#arpnetworks 2014-06-09,Mon

RandalSchwartz

success... my server is now completely up to date!

mnathani

success on my part too

staticsafe

RandalSchwartz

updating emacs broke irc.el, so I had to figure out where last-input-char went

mnathani

brycec: removing the "" worked

brycec

Good

RandalSchwartz

so now I'm back!

brycec

wb RandalSchwartz

RandalSchwartz

and running perl 5.16 instead of 5.10

mnathani

brycec: turns out the machine I was targeting stopped responding to WOL packets, causing me to question the script

RandalSchwartz

one of the shared libs installed funny, so I had to reinstall that

brycec

RandalSchwartz: Any particular reason you're on 8.4? Just because it's LTS?

staticsafe

..you use emacs as your IRC client?

[13:21]

brycec

brycec waits for emacs to gain the ability to bathe and clothe

[13:21]

RandalSchwartz

yes
I'm on 8.4 because it wasn't that far from 8.3
and I wanted to minimize the risk
after I have a breather from this, I'll upgrade to 9 or 10 later in the year

[13:22]

brycec

I just jumped from 9. to 10.0 this weekend :)

[13:22]

RandalSchwartz

when I have more hair to pull out :)
is there a pkg command to verify all the shared libs make sense?

[13:23]

brycec

It went perfectly smoothly, except the part where I forgot to "pkg upgrade" before the final freebsd-update.
RandalSchwartz: Like autoremove, to remove unneeded ones?

[13:23]

RandalSchwartz

pg wouldn't start because an XML lib was broken
I'm just wondering if anything else is like that that I haven't noticed yet

[13:23]

brycec

once you're 100% pkg, then the pkg ecosystem takes care of that

RandalSchwartz

I thought I remember some command

brycec

Or so I'm told.

RandalSchwartz

no - it didn't :)
I had to parse the error message, use pkg which, then uninstall/reinstall

brycec

Weird.
I know of pkg check and pkg shlib, but neither does exactly what you're looking for
Sounds like, to do what you want, a program would need to compile and link against every single library and test for failure.

[13:25]

RandalSchwartz

ahh.. pkg check -B
I'll try that first

[13:26]

brycec

pkg check -B is used to reanalyse shared libraries of installed packages.
Good luck :)
I suspect it just looks for what's installed, versus checking that what's installed works.

[13:26]

RandalSchwartz

possibly
Oh... and pkg set -o ... for upgrading perl failed
so I just uninstalled perl5
and then pkg install `pkg rquery %o`
since my built ports were precisely what I wanted installed
anyway... no longer at risk of various certs :)
CERT
CVEs... whatever they're called
... red.stonehenge.com:~ +# pkg audit
0 problem(s) in the installed packages found.
yeay!

[13:26]

m0unds

well, just disengaged my v6 tunnel again. congestion is dropping traffic coming in over the tun if to 1mbit/sec or less
wee

[13:36]

brycec

Thanks for the reminder, m0unds
Don't ask what
But you reminded me
of something

[13:44]

m0unds

hahahaha

[13:44]

brycec

(I added ipv6 to my openvpn network a couple weeks ago, but I forgot to add the new address space to a couple of services)

[13:45]

acf_

m0unds: really? my smokeping doesn't look bad yet

[13:47]

RandalSchwartz

ok - that's weird. I didn't realize I had an audible account... must've signed up back in January on one of my drunken evenings. :)
and I have 4 credits to use... (max is 6, so I'm glad I got it...)

[13:48]

m0unds

acf_: yeah, mine looks fine as well

[13:49]

acf_

but you're seeing poor tcp performance?

[13:49]

m0unds

yep

[13:49]

acf_

49% [==================> ] 51,872,934 6.54MB/s eta 9s
that's what I see

[13:50]

m0unds

yeah, to the vm is fine
the tunnel side of it was problematic (i was using my vps as a tunnel endpoint)

[13:50]

acf_

ah, ok
brycec: your smokeping is really cool
how did you do the remote host monitoring thingy?

[13:50]

brycec

fwiw m0unds I can confirm that it's not just some flimsy limitation of tun :)
(setup my speedtest on the ivp6 tun/openvpn address, whee)
acf_: which page?

