by scurvy 11y ago
Sadly, the government will go along with the rate increase; just as the PUC allowed PG&E to raise rates after razing San Bruno with a pipeline explosion.
912.
by scurvy 11y ago
If they price it like cheap insurance, they will make a lot of money and offer a worthwhile service. Pay them a low monthly rate (X) to have the service active and then pay hourly at Y rate during an attack. You can play with X and Y to max
913.
by scurvy 11y ago
Wait, you're saying that Linode uses facility transit? Like, they buy bandwidth from Savvis and TelX? Well that would be the problem right there. From what I can tell, Linode doesn't even have their own AS for customer traffic? It
914.
by scurvy 11y ago
Do you run Postgresql, MySQL, or something else? What led you to your choice? Because one is inherently better than the others for what you want to do? That's why you stick with a single cloud provider. You want the vendor lock-in. Y
915.
by scurvy 11y ago
After thinking about it more, I now realize that there is one way that AWS/GCE can lessen effects of a DDoS. Given that a lot of attack machines are hosted inside of AWS/GCE, they can handle this with lots of internal network band
916.
by scurvy 11y ago
LOL at the "proof" attack. "We have a huge 500gbps cannon! But to show we're serious, here's a 2gbps attack. Take that!" That's hilarious. I wouldn't have taken it seriously. I also doubt that the gro
917.
by scurvy 11y ago
Can confirm that the attacks started Friday. We got alarms for some tertiary services we run in their datacenters (multiple geos).
918.
by scurvy 11y ago
I didn't downvote, but there's one thing to keep in mind. You must request RTBH functionality with every peer I've ever worked with. It's free, but they don't set it up automatically. You need to request it during p
919.
by scurvy 11y ago
What DDoS protection does AWS provide? The only thing mentions on their webpage is autoscaling, more nodes, etc. In other words, AWS' DDoS protection strategy is to open up your wallet. About 6 months ago they did hire Jeff from BlackL
920.
by scurvy 11y ago
All of this +1000000 We've found that the more distributed the attack, the easier it is to defend. If it's truly distributed in nature, you can help spread the attack surface through things like anycasting if you have you multiple
921.
by scurvy 11y ago
Not to nitpick, but M.2 is just a form factor. The big gains come from being NVMe PCIe, not the form factor. You get the same gains with NVMe PCIe in 2.5" drive form factor.
922.
by scurvy 11y ago
I've smoked a few installs doing the acrobatics, and I'd consider myself a pretty decent Linux admin. This stuff is very much still in the 1% nerd camp.
923.
by scurvy 11y ago
In 17.3, is Flash still a dependency of the main codecs deb? In previous versions of 17.x, it was impossible to remove the Flash deb without uninstalling everything useful.
924.
by scurvy 11y ago
I buy the Perles off of eBay for a few hundred dollars. Way cheaper than this, good software support, multiple gig PHY's, and often dual psus.
925.
by scurvy 11y ago
The Broadcom Trident 2/+ chipsets, that a lot of vendors use for their merchant silicon, only support 1, 10, and 40 gig PHY's. No more 10/100 on these switches (which are all over every datacenter).
926.
by scurvy 11y ago
They couldn't have found someone better for the camera than moustache lady?!
927.
by scurvy 11y ago
Your ordering is off. Their initial tanks were old and ineffective. It was after the sieges that tank production in the east ramped up with T34's. If the civilians had not taken the brunt and fought back, there wouldn't have been
928.
by scurvy 11y ago
I think the US command was still very aware of the lessons learned from WWII and particularly, those of how the Soviets defeated the Germans in Operation Barbarossa. The Soviet army might have pulled the triggers, but it was the Soviet peop
929.
by scurvy 11y ago
"You can't outrun a radio" is pretty common refrain among sportsbike riders upon hearing a tale of someone running from police.
930.
by scurvy 11y ago
I think you're confusing tales of people on sportsbikes running from cops with those on cruisers. Cruisers can't outrun anyone. Cruisers are the ones with the loud rumbly exhausts that most annoy people. Sportsbikes have higher pi

More ›