[01:28] mercutio: Are you aware of any independent security analyis of h2o? [01:28] kellytk: no, it's new [01:28] i doubt any has been done [01:28] it's mostly interesting atm [01:29] they don't seem naieve. [01:29] but there could still be risk as with any program [01:30] It appears to be picking up substantial steam on GitHub [01:30] you know openssl must not have had any good security done too [01:30] for those long standing vulnerabilities [01:30] i'd hate to try and read the source :) [01:31] there's an old saying about peer code reviews [01:31] Have you worked with LibreSSL? [01:31] but pretty much when people are faced with lots of other peoples code they often kind of just push it through [01:31] https://github.com/h2o/h2o/commits/master [01:31] but when there's small amounts of code they analyse it to death :) [01:32] i haven't touched ssl with any of my own code [01:32] That's signal:noise showing itself as an important balance I think [01:32] openbsd of course has shifted to libressl [01:32] Naturally :-) [01:35] https://github.com/h2o/h2o/commit/2a6ea3763fe385575006fb2b0f7f76c55dd03126 [01:35] Github Commit: "implement casper; cache-aware server push using cookie-based cache fingerprinting by Kazuho Oku" [01:35] so yeah that's kind of interesting [01:36] that's the kind of thing no-one else semes to be paying much attention to [01:36] at least that i've noticed [01:43] although that stuff matters more for higher latency connections [01:44] cdns can make it less significant [02:02] By cookie-based cache fingerprinting would that be, for example, a cookie field set containing a hash of the content upon last request? [02:03] yeah [02:03] even without that it sounds like the client can abort if it already has it [02:03] for some use cases, pushing is safer than others too [02:39] does 440mb/sec for 3 hard-disk raid10 sound surprisingly quick to anyone else? [02:41] Sustained? I'd say so. I'm historically a fan of RAID10, but I'm going to try a JBOD+ZFS next. Have you worked with ZFS mercutio? [02:44] well sustained for 3 seconds. [02:45] there's zfs on it too but no hdparm [02:45] zfs is raidz [02:45] / is raid 10 mdadm [02:45] it tried doign a command :) [07:03] How do you do a 3-disk RAID10? [07:20] partition each disk into two, mirror the halves so no two are on the same disk, stripe across the mirrors? :/ [13:37] *** Seldom has joined #arpnetworks [13:50] The only way I'd run an odd number of disks in RAID 10 is with the odd disk being a hot spare [13:51] But that only works starting at 5 [13:51] Yes, I'm not speaking to the three disk comment [13:51] :) [13:51] IMHO RAID 10 starts at four [13:51] Yeah I think that's the minimum for a RAID10 [13:52] brycec: Have you worked with ZFS in production? [13:52] Yes [13:52] But I'm also stepping out to lunch. later [13:52] Thoughts? [13:52] Sure [13:52] I'm 100% pro-ZFS [13:52] More later [13:54] I'm just amateur-ZFS [13:55] * twobithacker isn't a pro-ZFS but plays one on TV? [13:56] launchctl load ~/Library/LaunchAgents/varietyshow.job.plist [14:04] launchctl: not found [14:08] :-D [14:09] zfs is good stuff [14:12] Can hardware RAID contribute anything to a storage model already using ZFS? [14:14] slowness :) [14:15] not revealing that there is an underlying failure [14:16] as in, the raid will still return the right value even if some of the media has failed [14:16] yes, you can monitor that at a higher level, but it seems odd to do that. [14:35] Oh goodness no! You should never combine hardware RAID with ZFS. [14:35] The key is that ZFS itself won't know about drive failure and won't be able to help you out at all. [14:35] eg: zfs resliver [14:36] Not to mention that ZFS is SO much more flexible. [15:31] FYI https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A22.openssh.asc [15:36] Geez. I gotta go from p21 to p24 already? [15:36] I just upgraded sunday! [15:36] is this remote exploit? [15:37] ahh, only known users [15:53] brycec: 3 disk mdadm raid 10 just works [15:53] it stripes different parts of the disks, you get 1.5 disks worth of