[13:51]

m0unds

up til about a week ago, i was able to saturate my line here, so i don't know what's up but it's annoying

brycec

acf_: or just the remote monitoring in general?

acf_

yeah

m0unds

so i cut out the annoying thing til it's not a problem anymore

acf_

yeah m0unds, maybe you're seeing something else besides the Comcast congestion

m0unds

spending a half hour downloading a 2.8GB patch, only to have it progress 30% is silly

acf_

I've never had good luck with openvpn/tun for performance

m0unds

well, this is a gif/ipip tunnel

acf_: http://oss.oetiker.ch/smokeping/doc/smokeping_master_slave.en.html

brycec

m0unds

so low overhead anyway

brycec

m0unds: a gif tunnel you named tun? weirdo

acf_

oh cool. I started using gretap a while ago

m0unds

i shorthanded tunnel
with tun

brycec

Ohh

m0unds

it was actually named ip-0-0-0.0
since, junos

brycec

Look at all this silly confusion you caused with that needless abbreviation :p

m0unds

well, ip-0-0-0, unit 0 vlan 0, so ip-0-0-0.0
haha

brycec

Only because tun(4) is a thing

[13:55]

m0unds

yep, i know that too
til xbox one will receive content from msft via ipv6 if available
haha

[13:55]

brycec

Oh that's good

[13:55]

m0unds

i guess it makes sense - my wife was streaming netflix and it was hitting the tunnel too

[13:57]

brycec

Should the xbox go directly to netflix for that?
Hm doesn't look like mine has a v6 address currently... but I can't be sure it's even on right now.

[13:57]

acf_

netflix has v6

[13:58]

brycec

m0unds: One or 360 (or original?)

[13:58]

m0unds

one
haven't tried 360
guess i could rollback my cfg change to try it, haha
just wanted to drive on nurbergring in forza, damn it
haha
err, nurburgring

[13:58]

.... (idle for 16mn)

***

staticsafe__ has joined #arpnetworks

[14:17]

m0unds

huh, well, i noticed that the ip i was tunnelling to changed its route from the direct abq -> lax to abq -> denver -> sjc -> lax, so i'm trying again with the one remaining address that routes directly

[14:18]

***

staticsafe_ has quit IRC (Ping timeout: 264 seconds)

[14:20]

..... (idle for 20mn)

up_the_irons

brycec: jpalmer : we send a notification any time your card declines
man scrollback is huge
acf_: send me an update mtr when you notice bad NTT -> Verizon stuff and I'll email NTT

[14:40]

brycec

Well yeah up_the_irons, you've been absent for 3 days...
(absent==silent)

[14:42]

up_the_irons

but even then, sometimes 3 days doesn't accrue too much. i'm usually not watching IRC over the weekend.
i think it's starbucks time, bbl

[14:43]

brycec

truedat
brycec wishes there were a *$ closer than 6mi

[14:44]

RandalSchwartz

*$ needs delivery drones :)

[14:50]

........ (idle for 38mn)

m0unds

hahaha
m0unds imagines having coffee spilled on him by a drone

[15:28]

...... (idle for 27mn)

RandalSchwartz

ñ
oops
I was just testing utf-8 still working
wait... I need a white smiley face
☺
oops..
yeah, that works

[15:55]

..... (idle for 23mn)

brycec

@weather SFO

[16:19]

BryceBot

San Francisco International, CA: Partly Cloudy ☁ 74°F (23°C), Humidity: 53%, Wind: From the WNW at 23 MPH Gusting to 30 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=37.61960983,-122.36557770 or re-request this with: @weather -v SFO

[16:19]

brycec

More unicode

[16:19]

RandalSchwartz

A little cloud!
@weather LHR

BryceBot

Heathrow, United Kingdom: Clear 63°F (17°C), Humidity: 82%, Wind: From the West at 6 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=51.47750092,-0.46138901 or re-request this with: @weather -v LHR

RandalSchwartz

darn it no clear unicode
@weather SYD

BryceBot

Kingsford Smith International, New South Wales: Light Rain ☂ Showers 57°F (14°C), Humidity: 94%, Wind: From the South at 9 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=-33.94649887,151.17309570 or re-request this with: @weather -v SYD

RandalSchwartz

there we go! Rain!

http://arstechnica.com/tech-policy/2014/06/netflix-refuses-to-comply-with-verizons-cease-and-desist-demands/
hmm

mercutio

[16:27]

BryceBot

Ars Technica: "Netflix refuses to comply with Verizon’s “cease and desist” demands"

[16:27]

