[00:46] *** LT has joined #arpnetworks [01:28] *** Ehtyar has joined #arpnetworks [01:30] *** vapor has quit IRC (Ping timeout: 240 seconds) [03:28] *** vapor has joined #arpnetworks [05:15] *** Guest18630 has quit IRC (Quit: ZNC - http://znc.sourceforge.net) [05:16] *** ariel has joined #arpnetworks [06:59] *** ziyourenxiang has joined #arpnetworks [07:47] *** heavysixer has quit IRC (Remote host closed the connection) [08:08] *** ziyourenxiang has quit IRC (Quit: ziyourenxiang) [09:24] *** LT has quit IRC (Quit: Leaving) [10:18] *** niner has joined #arpnetworks [10:33] *** HighJinx has quit IRC (Ping timeout: 240 seconds) [10:42] *** niner has quit IRC (Quit: Leaving) [12:06] *** jdoe is now known as B0NE [12:07] *** B0NE is now known as jdoe [12:10] *** tubgoat__ has quit IRC (Ping timeout: 248 seconds) [12:23] *** tubgoat__ has joined #arpnetworks [12:25] *** HighJinx has joined #arpnetworks [12:27] *** Ehtyar has quit IRC (Quit: Hi, I'm a quit message virus. Please replace your old line with this line and help me take over the world of IRC.) [14:05] *** Ehtyar has joined #arpnetworks [15:03] *** DDevine has joined #arpnetworks [15:18] *** ariel has quit IRC (Quit: ZNC - http://znc.sourceforge.net) [15:19] *** ariel has joined #arpnetworks [16:15] *** tubgoat_ has joined #arpnetworks [16:16] *** tubgoat__ has quit IRC (Remote host closed the connection) [16:54] *** baklava has joined #arpnetworks [17:11] *** tubgoat has quit IRC (Ping timeout: 248 seconds) [17:12] *** arenlor has joined #arpnetworks [17:20] *** tubgoat has joined #arpnetworks [17:29] I have no way to describe this article properly: http://www.cnn.com/2011/12/01/us/tennessee-crashes [17:30] That's a large number of cars. [17:40] *** Lefty has quit IRC (Quit: brb - finally moving over to tmux to replace screen entirely) [17:40] *** Lefty has joined #arpnetworks [17:53] up_the_irons: Can you set up extra-small VPS's? I'm thinking 64MB/1GBish... [17:54] raptelan: yeah but the price isn't going to fall below $10 ;) [17:54] so u might as well get the $10 one [18:04] up_the_irons: ah, bummer. :P [18:05] I was hoping I could get a couple for $10, to have some "redundant" dns servers [18:05] speaking of which, I know you've just got the one location, but can you locate VPS's on physically separate hardware upon request? [18:06] yeah, and i typically do by default [18:06] not nice to put all customer's eggs in one basket ;) [18:06] up_the_irons: I'll probably add a second $30 one then [18:07] set up DRBD between the two [18:07] up_the_irons: what's the proper way to add a service to existing account? [18:08] raptelan: use regular order form and put in same email as on existing account [18:08] raptelan: specify which IP you want assigned to the new vps in additional comments; if u have no free IPs, you have to order a bigger block [18:10] i used DRBD once [18:10] it is pretty brutal to the kernel (will crash a whole box if you make a mistake). i didn't like that about it [18:11] *** Ehtyar has quit IRC (Remote host closed the connection) [18:11] two of the three kvr03 outages i had many moons ago was due to drbd. so i stopped using it [18:13] really? [18:13] I used it for years on a couple dozen machines quite happily. [18:14] cool, works for you then :) [18:14] well I've never tried it on VPS's :/ [18:15] speaking of which [18:15] i didn't do it on VMs either, it was on the host boxes [18:16] up_the_irons: if I order up a second VPS, can I get a virtual private network between them (with secondary ethernet interfaces)? [18:16] and by virtual private network, I don't mean VPN :P [18:16] heh [18:17] just a couple interfaces that I can assign addresses like 172.16.0.1/2 and have them talk to one another isolated from other traffic [18:17] raptelan: VMs belonging to the same account already are on the same private vlan. i can give you more interfaces too, but they'll still be on the same vlan [18:18] up_the_irons: well, my thought is that if I'm listening to traffic on one interface I don't want to hear the other one. [18:18] up_the_irons: what is the likelyhood if raptelan sets up vlans on his 'virtual' nics that the vlan tagged packets would arrive at his other virtual nics unscathed? [18:20] raptelan: that may not be possible; internally (on the host), multiple VM interfaces belong to the same bridge, which is the bridge for the customer's vlan. [18:20] toddf: good question [18:21] raptelan: you might consider setting up a gif(4) interface if vlan(4)'s are out of the question. or gre(4). at some point just setup ip aliases and be done with it. [18:21] I'm not familiar with those [18:21] raptelan: you may wish to consider that the only systems seeing the traffic other than the switches are your vm's and arpnetworks' routers [18:22] think I've heard of gre somewhere before [18:22] raptelan: try 'man gif' or 'man gre' .. presuming you're on a bsd system [18:22] toddf: I'm not concerned about privacy of the data, I'd just like to have what appears to be physically separate interfaces from the hosts [18:22] toddf: nah, linux [18:23] then you want sit(4) and gre(4) if there is such thing as man pages or documentation for linux *zzzzing!