rdata [15:53] err data [15:53] and good read speeds and ok write speds [15:54] RandalSchwartz: I thought you'd enjoy "yet another security advisory" :P [15:56] there's also the iret exploit byrce [15:56] hahaha [15:56] I'm not trying to be a comprehensive advisory source :P It just happened to cross my desk (so to speak) [15:56] ahh [15:57] so I passed it along to the biggest group of FreeBSD users I interact with. [15:57] it seems security issues are increasing [15:57] i don't think they are though, just people finding them [15:57] I still can't fathom 3-disk RAID10. That's just fundamentally impossible (assuming 1 disk = 1 volume) [15:57] heh [15:58] brycec: it uses whole dsiks as far as partition tables goes [15:58] or whole partitions [15:58] but it will stripe have of the partition with half from another drive [15:58] i did it with zfs once btw :/ [15:58] by doing it manually with carving up [15:59] s/have/half [15:59] but it will stripe half of the partition with half from another drive [16:00] mercutio: i think it's more people looking for and finding them [16:00] which is a Good Thing [16:03] Apparently what mercutio is describing is actually RAID 1E. https://en.wikipedia.org/wiki/Non-standard_RAID_levels#RAID_1E [16:03] Non-standard RAID levels :: Although all RAID implementations differ from the specification to some extent, some companies and open-source projects have developed non-standard RAID implementations that differ substantially from the standard. Additionally, there are non-RAID drive architectures, providing configurations of multiple hard drives not referred to by RAID acronyms. Double parity Now part of RAID 6, double parity (sometimes know [16:03] It's interesting. [16:07] yeah it's mdadm's non-standard raid1 0 [16:07] err raid 10 [16:07] For a brief time in 2013, RHEL allowed you to configure it, but they removed it because it's just so bizarre and it breaks peoples' heads. https://bugzilla.redhat.com/show_bug.cgi?id=888879 [16:08] well it works especially well for the 3 disk case. [16:08] i use far=2, but i think you can use other ways to do it too [16:09] because in 3 disk case, it takes single disk failure like raid5, while giving better read/write/random performance [16:10] actually it shoudl be slightly reduced write speed compared to raid5, as you have to double up your writes. [16:11] also, zfsonlinux is adding large block support, i was trying it out on my server [16:12] and it seemed to be slightly quicker with 256k record size than 128k [16:12] i don't think i really want to go higher though. [16:13] linux also lets you do fancy things like raid1 over 3 hard-disks [16:13] Is that "fancy"? [16:13] i don't think everythign supports it [16:14] sounds like something i wouldn't want [16:14] hahaha [16:15] i really don't know where to go with hard-disks and raid [16:16] for bulk storage, you can do raidz2, 4 disks, 2 parity [16:16] but random performance will suck [16:16] figure what works for the workload and use that [16:16] or you can do two raidz1 3 disk pools striped, but double failures on one raidz can screw you [16:16] nothing is really ideal [16:16] if you need solid redundancy, target that, better perf, target that [16:17] you don't go for ideal, you go for what works for the workload [16:17] if you need something that works with every possibility, go ssd raid or something [16:17] I have a couple of RAID1+0's that I intend to move to ZFS, just not sure the most ideal zdev for it yet... [16:19] * brycec might just mirror all 4 drives for ultimate redundancy, since capacity is turning out to be less important than when the raid10 was setup [16:21] m0unds: well now days people want performance, and reliability, and redundancy .. [16:21] zfs ssd caching can help long time running read performance, but not really write [16:21] s/$ and supermodels, and happiness, and money, and world peace, and free energy, and.../ [16:21] dammit [16:22] i hope that read caching can persist over reboots soon [16:23] i imagine that 2.5" disks are going to start getting more common [16:23] and maybe that'll mean people can have more hard-disks cheaper [16:23] and lower power. [16:23] 2.5" is kind of a pita for mass storage atm, you have expensive sas disks, ssd's, and laptop hard-disks. [16:24] ssd's should displace expensive sas disks in most situations [16:24] y'never know, maybe 1tb 10k 2.5" sas disks will get cheap [16:26] there's a RAID 1E?? [16:26] there is a raid 1e, but it's non standard, and not completely the same as mdadm raid10 [16:26] there's heaps of weird kinds of raid around actually [16:27] http://serverfault.com/questions/139022/explain-mds-raid10-f2 [16:27] oh it's linking to wikipedia but that shows layout for mdadm raid 10 [16:27] wow [16:31] normally 10 on linux works better with two disks even [16:31] at least, if you want sequential performance [16:32] as raid 1 all only read from one mirror at a time [16:33] and from what i understand offset modes are meant to boost shared workloads [17:41] *** Seldom has quit IRC (Ping timeout: 256 seconds) [18:29] channel poll: who would buy a dedi (or vps) if we had presence in the EU? [18:29] VPS, please. [18:30] I would not, because I have no need of an EU presence. But please don't let me skew the results unfairly. [18:30] mike-burns: roger [18:30] brycec: roger that [18:55] up_the_irons: I would buy a VPS [18:56] Has anyone run into an issue with Parallels when attempting to install a FreeBSD guest from .iso where no boot devices are available? [19:09] up_the_irons: I wouldn't either, have no need for EU stuff myself [19:16] i did, however, just pour myself a nice bavarian beer [19:18] m0unds: nice, which one? [19:27] ayinger celebrator [19:27] came with..a tiny horse [19:27] http://www.beeradvocate.com/beer/profile/39/131/ this 'un [19:27] Beer Advocate: "Ayinger Celebrator Doppelbock | Privatbrauerei Franz Inselkammer KG / Brauerei Aying" [19:40] *** mnathani_ has quit IRC (Ping timeout: 264 seconds) [19:42] Does anyone know why brown ales are so uncommon? [19:43] eh? lots of breweries do brown ales [19:44] i suppose it might depend on where you are in the world, but i've seen them at lots of breweries in the SW US [19:45] IPAs are way more popular than browns in my part of the world [19:46] yea, it's the dominant style in the western US nowadays [19:46] NM has its own class of western US IPA too :) [19:46] oops just re-read, I see you said uncommon not common :) [19:46] beers styles seem to go in fads [19:47] IPAs were the big thing, sours/bretted beers are now pretty popular here [19:47] yeah [19:47] new belgium's la terroir is a worldclass sour [19:47] do want [19:47] it's so good [19:47] too bad its so expensive to ship beers here :/ [19:47] yeah [19:48] so much good stuff in CA, CO and NM [19:49] one of the WA breweries does a fantastic black ipa/cascadian ipa, easily one of the best i've ever had [19:49] called octopus ink [19:50] do any of the breweries you've been to in NZ do black IPAs? i'm not sure how common they are outside the us [19:53] Yes! [19:53] we do a West Coast IPA challenge every year here, where each NZ brewery submits an IPA to compete [19:54] this year Epic did No Agenda - http://www.ratebeer.com/beer/epic-no-agenda/349452/ [19:54] hrm they call it a brown ale. I assure you its very black... [19:54] Epic also does Apocalypse which is a true black IPA, pretty tasty too - http://www.ratebeer.com/beer/epic-apocalypse-ipa/267920/ [19:55] ipa are even in the supermarkets. [19:56] baylands Enforcer is awesome too - https://untappd.com/b/baylands-brewery-enforcer-black-ipa/387548 [19:56] Black IPA / Cascadian Dark Ale [19:56] That's what she said!! [19:56] BryceBot: oh hai [19:57] right on [19:57] one of our local breweries, bosque brewing, did a 4 beer ipa called "monsoon series" and the final one was a black ipa [19:57] ipa series [19:57] mmm [19:58] we have a group of local brewers who go by the name of the 4 horsemen of the hopocalypse [19:58] they do a ridiculous beer every year just cause they can [19:58] lol [19:58] this years was a triple IPA at 14% [19:58] jeeeeesus [19:59] sooo good