#arpnetworks 2010-11-10,Wed

jpalmer

not right off hand (I'm never messed with zfs yet) but I'm pretty familiar with gmirror, and geli. both require manual install.

fink

cedwards: i didn't see much of a difference between doing it manually and the scrpit
that script sure made typing all those commands easier…

cedwards

I'd be interested in starting simple with gmirror before I get into RAIDZ

ww: http://en.wikipedia.org/wiki/Skynet_%28Terminator%29

with zfs can't you add disks to the pool post hoc/
?

[10:41]

cedwards

probably. as I understand it, zfs is all powerful and will be the filesystem of SkyNet ;)
(was that Terminator reference a stretch? ;) )

[10:42]

fink

no, it was apt

[10:43]

cedwards

actually, on the topic of skynet...
yesterday a co-worker and I were discussing the Oracle/Sun buyout. I determined that if any company had smart enough engineers to create sentient robots it would have been Sun.. and if any company was evil enough to destroy mankind it would be Oracle.
Oracle now has the pieces needed to start skynet and destroy us all!

[10:43]

fink

is java on its way out?

[10:46]

ww takes everyone's world about skynet... /me figures it must have something to do with skytv...

[10:47]

fink

ww: it's from the terminator movies

[10:47]

skytv probably shows terminator movies now and then...
ww *shrug* ;)

[10:48]

cedwards

[10:49]

RandalSchwartz

raidz rules
you can build a nice raid box with cheap fast disks now
and rely on raidz to catch the problems

[10:50]

cedwards

well I think I'll tinker with raidz then

[10:54]

kitkatbar

RandalSchwartz: i got a slave nameserver setup with ns1.he.net, so i pointed ns2.nullbnc.com to the ip of ns1.he.net and i still get no reverses :/

[10:54]

RandalSchwartz

does ns1.he.net have the right SOA and data?

[10:55]

kitkatbar

it's just a slave

[10:55]

RandalSchwartz

yes. has it refreshed?
it needs to have a copy of all of the data
host -t soa $YOURDOMAIN ns1.he.net
make sure it has that data there
and the right soa
the dnscheck would reveal that

[10:56]

kitkatbar

i just checked, it refreshed a few minutes ago :)

[10:56]

RandalSchwartz

ok - so, delegation is right, and the right data is in the DNS
what happens when you try to do the reverse?

[10:57]

kitkatbar

is it dig @ns1.nullbnc.com 0.c.4.3.8.f.etc.ip6.arpa.
nslookup -type=AAAA six.nullbnc.com returns an answer :D

[10:58]

RandalSchwartz

dig -x fb34:XXXX:XXXX::1
or whatever you have populated
for example, "dig -x 2607:f2f8:3080::
that gets my reverse for red.stonehenge.com

[10:58]

kitkatbar

oops accidently dig'd yours lol
was just checking :D

[11:00]

RandalSchwartz

hey I don't care. :)

[11:00]

kitkatbar

hmm
says status: NXDOMAIN

[11:00]

RandalSchwartz

use +trace
see where it stops

[11:01]

kitkatbar

. 506278 IN NS j.root-servers.net.
;; Received 272 bytes from 174.136.101.162#53(174.136.101.162) in 0 ms
. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010111000 1800 900 604800 86400

[11:02]

RandalSchwartz

you're getting the right delegation
so it must be you have a broken named.conf file or a broken domain file
as in, that -x got to you, and then you said "NXDOMAIN"
can you pastebin both?

