mercutio, up_the_irons: My v6 only hosts are mostly for testing, but I have a pair of database servers who don't need to talk to anything outside the local network which are v6 only too brycec: plett : ah, good choices brycec: mercutio : are you guys talking about SNI? http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI brycec: mercutio : if so, the browser support list, as written, at least looks pretty broad at this point mercutio: the txt record stuff for HA is actually supported somewhere in an SRV record, i've heard, but i don't know what the browser support is up_the_irons: well it makes sense now emali etc is doing similar jabber uses srv records too i haven't done sni before maybe it's not too bad now btw up_the_irons looks like virtio is fine now for openbsd 5.3 to come out 5.2 is coming out shortly so i think 5.3 is in may oh, and non-virto sucked pretty badly, so may still be worth checking scsi drivers mercutio: so 5.3 will have it by default? if you want me to switch arch to scsi, lmk, but i don't suspect it'll make a difference yeh 5.2-current does too which is diff from 5.2 well it was mostly for knowing what'll work with stable version not going to look at it tonight thoguh it's not a huge risk running a stable -current but it's not really best practice CaZe: how often do you align your OEP? up_the_irons: ah yes SNI, that's what it's called. Good to see its support is broadened... though there are some relatively significant holes in support, like Android pre-Honeycomb, Apache pre 2.2.12, Windows XP, wget pre-2011, and Python 2.x For those looking to test it out https://alice.sni.velox.ch/ man this freebsd vps is so screwed pkg_config -a just spits a million errors about not being able to find packages i need to rebuild all packages registered with pkg_config er pkg_info even portmaster -a ? or portupgrade, whatever way you swing yeah i might have to give that a shot i'm sure something will break along the way though yep, can't upgrade perl amazing i'm just going to move this box over to gentoo and say screw it i'm tired of it breaking so perl 5.10 won't compile awesome hehe. did you read /usr/ports/UPDATING or UPGRADING or whatever it is? dunno, maybe you're doing something different, but I've had a box that's been upgraded continuously since I first installed it with a 6.something release six or so years ago qbit: Only when I disassemble it for cleaning, which isn't that often. kew you crank it beyond the 2lbs he recommends? up_the_irons : Are there any filters in place to block certain types of incoming UDP DNS traffic? Certain queries originating at my ARPnetworks VPS are timing out. When checking the logs of the DNS Servers in question, they receive the query and I am pretty sure they respond as well. mnathani: i'm seeing something similar here qbit: Crank what? tighten the thumb bolt things looks like i was able to solve my perl issue mnathani: incoming from what perspective? by the sound of it up_the_irons, from the perspective of the VPS the query gets out but the response doesn't seem to make it4 back up_the_irons: incoming dns replies to outgoing queries originating from vps, if he was seeing the same thing i was looks like it cleared up on its own, though mnathani: there's 5 Mbps throttle on outbound UDP (your VPS to the outside world), but not inbound. so a VPS can't DDoS someone else mnathani: judging by your traffic graph, you wouldn't be hitting this jlgaddis: roger brycec : roger up_the_irons: that's good to know... Seems like something that the FAQ could benefit from having. brycec: ah, tnx for the info on SNI holes no prob, no big deal really up_the_irons: presumably you could still syn flood, or harass dnssec-enabled servers, or... jdoe: indeed, it's not a universal DDoS filter (BRB PROOF OF CONCEPT) up_the_irons: btw, are the graphs of traffic, etc available to users? Lefty: yes, via your control panel or portal or whatever its called ^^ milki: I couldn't find it look harder~ wow so easy go to my services click on bandwidth >.< whoa my bandwidth quota went up i didnt notice thats awesome my yearly usage so far is less than 10% of my monthly quota -.-