....... (idle for 30mn)

mnathani

@weather dxb

BryceBot

Dubai International, UAE: Clear 88°F (31°C), Humidity: 66%, Wind: From the South at 7 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=25.25389481,55.36560059 or re-request this with: @weather -v dxb

mnathani

@weather pdx

BryceBot

Portland International, OR: Scattered Clouds 73°F (22°C), Humidity: 48%, Wind: From the NNE at 5.0 MPH Gusting to 17.0 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=45.568871,-122.637115 or re-request this with: @weather -v pdx

mnathani

@weather yyz

BryceBot

Toronto-Pearson International, Ontario: Mostly Cloudy ☁ 72°F (22°C), Humidity: 57%, Wind: From the SSE at 8 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=43.67722321,-79.63055420 or re-request this with: @weather -v yyz

mnathani

@weather khi

BryceBot

Jinnah International, Pakistan: Mostly Cloudy ☁ 86°F (30°C), Humidity: 74%, Wind: From the SSW at 13 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=24.89999962,67.13333130 or re-request this with: @weather -v khi

http://wiki.openwrt.org/toh/tp-link/tl-wdr4300

RandalSchwartz

@weather anc

[17:01]

BryceBot

Stevens Anchorage International, AK: Overcast ☁ 59°F (15°C), Humidity: 58%, Wind: Calm -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=61.194088,-149.932892 or re-request this with: @weather -v anc

[17:01]

RandalSchwartz

darn it... no snow there
@weather USH

[17:01]

BryceBot

Ushuaia International Malvine Island, Argentina: Partly Cloudy ☁ 39°F (4°C), Humidity: 75%, Wind: Calm -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=-54.84405136,-68.30818176 or re-request this with: @weather -v USH

[17:02]

RandalSchwartz

@weather PMC

[17:03]

BryceBot

El Tepual International, Chile: Overcast ☁ 52°F (11°C), Humidity: 88%, Wind: From the North at 20 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=-41.43472290,-73.09750366 or re-request this with: @weather -v PMC

[17:03]

RandalSchwartz

darn it
damn global warming
@weather PSY

[17:03]

BryceBot

Error, No cities match your search query

[17:05]

RandalSchwartz

@weather MPN

[17:05]

BryceBot

Mount Pleasant, Falkland Islands: Clear 34°F (1°C), Humidity: 93%, Wind: From the NNE at 9 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=-51.81998062,-58.44839859 or re-request this with: @weather -v MPN

[17:05]

mercutio

spam

[17:12]

RandalSchwartz

Not sure if you can get spam there.

[17:13]

mercutio

the weather thing

[17:13]

brycec

RandalSchwartz: you can always just PM BryceBot

[17:14]

RandalSchwartz

I was looking for utf8 chars

[17:14]

brycec

'Sunny ☀',
'Cloudy ☁',
'Snow ❄'
'Rain ☂'
'Clear ☄'
'Thunderstorm ☈'
'Overcast ☁',
That's all you'll get out of BryceBot
At least for @weather
You can always feed Wikipedia through it
http://zh.wikipedia.org/wiki/C%E5%92%8CC%2B%2B%E9%81%8B%E7%AE%97%E5%AD%90

[17:14]

BryceBot

C和C++運算子 :: 這裡是C和C++語言的運算子列表。所有列出的運算子皆含納於C++；第三個欄目裡的內容也使用C來描述。應當注意的是C不支援运算符重载。下列運算子在兩個語言中都是順序點（運算子未重載時）： &&、||、?: 和 ,（逗號運算子）。 C++也包含類型轉換運算子const_cast、static_cast、dynamic_cast和reinterpret_cast，不在表中列出以維持簡�

[17:15]

brycec

well that failed miserably
weird, BryceBot is totally utf8 friendly
http://ru.wikipedia.org/wiki/%D0%9E%D0%BF%D0%B5%D1%80%D0%B0%D1%82%D0%BE%D1%80%D1%8B_%D0%B2_C_%D0%B8_C%2B%2B

[17:15]

BryceBot

Операторы в C и C++ :: Языки программирования Си и Си++ поддерживают сходный набор операторов. Некоторые из операторов недоступны в языке Си. Кроме того Си не поддерживает перегрузку операторов. Операторы &&, || и , (оператор comma), при условии что не пере

[17:15]

RandalSchwartz

translated "Must Get Moose and Squirrel"
failed?
looked chinese to me
was it the wrong chars?

[17:17]

.... (idle for 17mn)

mnathani

what wireless router do folks recommend if I plan on running DD-WRT / Tomato?

[17:34]

mercutio

i use tp-links
cos they cheap
i'm using 4300

[17:35]

mnathani

This item is currently out of stock and it may or may not be restocked.
hmm
newegg.ca ^
mercutio: how well does it run openwrt ?