[11:06]

kitkatbar

yea

[11:07]

RandalSchwartz

maybe you don't have the right number of 0.0.0.0's :)
there should be 32 digits total, if I recall
yeah... 32 x 4 = 128

[11:07]

kitkatbar

haha
that was it
oddly enough, not enough 0's
wtf
kitkatbar kicks himself in the butt
i guess i owe ya one
hehe

[11:09]

jpalmer

didn't I mention yesterday (or the day before?) to pad the number of zero's in the PTR record? ;)

kitkatbar

yah but i wasn't counting

ww wonders about dnssec for reverse zones...

kitkatbar

because the $origin had extra four 0's

jpalmer

ahh. gotcha. yep, having the right number is definately going to help ;)

kitkatbar

when he specified 32 digits
i counted, and i was short :P
thx jpalmer- you were of great help too
i can't believe it works now, i knew it was something stupid i overlooked

[11:12]

jpalmer

np, sorry I had to run away the other day. work called. glad you got it figured out though.
speaking of work.. time for a conference call.

[11:13]

kitkatbar

i might should write a guide for debian on how to setup ipv6 and bind with ipv6 & reverse zone
for the arp wiki

[11:13]

RandalSchwartz

so this is the third time I've suggested something, and that was it. :)
nice
I have my $ORIGIN to be exactly what the entire file is about
in that sense, it's probably redundant. :)
Oh wait... no, I'm defining stuff in a /64
so I have $ORIGIN to push enough 0's behind my 48

[11:14]

Sabrii

re
hi, is there anyone from Arp networks here?

[11:20]

toddf

seems rather a waste to describe bind with ipv6 and reverse zones and confine it to one os

[11:20]

kitkatbar

yea but the current openbsd ipv6 guide is way different than what i did

Sabrii

PING 1289416958 433571

kitkatbar

so i guess i could write what works in debian and should work in any linux distro

Sabrii

guess not

***

kitkatbar has quit IRC (Quit: leaving)

toddf

$line =~ m/^([^ ])+[ ]+([0-9]+) /
guh, how many times did I stare at that before I realized the + was on the outside of the parenthesis?

***

kitkatbar has joined #arpnetworks

RandalSchwartz

how many? :)

toddf

too many ;-(

RandalSchwartz

or not enough, until you saw it. :)
damn perl
just makes your life hard. :)

http://www.opusinteractive.com/blogs/Growing-the-Filesystem-in-a-FreeBSD-Server/637.html

toddf

"it works but it only shows one char in $1, wtf?"

[11:24]

RandalSchwartz

yeah - that's the other odd thing...
(...)+ - you can't get all the times that matched
only the final one
until Perl6, that is

[11:24]

toddf

oh joy

[11:25]

RandalSchwartz

the match variable has an arrayref at that point
which collapses to the last item in a scalar context, so it's like old behavior

[11:25]

toddf

sneaky

[11:25]

RandalSchwartz

that means you can do things like ((...)+(..)+)+ and get all levels
tree return

[11:26]

toddf

somewhere in there ENOMEM

[11:26]

RandalSchwartz

heh
you can say "don't capture" too
like in Perl5 but more sane syntax
no more (?: .. )

[11:26]

***

andrewnemeth has joined #arpnetworks

[11:33]

andrewnemeth

hey guys
how can I resize freebsd root partition?

[11:33]

toddf

grow or shrink?

[11:34]

andrewnemeth

grow

[11:35]

***

schmir has joined #arpnetworks

[11:39]

jpalmer

have you got unallocated disk space in your VPS?

[11:39]

andrewnemeth

yes

[11:40]

jpalmer

ok, you'll need to use the growfs command. there is a section in the freebsd handbook on doing this. let me see if I can find the url

[11:40]

andrewnemeth

[11:42]

jpalmer

andrewnemeth: that looks like it'd work. make sure you have backups first. and keep in mind also.. you generally want your root FS to be as small as possible, so that after an improper shutdown, your machine can fsck / quickly, and boot. the root partition cannot do a background fsck.. the others can.

andrewnemeth

that would be better to have the unallocated space to /usr?

jpalmer

(meaning, the whole time it's doing the fsck on /, your machine is going to be "down"

andrewnemeth

im absolutely beginner
dev/ad0s1a 243M 208M 16M 93% /
thats the only partition I have now
usr is not mounted seperatelly

http://pastebin.com/Gy0nZ9dT

jpalmer

generally speaking, my / partion is either 256 or 512m. *never* anything more.

