mercutio, up_the_irons: My v6 only hosts are mostly for testing, but I have a pair of database servers who don't need to talk to anything outside the local network which are v6 only too
brycec: plett : ah, good choices
brycec: mercutio : are you guys talking about SNI?  http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
brycec: mercutio : if so, the browser support list, as written, at least looks pretty broad at this point
mercutio: the txt record stuff for HA is actually supported somewhere in an SRV record, i've heard, but i don't know what the browser support is
up_the_irons: well it makes sense now emali etc is doing similar
jabber uses srv records too
i haven't done sni before
maybe it's not too bad now
btw up_the_irons looks like virtio is fine
now for openbsd 5.3 to come out
5.2 is coming out shortly
so i think 5.3 is in may
oh, and non-virto sucked pretty badly, so may still be worth checking scsi drivers
mercutio: so 5.3 will have it by default?
if you want me to switch arch to scsi, lmk, but i don't suspect it'll make a difference
yeh
5.2-current does too
which is diff from 5.2
well it was mostly for knowing what'll work with stable version
not going to look at it tonight thoguh
it's not a huge risk running a stable -current
but it's not really best practice
CaZe: how often do you align your OEP?
up_the_irons: ah yes SNI, that's what it's called. Good to see its support is broadened... though there are some relatively significant holes in support, like Android pre-Honeycomb, Apache pre 2.2.12, Windows XP, wget pre-2011, and Python 2.x
For those looking to test it out https://alice.sni.velox.ch/
man this freebsd vps is so screwed
pkg_config -a just spits a million errors about not being able to find packages
i need to rebuild all packages registered with pkg_config
er
pkg_info even
portmaster -a ?
or portupgrade, whatever way you swing
yeah i might have to give that a shot
i'm sure something will break along the way though
yep, can't upgrade perl
amazing
i'm just going to move this box over to gentoo and say screw it
i'm tired of it breaking
so perl 5.10 won't compile
awesome
hehe. did you read /usr/ports/UPDATING or UPGRADING or whatever it is?
dunno, maybe you're doing something different, but I've had a box that's been upgraded continuously since I first installed it with a 6.something release six or so years ago
qbit: Only when I disassemble it for cleaning, which isn't that often.
kew
you crank it beyond the 2lbs he recommends?
up_the_irons : Are there any filters in place to block certain types of incoming UDP DNS traffic? Certain queries originating at my ARPnetworks VPS are timing out.  When checking the logs of the DNS Servers in question, they receive the query and I am pretty sure they respond as well.
mnathani: i'm seeing something similar here
qbit: Crank what?
tighten the thumb bolt things
looks like i was able to solve my perl issue
mnathani: incoming from what perspective?
by the sound of it up_the_irons, from the perspective of the VPS
the query gets out but the response doesn't seem to make it4 back
up_the_irons: incoming dns replies to outgoing queries originating from vps, if he was seeing the same thing i was
looks like it cleared up on its own, though
mnathani: there's 5 Mbps throttle on outbound UDP (your VPS to the outside world), but not inbound.  so a VPS can't DDoS someone else
mnathani: judging by your traffic graph, you wouldn't be hitting this
jlgaddis: roger brycec : roger
up_the_irons: that's good to know... Seems like something that the FAQ could benefit from having.
brycec: ah, tnx for the info on SNI holes
no prob, no big deal really
up_the_irons: presumably you could still syn flood, or harass dnssec-enabled servers, or...
jdoe: indeed, it's not a universal DDoS filter
(BRB PROOF OF CONCEPT)
up_the_irons: btw, are the graphs of traffic, etc available to users?
Lefty: yes, via your control panel
or portal
or whatever its called
^^
milki: I couldn't find it
 look harder~
wow so easy
go to my services
click on bandwidth
>.<
whoa
my bandwidth quota went up
i didnt notice
thats awesome
my yearly usage so far is less than 10% of my monthly quota -.-