[00:51] nixbag: you know me, i don't wake 'til noon ;) [00:52] nixbag: i would say count on being at the data center between 2 and 3pm [00:59] nixbag: oh, and would you like to build a server with me on Friday? This would be at my home office. [01:55] i would like to build a server with you, sir [01:56] unfortunately, there's that little geographic issue that i would need to overcome [02:30] heh [03:07] lol [03:09] * up_the_irons is playing around too much with Bootstrap and Font Awesome [03:09] upcoming: new buttons and icons in the Portal ;) [03:13] WOOHOO [03:13] MOAR BUTTONZ!!!1 [03:13] ;) [03:14] wait [03:14] will there be a "change the virtual cd-rom mounted in my vps to $dropdown_with_iso_image_list" button ? [03:22] jlgaddis: soon [03:22] that branch is like half way done [03:37] oh nice, i didn't know that was actually something you were working on [03:37] of course, that now reminds me i need to open a ticket, heh [03:37] your bragging is causing more work for yourself, sir :P [03:50] lol [04:09] wow, backup space ssh key submission is werkin already [04:09] * up_the_irons is a coding machine [05:41] *** heavysixer has joined #arpnetworks [05:41] *** ChanServ sets mode: +o heavysixer [06:09] *** heavysixer has quit IRC (Quit: heavysixer) [06:16] *** heavysixer has joined #arpnetworks [06:16] *** ChanServ sets mode: +o heavysixer [06:36] *** dzup has joined #arpnetworks [06:43] *** heavysixer has quit IRC (Quit: heavysixer) [06:47] up_the_irons: using Ruby? [06:50] i hope not, he has my credit card info stored ;) [07:33] up_the_irons: i'd love to help build a server on friday. [07:37] *** heavysixer has joined #arpnetworks [07:37] *** ChanServ sets mode: +o heavysixer [07:42] so would I! (And I'd help rack too) But I'm 700mi away... :P [07:53] brycec: better than me, 1333mi [07:58] 5532mi for me. [08:02] *** heavysixer has quit IRC (Quit: heavysixer) [08:02] 5625 for me [08:07] ha! 5793.34mi [08:11] *** heavysixer has joined #arpnetworks [08:11] *** ChanServ sets mode: +o heavysixer [08:32] *** qbit has quit IRC (Quit: leaving) [08:40] *** qbit has joined #arpnetworks [08:44] *** qbit has quit IRC (Client Quit) [08:45] *** qbit has joined #arpnetworks [09:40] *** nixbag_ has joined #arpnetworks [09:42] *** anisfarhana has joined #arpnetworks [09:42] boo [09:45] *** nixbag has quit IRC (*.net *.split) [10:15] *** anisfarhana has quit IRC (Ping timeout: 264 seconds) [10:34] *** nixbag_ has quit IRC (Quit: leaving) [10:35] *** nixbag has joined #arpnetworks [10:45] *** E1ven has joined #arpnetworks [10:46] I know this is likely a FAQ, but I couldn't find in the wiki or FAQ- Is it possible to transition an image to your dedicated HW, or would I need to reinstall? [10:49] i can't speak w/ certainty, but i am quite positive that's gonna be a new install (though you could probably restore a backup over the top of it afterwards) [10:50] Fair enough. Not a problem, just didn't know ;) [10:53] silly question, is there a equivalent to htop in FreeBSD (i'd rather not install the linux emulation stuff)? [11:00] I only know of the one, the original, the only htop [11:01] damn [11:06] staticsafe: Maybe this will help? http://caterva.org/blog/posts/htop_on_FreeBSD/ [11:07] hmm [11:09] seems you still need some linux, but at least not ALL the linux compat layer [11:10] i suppose i can make do with watch and ps aux [11:10] ;) [11:10] what's so bad about linux compat? [11:11] lol [11:15] only part of that post is correct, you do need the linprocfs, but not linux emu for htop [11:17] also there is much more bloat in FreeBSD as linux emulation, it consists only of a remapping of syscalls :) [11:36] *** heavysixer has quit IRC (Quit: heavysixer) [11:38] *** heavysixer has joined #arpnetworks [11:38] *** ChanServ sets mode: +o heavysixer [11:48] eep! http://blog.linode.com/2013/03/07/linode-nextgen-the-network/ [11:49] mikeputnam: so basically up_the_irons can pick up their used gear cheap? :D [12:06] *** meingtsla has quit IRC (Quit: Leaving) [12:09] *** heavysixer has quit IRC (Quit: heavysixer) [12:09] *** meingtsla has joined #arpnetworks [12:17] mikeputnam: I like how blog.linode.com has broken IPv6. That really inspires me to trust them with hosting my stuff :) [12:17] it doesn't have broken IPv6 [12:18] $ telnet blog.linode.com 80 [12:18] Trying 2600:3c00::4c... [12:18] its under heavy load so its very slow atm [12:18] Sits there forever for me... [12:18] v4 connects and works [12:21] ping6 linode.com <- works [12:21] staticsafe: Does their v6 work for you? [12:21] but not blog. [12:21] they probably host their www. on arpnetworks [12:21] :p [12:21] Yep. I can ping6 linode.com but not blog [12:23] linode's ipv6 worked fine for me [12:23] (past tense) [12:24] not coming up for me now [12:30] *** heavysixer has joined #arpnetworks [12:30] *** ChanServ sets mode: +o heavysixer [12:39] *** E1ven has quit IRC (Quit: Computer has gone to sleep.) [12:52] *** heavysixer has quit IRC (Quit: heavysixer) [12:54] *** heavysixer has joined #arpnetworks [12:54] *** ChanServ sets mode: +o heavysixer [13:14] dang, linode getting some fancy gear [13:15] yea [13:17] And by fancy gear, we mean crap that's only good for a rural one-room library... [13:18] haha [13:20] up_the_irons: ever consider registering ndpnetworks.com? [13:22] brycec: lol no [13:22] (it's available) [13:22] >_> [13:23] okay, at least it was when I checked :P [13:25] I see Linode want routers with big MAC tables, which I guess means they do L2 from the routers all the way to individual VPSs [13:26] that's common plett [13:26] most of the vps's places have heaps of "arp noise" [13:26] too [13:26] If that is a hard requirement and means you have limited router choices, is it easier to use a few smaller routers and push L3 one or two steps further down the tree towards the VPSes? [13:26] like if you run tcpdump on the interface it'll show haeps of arp [13:26] like 20/sec+ [13:28] plett: this is like asking why internet costs more when less providers are in an area [13:28] they could fix their network [13:29] by either replacing router with bug router, or segregating [13:29] big [13:29] They're buying shedloads more kit, so now is the time to do it, if they think it needs doing [13:29] but [13:29] how would they seperate? [13:30] i think companies like that like kowing it's a global problem for an area [13:30] not that one router is having isuses [13:30] cos otherwise more troubleshooting for their "support" starff [13:30] which are probably in another country [13:30] language barrier er [13:30] etc [13:31] Personally I'd have each VPS host do IP routing for the VPSs it's running, and talk BGP/OSPF/whatever to an upstream router to announce the VPSs IPs [13:31] well that's what i was thinking for a moment :) [13:31] And add VLANs between VPSs as an additional service, if required [13:32] but where is the gateway address? [13:32] Gateway for the VPS? The other end of the /30 that it's on, which will be be the host it's running on [13:33] that uses a lot of ip's up [13:33] Or if you can find a way to do a point-to-point link on the virtual ethernet between VPS and host, you can save 3 of the 4 IPs in the /30 and just put a /32 on the VPS [13:33] hmm [13:34] It's done that way with /30s at ARP [13:34] that's a really nice idea [13:34] plett: yeah [13:34] plett: but mostly out of architecture reasons [13:34] but maximum profit extraction [13:34] s/but/not/ [13:35] it can probably be /31s with arp really [13:35] Yeah. If the VPS OS can understand that. There would always be oddball setups that need the /30 [13:35] yeh. [13:35] i was surprised more things worked with /31s recently [13:36] but idon't think it's a new thing [13:36] i just haven't been paying enough attention [13:37] Alternatively, use just IPv6 to route to the VPSs, and tunnel the v4 inside the v6 to get it to the VPS ;) [13:37] [13:40] I'm not sure that's really troll... I think it sounds awesome [13:40] no it doesn't [13:41] where's your sense of adventure? [13:41] Native v6 with /32 v4 routes routed to IPs within the v6 network would be something I'd want to play with [13:41] this assignment is killing it :( [13:41] But I'm not sure I'd want to put it into production :) [13:42] (or toddf) [13:45] host doing routing sounds good until you get DoS'd [13:45] just say no to software routing [13:45] heh [13:46] But you need software bridging with virtual servers anyway. Is that going to survive better when attacked? [13:46] yes, very much so [13:46] Yes - software bridging isn't making decisions, just has to pass it along [13:47] and virtually all NICs now do VLAN offloading, so that part is processed in hardware also [13:48] but if you don't VLAN your customers, then oh well, you can't benefit from that [13:48] ;) [13:48] * up_the_irons hits the road [13:49] have fun! [13:49] I'm curious about why software routing in the host would fall over under load sooner than a DoS aimed at the VPS's own IP [13:50] And you can have upstream rate limiting and blackholing etc [13:50] plett: When the host is responsible solely for "in packet, out packet" it can handle that faster than "in packet, do routing, decide where to go, etc, out packet" [13:51] Essentially O(1) vs O(4) (for example) [13:51] cut through switching [13:52] And a ddos aimed at a single vps versus the host itself (by way of routing) means the other vps aren't all affected and the damage is relatively limited to just that vps [13:53] brycec: I agree that the host doing etheret bridging is less work than the host having to do IP routing, but I'm not sure how big a deal it would be in