daper

5 ms·

1.
Microsoft/TracerAI withdraws copyright takedown against Luanti(blog.luanti.org)
65 points by daper 9d ago|10 comments
2.
by daper 4y ago
Sure, you can. But on advantage of IPv6 is you addresses are globally unique. If you ever need to connect two networks that were created independently (like different companies), unique addresses, even local are very helpful.
3.
by daper 4y ago
I've given a try to IPv6 in a company with few tens on servers in a 2 DCs, an office + additional location, 3 ISPs in total. For me the real challenge is not just different way to write an IP address or doing NAT. The challenge is that
4.
by daper 4y ago
With BGP (especially anycast) you don't have direct influence where the requests lands. You can steer traffic by techniques like AS prepend, some priorities per BGP session (I'm not an expert in BGP) but eventually it's not C
5.
by daper 4y ago
Varnish (HTTP caching only) also uses one thread per client. I believe worker threads are used to handle reuqests while a dedicated thread handles all the idle connections between requests using epoll(). Also per-threads stack size is lower
6.
by daper 4y ago
Can I ask if your whole content can be stored on a single server so content is simply replicated everywhere or there is some layer above that that directs requests to the specific group of servers storing the requested content? I assume the
7.
by daper 4y ago
AFAIK no. The point of DRM is to prevent recording / playing the media on a device without decryption key (authorization). So the goal is different than TLS that is used by the client to ensure the content is authentic, unaltered durin
8.
by daper 4y ago
I have some experience serving static content and working with CDNs. Here is what I find interesting / unique here: - They are not using OS page cache or any memory caching for that, every request is served directly from disks. This se
9.
by daper 4y ago
I had brief experience managing such IT team after which I've gained big respect for them. I've never seen such low budget to amount of work ratio in my IT career. Everybody expects them to fix the "trivial" problems imm
10.
by daper 4y ago
Note that they are using 10GbE network when even a single NVMe disk used in the test has few times more bandwidth so the bandwidth results are constrained by the network hardware. Creating on-premise infrastructure a year ago we went for 2x
11.
by daper 5y ago
I categorize this as bugs caused by data inconsistency because od data duplication. That includes: - Using asynchronous database replication and reading data from database slaves - Duplicating same data over multiple database tables (possib
12.
by daper 5y ago
If you have your own domain, then move it to one of the listed DNS providers and use DNS challenge with ACME: We are using using certbot + cloudflare whis way. There is no HTTP request, certbot makes a temporary DNS record using the Cloudfl
13.
by daper 5y ago
From the described mistakes two come from lack of understanding how exactly DNS works. But I agree it's in fact hard, see [1]). 1. "This strict DNS spec enforcement will reject a CNAME record at the apex of a zone (as per RFC-2181
14.
by daper 5y ago
Generally agree, for basic configuration it just works. But I was planning to use IPv6 in some network segments in my company. Providing proper VPN (road warrior style) for employees to access such network isn't simple with IPv6 where
15.
by daper 5y ago
As I understand my favorite resolver - unbound - has separate "infra" cache that also caches RTT times, and "down" status of name servers: https://nlnetlabs.nl/documentation/unbound/unbound.conf
16.
by daper 5y ago
Our security team complained that we have some services like monitoring or SSH access to some Jump Hosts accessible without a VPN because VPN should be mandatory to access all internal services. I'm afraid once comply we could be in si
17.
by daper 5y ago
I think the described machines were designed for a very specific workloads even in CDNs world. As I guess they serve exclusivelly fragments of on-demand videos, no dynamic content. So high bytes to number of requests ratio, nearly 100% hit
18.
by daper 5y ago
Same here. mSBC coded that started working for me around Fedora 33/pipewire 3.2x is a night/day change for me. I can use my Jabra bluetooth headset with high quality audio instead of really crappy sound. I think neither Windows no
19.
by daper 5y ago
After some searching I've found that Supermicro is selling ATX power supplies with SMBus (hopefully PMBus really) connection in reasonable price but never had one and I'm not able to find any review. Example: https://st
20.
by daper 5y ago
Server PSUs support such communication (looks like this is PMBus protocol, variation of SMBus, which is variation of I²C). In servers it's connected to the BCM and usually allows to read input and output power, FAN speed, temperatures
21.
by daper 5y ago
There are advantages of using HTTP cache on application side even if you use CDN: - Varnish can guarantee that a given resource will be fetched at most once every TTL expiration since you can set up one instance to do so (+ some HA solution
22.
by daper 5y ago
You're right. I'm wasn't really serious. Since I'm in the middle of calculating costs of own servers in rented racks in Poland (you're right labor is more difficult than hardware) let me imagine the rest of the infr
23.
by daper 5y ago
10x Supermicro SSG-6049P-E1CR60H servers (60 x 3,5" HDD in 4U enclosure) - $5k each 600x WESTERN DIGITAL Ultrastar DC HC550 18TB (10800PB in total) - $500 each ~$350k in hardware, up to 20kW energy consumption, should fit in two rack t
24.
by daper 5y ago
IPv6: curl http://ipv6.whatismyip.akamai.com curl http://ipv6.whatismyip.akamai.com/advanced IPv4: curl http://whatismyip.akamai.com curl http://whatismyip.akamai.com/advanced Both h
25.
by daper 5y ago
Some providers are doing that. For example you can rent such bare metal servers from OVH's cheap brand So You Start. But that doesn't make sense if you need something more that one cheapest server. Consider the total cost of buyin
26.
by daper 6y ago
The way I look at the major improvements in the two recent HTTP versions is: HTTP/2 was needed to better utilize the bandwidth by keeping the TCP connection busy without silence period. That means instead of "request - RTT delay -
27.
by daper 6y ago
For web serving it's possible to have IPv6-only server accessible to anyone. Just use Cloudflare. I'm not sure it's documented but I started using IPv6-only origin server behind Cloudflare and it seems to work OK for people c
28.
by daper 6y ago
One of nice options in recent versions of OpenSSH is the "expiry-time" key option you can put in authorized_keys. There are also other options handy to restrict the usage of the key, for example you can limit the key to be used on
29.
by daper 6y ago
That is a step forward. But I'm still missing few features. Most annoying is that there is no way to make multiple changes as one atomic change. From time to time I need to change an A record to a CNAME record. It's not possible w
30.
by daper 8y ago
You're right. I was wondering how this company is able to collect such data from real users. It's registered in an apartment in Cracow, Poland, a 1-person company till last year (here is their company info in polish: http:/&

More ›