[11:45]

andrewnemeth

I see
so
usr is the biggest?

[11:45]

jpalmer

well, the default arpnetworks freebsd vps has one / partition. but I would strongly encourage you to reinstall, and do a standardized partion scheme

[11:46]

andrewnemeth

so should I allocate the free space to /usr?

[11:46]

jpalmer

keeping in mind, I cannot tell you what partition sizes you need, because I don't know your plans.. but generally yes; /usr is the largest partion.. by far.

[11:46]

andrewnemeth

and if I want to allocate the free space to it and mount /usr as seperate partition should I follow this hwto?
or that can be done easier?

[11:47]

jpalmer

if you're an absolute beginner, I'd follow the arpnetworks FAQ on reinstalling the OS. then choose the "default" partition scheme. it'll be a great start for the beginner.

[11:48]

andrewnemeth

well I dont really want to reinstall
:)

[11:49]

jpalmer

I'd strongly recommend it. but, it's your VPS ;) do whatever you think is best for you.

[11:49]

andrewnemeth

any howto to mount /usr and add free space to it?
:)

[11:50]

RandalSchwartz

my freebsd root is on ZFS
so I never have to worry about this. :)

[11:50]

jpalmer

the same howto you just linked, give the essentials. just modify the commands for the appropriate partitions and sizes.

[11:51]

andrewnemeth

[11:51]

well

this is the current state now
I assume I need to remove partition 2,3,4
and create one big
then mount /usr to it
m I right?

[11:58]

...... (idle for 28mn)

***

kitkatbar has quit IRC (Quit: Lost terminal)
andrewnemeth has quit IRC (Quit: andrewnemeth)

[12:27]

................... (idle for 1h31mn)

schmir has quit IRC (Ping timeout: 245 seconds)

[14:00]

...... (idle for 28mn)

nakano is now known as nakano_

[14:28]

................. (idle for 1h20mn)

nakano_ is now known as nakano

[15:48]

.... (idle for 15mn)

Sabrii

does anyone know where the arpnetwork admins are located?

[16:03]

RandalSchwartz

"where"?
as in physical space?

[16:03]

jpalmer

Sabrii: california

Sabrii

ah ok thanks

RandalSchwartz

Sabrii - how is that important? :)

Sabrii

it would explain when they will answer to e-mail
if they are in another timezone, it will take a while

RandalSchwartz

no - it explains nothing :)
support here is generally 24-48 hours

[16:05]

Sabrii

I'm talking sales
that is usually faster ;)

[16:05]

RandalSchwartz

ditto
no - not necessarily
since it's the same guys
frequently 24 hour response, sometimes 48. but don't expect faster.

[16:05]

Sabrii

interesting business model

[16:06]

RandalSchwartz

yes - keeping costs down by not giving you 15 minute responses
you're expected to be a relatively knowledgable and slightly patient customer
if you don't want to be that, there are other VPS offers

[16:06]

Sabrii

I am knowledgable enough, trust me on that one

jpalmer

I'll exchange fast support, with reasonable costs and rock solid performance any day.

Sabrii

patient however... :)

RandalSchwartz

again, if you're not patient, you'll be happier elsewhere. seriously.

Sabrii

there are not a lot of businesses that offer FreeBSD vps

RandalSchwartz

I'm all for ArpNetworks making money

Sabrii

and I -hate- linux

RandalSchwartz

but they don't need impatient customers
it's bad for everyone

jpalmer

Sabrii: then I'd suggest patience ;)

Sabrii

but I want it now now now now now now
and a pony
just kidding
I was just informing guys
I have time
just curious on the expected timerange

jpalmer

Sabrii: I'll tell you right now.. once the vps is up, you won't NEED support. it really is that solid. but if you are one of the "now" types, it's probably not the right fit for you.