though, they actually managed to balance all the bitterness so it was tasty [19:59] but yeah it kinda kicked your butt very quickly [19:59] was it super boozy? [19:59] I was pretty happen after 300mls [19:59] s/happen/happy [19:59] I was pretty happy after 300mls [19:59] haha, i bet [19:59] that's wacky abv [20:00] biggest one they've done [20:00] last years was 11% [20:00] but wasn't as balanced [20:00] 14%?! [20:00] funny that they refined it w/higher abv [20:00] it's tough to nail that [20:00] I think they worked out how to get more malt in there somehow [20:00] alcohol content gets higher and it gets tougher to balance out the alcohol taste so it's not entering spirit territory [20:00] yeah true [20:01] was drinking some mikeller the other week though [20:01] black horizon. [20:01] I didn't know what happened to my taste buds after that one [20:01] man, i wish we still got mikeller here. the distributor who used to bring it here stopped carrying their whole line [20:01] wait no it wasn't that one [20:01] i loved green gold (i think that's what it was called) [20:02] ah it was just the mikerller black - http://www.ratebeer.com/beer/mikkeller-40657--black-tequila-speyside-edition/178448/ [20:02] 18.8% [20:02] whaaaaat [20:02] hahaha [20:02] tequila/speyside infused [20:02] and yes it was very much hot alcholo on the palate [20:02] i'd rather 7% :/ [20:03] wow, crazy [20:03] if you can get a hold of any of hte mikkeller blacks they are so tasty [20:03] so tasty that you want another? and another? [20:03] i haven't seen it in a long time, probably 4-5 yrs [20:03] * gizmoguy feeling lucky [20:03] That's what she said!! [20:03] i'll make a reminder to look at liquor stores when i go up to CO in october, since they get tons of stuff we don't [20:04] we did a sort of beer vacation up in durango, co during july [20:04] lots of good breweries within walking distance of each other [20:05] so when drinking these high alcohol % beers how many do you normally have? [20:06] mercutio: you usually have tasters [20:06] do you just drink one or two then have normal beer? [20:06] ~130ml [20:06] oh [20:06] OH [20:06] i thought it'd be like 330ml, or 500ml. [20:06] make more sense? :) [20:06] hahahaha [20:06] the bottles are [20:06] but when we do it, we split a bottle between 6 or so [20:06] ok that's a bit different [20:06] since the bottles are usually $50 a bottle or so [20:06] ahh [20:06] i'll occasionally have a single 650ml bottle of a 10-12% (usually stone russian imperial stout or similar) and that's it [20:06] jeez [20:07] pricey [20:07] yeah unfortunately we pay a high price to get good beer here :( [20:07] @exch 50 nzd to usd [20:07] BOOOO [20:07] 50 NZD -> 32.482149434778 USD (as of Tue, 25 Aug 2015 20:00:08 -0700) [20:07] there's a really good Wellington importer [20:07] we pay heaps of taxes on alcohol too [20:07] need to arrange airships or drones or something [20:07] but they're almost too good, they buy refrigerated shipping all the way from the USA to NZ [20:07] which costs a bit [20:07] wow, that's awesome [20:07] yeah the quality is amazing [20:07] That's what she said!! [20:07] the price not so much [20:07] lol BryceBot [20:07] heh [20:08] and there i go buying cheap beer :) [20:08] http://beerwithoutborders.co.nz/ [20:08] the imports we get from EU end up being ~$15-20 for a 650ml bottle [20:09] local stuff at the brewery tends to be $3-6/pint [20:09] depending on how fancy it is [20:09] http://www.cultbeerstore.co.nz/collections/ipa/products/ballast-point-big-eye-ipa-1 [20:09] that seems more affordable :/ [20:10] ballast point stuff is great [20:10] their sculpin ipa is amazingly good [20:10] and 7% is more reasonable [20:10] i'm a big fan of their sculpin and grapefruit sculpin [20:10] <3 sculpin [20:11] probably expensive shipping [20:11] https://goo.gl/photos/69mZkLsoT3jTeD1r9 [20:11] https://goo.gl/photos/69mZkLsoT3jTeD1r9 -> https://photos.google.com/share/AF1QipOptrg_b2Ug7ruW-FqYOuVoHrirKWCA0OlCejGDoyWfDoYwABO5TFqYYWH7VSSzYw?key=dnFTSElXVnJEeGM1SFRXTk1PS25Sa1YzVmVHdlRR [20:11] $6 shipping i