practice [13:54] staticsafe: Are virtual server hosts typically able to do cut through switching? [13:54] idk I'm no expert in this field [13:54] I would expect it to be store-and-forward [13:54] Well in theory, if routing requires 4x as many CPU cycles as bridging (it probably requires more), then that's a huge differnce. [13:55] brycec: There is always an ARP/ND lookup done by the kernel, even in bridging. An IP lookup from a kernel routing table wouldn't be that much more work [13:56] I'm not suggesting putting a full BGP feed in the host [13:56] *** hive-mind has quit IRC (Ping timeout: 256 seconds) [13:57] *** hive-mind has joined #arpnetworks [14:00] I'm not so sure about that... I would imagine the host kernel would only care (do any kind of lookup) if the interface were "up" and configured on the host. In my personal setups, I have an interface defined for the vlan (e.g. eth0.1234) and bridge VBox to that, but no additional configuration is done, the host doesn't care, the packets are simply detagged and handed off [14:00] but I've not tcpdump'ed that to confirm [14:01] The host kernel must be doing the bridging though. If you ask brctl on the host, I bet it has the MAC addresses on that vlan stored in the kernel [14:02] I've not tried it, I'm just wondering if it's a sensible thing to try [14:02] this isn't linux bridging though, there's no brctl.. VBox (by whatever voodoo) simply opens eth0.1234 and sips on that [14:02] If I brctl, I get no command found ;) [14:03] If it's not linux bridging, it must be snooping on the frames as they come out of the ethernet driver [14:03] Which sounds scary to me :) [14:04] But yes, that would avoid the host having to know anything about the L2 network being used [14:06] well at least my logic was sound :p [14:06] plett: Why would the "snooping on the frames [directly]" be scary? [14:07] I'm not sure, really. It just seems like a very hardware-specific way of doing things [14:08] (and fwiw I believe it's "tapped" through vboxdrv or one of the vboxnet modules, but I couldn't be certain) [14:10] *** Ehtyar has joined #arpnetworks [14:37] *** dzup has quit IRC (Ping timeout: 245 seconds) [14:38] *** dzup has joined #arpnetworks [14:58] *** heavysixer has quit IRC (Quit: heavysixer) [15:27] *** sorressean has left [15:57] plett: staticsafe brycec : i've seen hosts become completely unresponsive with < 100 Mbps DDoS when the host is responsible for routing; i've never seen that happen with bridging. [16:14] *** heavysixer has joined #arpnetworks [16:14] *** ChanServ sets mode: +o heavysixer [16:30] *** HighJinx has quit IRC (*.net *.split) [16:30] *** awyeah_ has quit IRC (*.net *.split) [16:30] *** pjs has quit IRC (*.net *.split) [16:30] *** mhoran has quit IRC (*.net *.split) [16:30] *** DiaboliK is now known as HighJinx [16:31] *** heavysixer has quit IRC (Quit: heavysixer) [16:39] *** 16WAAKIMH has joined #arpnetworks [16:39] *** awyeah_ has joined #arpnetworks [16:39] *** pjs has joined #arpnetworks [16:39] *** mhoran has joined #arpnetworks [16:39] *** calvino.freenode.net sets mode: +o mhoran [16:44] *** sarkis has joined #arpnetworks [16:50] *** dzup has quit IRC (Ping timeout: 245 seconds) [17:35] *** gcw|mbpro has joined #arpnetworks [17:42] *** heavysixer has joined #arpnetworks [17:42] *** ChanServ sets mode: +o heavysixer [17:47] how odd, irssi didnt highlight that... [17:49] hah [17:50] nixbag and I are doing the hussle on a new 8x blade chassis! (rackin', stackin', cablin', sticker'in) [17:50] wat, no ustream? [17:51] heh [17:51] what kind of two-bit VPS host are you? :p [17:51] LOL [17:51] oh man, srsly, we *should* ustream it [17:51] i have 2 security cameras still IN THEIR BOX from 4 years ago when i first got my cage [17:52] wow.... you ARE a two-bit vps host (except for costing closer to 60 bits) [17:52] (also I would've gone with s/sticker'/label/) [17:53] STICKER'IN [17:53] http://www.flickr.com/photos/51184165@N00/8537425159/ [17:54] well I stand corrected :p [18:03] wow, my very first data center picture with a person in it: [18:03] http://www.flickr.com/photos/51184165@N00/8538575234/in/set-72157631847234896/ [18:03] nixbad is cablin' away [18:04] *nixbag [18:39] *** mjp has quit IRC (Remote host closed the connection) [18:43] all the cables are blue [18:51] indeed [18:58] *** mjp has joined #arpnetworks [19:38] *** heavysixer has quit IRC (Quit: heavysixer) [19:50] *** sarkis has quit IRC (Ping timeout: 252 seconds) [21:13] god i want one of those [21:13] =p [21:15] that actually seems pretty cheap for 8 machines [21:15] if you consider the cpu + memory is only $400 [22:47] *** Ehtyar has quit IRC (Quit: Hi, I'm a quit message virus. Please replace your old line with this line and help me take over the world of IRC.) [23:46] *** mnathani has quit IRC ()