[16:09]

Sabrii

oh mine is up
it's working great
I just need some additional features
by next week or so

[16:09]

RandalSchwartz

what kind of features?

[16:11]

Sabrii

IP space
and if possible, BGP

[16:12]

RandalSchwartz

IP is easy
I don't think BGP is offered

[16:12]

Sabrii

just but I want it a slightly different way than usual :)

RandalSchwartz

presuming you need only a /29

Sabrii

yeah

RandalSchwartz

how differently?

Sabrii

I have a /22 and an AS number
oh the /29 I need routed towards my VPS
so I can stick it into a VPN

RandalSchwartz

so you can get a a /29 from ARP
but that won't be part of your /22

Sabrii

that's exactly what I don't want, ARP. I would like to have it routed, if possible

RandalSchwartz

RandalSchwartz can't parse that sentence
you get a public /29
it routes via the retail networks

Sabrii

aah ok sorry
let me explain
by ARP, you mean ARP networks. I read "route via proxy arping"

RandalSchwartz

nope
I didn't mean RFC826 :)

[16:15]

fink

heh

[16:15]

Sabrii

that's what you get when you choose your company name after a protocol :)

fink

i'm going to start a rival to arpnetworks, called pingnetworks!

RandalSchwartz

but he didn't.. he just liked the name.
rarpnetworks!

fink

RandalSchwartz: maybe ARP is an acronym?

RandalSchwartz

maybe fink is an acronym? :)

Sabrii

fink: Address Resolution Protocol sounds fine

nesta

fink: you will beat my pongnetworks !!!

RandalSchwartz

one-ping-only-networks
Sean Connery as the CEO

fink

lol

Sabrii

I prefer Clint Eastwood as the CEO

nesta

woops
fink: you will never beat my pongnetworks !!!*
lol

RandalSchwartz

anyway, what's your actual question?

Sabrii

"Go ahead, Ping my day"

RandalSchwartz

you want a /29, you can have it, generally
bigger is harder

nesta

nice quote RandalSchwartz
lol

Sabrii

so I would like a /29 routed towards my VPS, so not as part of a subnet with the .1 on their routers

RandalSchwartz

still didn't grok that

Sabrii

RandalSchwartz

you get a /29, and they steal the bottom address for the routeer

Sabrii

yes, exactly what I don't want

RandalSchwartz

so you get 14 usable

Sabrii

count again

RandalSchwartz

13
yeay

Sabrii

a /29 is 8 ips
a /28 is 16 ips

RandalSchwartz

uh, what?
ok - right

Sabrii

RandalSchwartz

so I have a /28
with 13 usable

Sabrii

yes

jpalmer

Sabrii: I suggest you cement the idea in your head (figure out exactly what you want to do) then find a very clear way to articulate that. because I'll be honest.. if you submit a support ticket stating what you've said so far.. I doubt they'll be able to figure out specifically what you need/want.

RandalSchwartz

and what's wrong with that?
how many addresses do you need?

Sabrii

jpalmer: anyone who understands networking (ie ccna level or higher) will understand it

RandalSchwartz

Sabrii - I've been doing IP traffic since before it was called IP
and I don't get it

Sabrii

RandalSchwartz

ccna be damned

Sabrii

then you will understand this:

jpalmer

I understand networking fine. I'm still 100% unclear as to what it is you want.

RandalSchwartz

yeah, jpalmer is no slouch either

Sabrii

ip route 1.1.1.0 255.255.255.248 myvps
does that help? :)

RandalSchwartz

and you need to have an outbound route
and that's the first addr
so from 16 total addresses
you get 13
how hard is that to understand?