suppose not too bad [20:12] green flash is good too (looking at the US offerings on that site) [20:12] i wonder if there's some sampler pack [20:13] wow, some of these mikkeller sours sound amazing [20:14] and expensive? :) [20:14] i dunno spending $18 on a single bottle of beer seems insane to me [20:14] *** mnathani_ has joined #arpnetworks [20:14] however i look at it [20:15] i look at it like a bottle of good wine [20:16] i can't have a lot of wines because tons of them are fined w/egg whites and i'm allergic to eggs [20:17] heh i buy cheap wine too :) [20:19] the most expensive stuff i buy is like $9 for 650ml, and that usually gets put in the beer cooler to age [20:19] like the le terroir i mentioned, i typically buy two bottles each release, drink one and cellar the other til the next year's release [20:19] well that mikkeller sour stuff was $18 for 355 ml [20:19] $9 for 650ml doesn't seem so bad. [20:20] it helps that i'm not thousands of km from new belgium :) [20:20] could do [20:20] but uk is cheaper for shipping than us often [20:20] for some strange reason [20:21] huh [20:21] for normal postal mail stuff [20:21] beer problem comes from sea [20:21] and could be different [20:21] oh, i don't think the US permits alcohol via USPS [20:21] more competition maybe [20:21] oh right [20:21] and i think you have to ship direct from a distributor or wholesaler [20:21] so fedex or ups [20:21] i was more meaning distance doesn't necessarily dictate cost [20:21] i've bought bottles of whiskey online, shipping sucks inside the us too [20:22] right [20:22] seems like it might to a degree when you can get $50 bottles of beer [20:22] alchol shippining within nz is cheap [20:22] normal coureirs will deliver it [20:22] i think i paid like $20 for overnight fedex from ca -> nm [20:23] yeah that's a lot more distance then we have possible here :) [20:23] or is it [20:23] yeah [20:23] i think my state is only slightly smaller than nz [20:23] * m0unds consults wolframalpha [20:23] yeah [20:23] it's right on the other side of mexico [20:23] right? [20:24] NM is 85% the size of the land area of nz [20:24] oh hangon it's gone to nm, texas [20:24] what [20:24] you mean new mexico right [20:24] yes [20:24] nm is the 5th largest state in the us behind alaska, texas, california and montana [20:24] @conv 1436km to miles [20:24] hmm maybe that doesn't work [20:25] 892.3 mi [20:25] actually using a different city, it's the same distance as invercargill to auclkand [20:25] basically [20:25] .89 x distance the Proclaimers would walk, just to be the man that walks a thousand miles to fall down at your door [20:25] lol [20:25] i was using dunedin before [20:25] dunedin is more of a major city than invercargill [20:33] i think that's around the distance from where i live to LA [20:33] actually no [20:33] oh, that's direct [20:33] 789 mi [22:41] *** Kysade has joined #arpnetworks [22:41] hey anyone here? [22:41] Hi [22:43] I have a subdomain question for a vps, i understand how to add a sub domain with host file and apache, i dont understand how to make it any port other then one port at a time [22:44] i have tried using * for the port in the vhost file but it didnt work, i am using one sub domain to host a website on port 80, a game on port 25565 and an irc channel on 6676 6680 and 8070 [22:49] Kysade: this is an apache webserver question. try #httpd [22:50] thank you [22:50] Kysade: https://wiki.apache.org/httpd/IRC [22:50] that page is confusing [22:51] noone is on their ill ask in like windows forums or something [22:54] thanks for helping tho milki [22:59] apache configuration is hard [23:01] Kysade: I can recommend nginx if you're interested in an alternative to Apache [23:02] * milki nods [23:02] ill look into it, thanks [23:04] configuration file doesnt even need a port set in nginx, i should convert that seems much easier [23:04] Is anyone automating their FreeBSD installs? [23:06] Kysade has seen the light! [23:15] that was so much easier, everything is working just fine [23:33] *** Kysade has quit IRC (Quit: Leaving)