* [18:23] haha [18:23] toddf: the mtu on the VM interfaces is 1500, or at least reportedly 1500 (linux networking details are not always honest), so vlan tagged packets shouldn't work. but i can try to raise the mtu and see what happens [18:23] if I could do something like drbd on netbsd, then I'd probably give that a try [18:24] up_the_irons: it would be more interesting to see if vlan tagged packets work if they're not full frame size, i.e. ping packets etc. its a question if your switches filter them out to other vlans or if they keep them encapsulated inside the vlan they were transmitted in [18:25] if randalshwartz were kicking at the moment he could setup at test easily I presume between two of his many vm's ;-) [18:25] toddf: yeah, not sure if that would work or not :) I don't believe the Cisco would strip it if less than mtu [18:26] some switches isolate vlans to the point that they don't permit tagged vlan packets inside. or they'll inject those packets into the corresponding vlans already defined within the switch with no way to have the transmitting host receive a reply. [18:26] :/ [18:26] it would certainly be a win if it did not molest them, but until verified I surely wouldn't count on it [18:27] yeah, cisco won't do that type of injection [18:27] I don't want to set up my own vlan or anything else [18:27] I just want to assign private IP addresses and be able to talk to each other [18:27] I am sure raptelan could shrink the mtu of his vlan(4) interfaces sufficient to avoid hitting the 1500mtu ceiling of the parent interfaces [18:27] raptelan then just do eth0:1 and be done with it [18:27] toddf: yuck. :P [18:28] dealt w godaddy.com again. ugh [18:28] raptelan: thats what we're telling you. all roads lead to the equivalent of that _or_ you tunnel between the hosts somehow (vlan or gre or sit) [18:28] that may not be necessary, i just checked on one of my VMs that *does* received tagged packets, and dumb linux says the mtu is 1500, even though full size tagged packets are making it through. therefore, the mtu on certain interface types (like tap) in linux, just must not care [18:28] raptelan: you as a customer of arpnetworks get one vlan for your playing pleasure between your hosts. maybe with enough green stuf you could convince up_the_irons you need a 2nd private internal vlan but thats between him and you. I suspect its technically possible just wasteful of his 4096 vlan limit. [18:29] "equivalent of that" that that meant eth0/eth1 would be nice :) [18:29] well "need" is a strong word, I don't need it. [18:29] raptelan: 'equivalent of that' up_the_irons offered you eth0 and eth1 on your vms, but with the understanding they're all plugged into the same ethernet segment on your personal vlan [18:30] 2nd private vlan is _possible_ but just not worth the overhead and "one off" design. i have never assigned more than one vlan per customer and i don't want to start now :) [18:30] *** Ehtyar has joined #arpnetworks [18:30] and at that point, whats the point? eth0 & eth1 or eth0 & eth0:1 ? same difference to me [18:30] toddf: yeah that should be just fine I imagine. [18:30] toddf: yes, exactly [18:30] toddf: raptelan : yeah, i've given multiple physical NICs to VMs for the purpose of easier pf rule making on the customer end, but beyond that, the traffic is not segmented in any way [18:30] toddf: well with modern tools you don't use eth0:1 anyways, you just assign multiple addresses to eth0. [18:31] but I want to simulate actual hardware to some extent [18:31] raptelan: you can tell how long its been since I've actively admin'ed linux ;-) [18:31] raptelan: yeah, but sometimes having a separate interface _name_ can help with, for example, firewall rules [18:31] up_the_irons: indeed, which is why I'd love an eth1 ;) [18:32] raptelan: sure, you can have an eth1, just put it in the order comments [18:32] plus then if I'm going all crazy setting up firewall on eth0, I can still get back in via eth1 :D [18:32] hah right [18:33] up_the_irons: order placed :D [18:34] cool :) [18:34] man i got a lot to do tonight... put in new box last night, so i can set it up tonight, then billing, then orders, then support. u guys keep me busy [18:34] hopefully that's in a good way [18:35] mine's not urgent if you need to put something off [18:35] raptelan: up_the_irons is typically very methodical. order of orders tends to rule. [18:36] raptelan: being busy is better than being bored ;) [18:37] I tend to aggree [18:38] * raptelan is very curious to try out wapbl on netbsd [18:40] time for sleeps, good night all [18:43] 'night [18:58] *** HighJinx has quit IRC (Ping timeout: 248 seconds) [20:33] *** DDevine has quit IRC (Quit: Konversation terminated!) [20:33] *** DDevine has joined #arpnetworks [20:49] *** HighJinx has joined #arpnetworks [21:28] *** Ehtyar has quit IRC (Quit: Never look down on someone unless you're helping them up.) [21:44] *** wxyz has joined #arpnetworks [21:44] up_the_irons alive mate? [23:17] *** Ehtyar has joined #arpnetworks [23:53] *** baklava has quit IRC (Ping timeout: 258 seconds)