[16:21]

Sabrii

*bangs head against wall*
you don't understand IP, clearly
so nevermind

[16:21]

RandalSchwartz

jpalmer - Sabrii doesn't know who I am, clearly :)

Sabrii

I'll wait patiently for someone who does
no I don't

RandalSchwartz

RandalSchwartz imagines what waiting for the heat death of the universe is like

jpalmer

RandalSchwartz: you clearly don't understand networking. you need a ccna. duh

Sabrii

ok
let me try it again

RandalSchwartz

Sabrii - what is the OUTBOUND route on your VPS?
where are you sending traffic *TO* the internet
it has to be a valid IP

Sabrii

the /30 that is inbetween right now

RandalSchwartz

so the .1 is taken

Sabrii

I want to keep the /30 that there is right now
so here is the deal
my vps has 174.136.109.210

[16:23]

RandalSchwartz

if you ask for a /28, it will *include* your /30

Sabrii

my default gw is 174.136.109.209

RandalSchwartz

I know, we've already done this

Sabrii

ok
so that is there
now

fink

RandalSchwartz: man, you just don't get IP

Sabrii

174.136.109.209 is a router
right?

RandalSchwartz

well - it's a virtual interface to a virtual router table entry, sure

Sabrii

aah ok
no that explains something
I'm not very familiar with virtualization

RandalSchwartz

ignore me then

fink

Sabrii: what is it exactly that you want to do?

RandalSchwartz

pretend it's hardware
I was just being pedantic

jpalmer

fink: we're still trying to figure that out.

Sabrii

fink: I want to route a /29 into an openvpn tunnel

RandalSchwartz

so you want to buy a /28
and route half of that into your tunnel

Sabrii

if 174.136.109.209 would be a cisco router that would be very simple

RandalSchwartz

makes sense
no problem

Sabrii

uhm, but then I would have to proxy arp for the /29

fink

Sabrii: ok, why do you want to do that?

RandalSchwartz

proxy arp?
the word is "routes"
routes don't need no stinking proxy arp

[16:27]

Sabrii

RandalSchwartz: exactly my point

[16:27]

RandalSchwartz

let's use 0-based
so in your /28, .0 is net, .15 is mask, .1 is router
you create .2
you route by hand .3, .4, up to .14 into your tunnel
via NAT
your tunnel endpoint on this end is .2
and you tell the other end to go to this end .2
seems straightforward to me

[16:27]

Sabrii

hmm, I'm pretty speechless now
I'm sorry to have bothered you guys

[16:29]

***

Sabrii has quit IRC (Quit: leaving)

[16:29]

RandalSchwartz

but the real thing is, why is he vpn'ing his public IPs
he should VPN private space

jpalmer

RandalSchwartz: clearly, you don't know networking. but you fake it well.

RandalSchwartz

indeed

jpalmer

lol

RandalSchwartz

enough to make him "speechless" :)
Oh - I get it... he wants his public IP on this side to go to private machines on the other end of the tunnel
yeah, that makes sense

jpalmer

either he realized it, or he still didn't get it and felt he was wasting his time. either way.. he could have been a little less argumentative and dismissive, and a whole lot more clear on his goals.

[16:31]

RandalSchwartz

indeed
as Garry has told me from time to time "those aren't the customers we need" :)

[16:31]

nesta

he was just trying to get some help
and he got it
:)

fink

yea, poor guy
heh

RandalSchwartz

heavy polution in the air here in LA. very orange sunset

fink

RandalSchwartz: you should charge for that, next time

nesta

eeeeee RandalSchwartz

jpalmer

there was an ISP a while back.. I want to say hawaii.. but they only accepted customers with a clue. if you called tech support, they asked for your account number. once you provided it, they didn't offer support. they cancelled your account.

RandalSchwartz

why do you want to say hawaii?
is that like tourette's syndrom, but with states?

nesta

sounds pretty lame

jpalmer

I think they were based in hawaii

RandalSchwartz

Oh - that's why you wanted to say that. :)

jpalmer

damned pedants :P

RandalSchwartz

RandalSchwartz wanders off, looking for happier hour

mjp

'hey, stop saying hawaii in there'