[17:39]

mercutio

fine
i don't do anything fancy
i'm using gargoyle
but same diff
oh it's out of stock?

mnathani

do you run different vlans at all?

http://www.amazon.com/TP-LINK-TL-WDR4300-Wireless-Gigabit-300Mbps/dp/B0088CJT4U
nope

mercutio

BryceBot

Amazon: "TP-LINK TL-WDR4300 Wireless N750 Dual Band Router, Gigabit, 2.4GHz 300Mbps+5Ghz 450Mbps, 2 USB port, Wireless On/Off Switch"

mercutio

i'm not actually using it atm
well not directly
housemate is using it
as wireless client, bridging to ethernet
it's doing about 50 megabit, a usb stick was doing about 6 megabit

[17:42]

mnathani

oh wow, thats quite a difference

[17:42]

mercutio

yeah but it's 3 antenna
and the wirelss was just one of those mini usb wireless thingys
and he has pci
rather than pci-e
well for free slots

[17:43]

mnathani

not bad for $68 bucks and free shipping

[17:43]

mercutio

i'm also using a wireless ac card
err i was
on media box
but it seems to go funny when cmoputer goes into standby mode
it got way colder, and haven't been watching tv shows in that room :)
but this house is kind of terrible for wireless
and i think it's the house
rather than interferene
that said, it's more stable on 5.8 ghz
i also used to use it as a wireless ap
and tbh, at 2.4 ghz it's not really any better than tp-link 1043nd
i bet they're cheap now

[17:43]

mnathani

I was looking at TL-WDR3600 also

[17:46]

mercutio

yeh that's perttu much the same
except 300 megabit at 5 ghz
it depends if you're using double stream / tripple stream devices
that router, and my normal access point are the only tripple stream devices i have
i'm using a wireless ac access point
unifi uap-ac
and it crashes :/

[17:47]

mnathani

To be honest, I pretty much only need the NAT / Gigabit switching. I have a Cisco Aeronet APP

[17:48]

mercutio

oh
i do my nat on pc tbh

[17:48]

mnathani

and I never tried openwrt etc

[17:49]

mercutio

i don't really like openwrt
but normal routers firmware sucks
gargoyle makes it easier to configure
i mean it's cool having linux and all
but it uses this god awful text editor
err the busybox one
and you can't update packages nicely without updating firmware
or you start running out of space
i'd much rather they just had a normal filesystem and compact flash / sdcard or such
and use openbsd :)
is it high bandwidth nat etc?
cos you could also go for something like cubietruck
low power arm computer dual core, 2gb ram, 8gb flash
gigabit ethernet, sdcard support, sata support
~$100 usd

[17:49]

mnathani

not so much high bandwidth but higher concurrent connections
bittorrent, usenet, vpn etc

[17:53]

mercutio

well once modems jumped from 8mb of ram to 32mb of ram they also were fine for that pretty much
with 16mb it was a bit hit and miss
but most of the ones that used to crash/lockup had 8mb of ram
and like that tp-link has 128mb of ram

[17:54]

mnathani

Cable modem maxes out at about 38 mbits/sec

[17:54]

mercutio

yeah that not really high bandwidth
it is nice having ssh and tcpdump
oh i don't have tcpdump installed
i have iperf installed :)
i'd rather go for arm board myself
just because it means you aren't cramped for space/size etc
can run what you like
but if you don't want to tweak lots
gargoyle isn't too bad
http://www.gargoyle-router.com/wiki/doku.php?id=screenshots

[17:55]

mnathani

RAM Size = 32MB

[17:58]

mercutio

what

[17:58]

mnathani

on my Linksys: Wireless-N Gigabit RouterWRT310Nv2

[17:58]

mercutio

ahh
32mb should be ok
i used openwrt on tp-link 1043nd with 32mb of ram for ages

[17:59]

mnathani

it drops the occasional packet here and there

[17:59]

mercutio

that's not usally ram related
does openwrt support it?
i can't find it yet :)

[17:59]

mnathani

http://tomatousb.org/forum/t-284894
some instructions on tomato
but I am not confident

[18:00]

mercutio

tomato hardly runs on anything btw
i think it's broadcom noly rather than atheros or something
you might find it works better with tomato than default firmware

[18:01]

mnathani

I would much rather get a secondary device than attempt something on the only internet gateway of the household

[18:02]

mercutio

ahh right
i actually got a $20 router which i want to try openwrt on
haven't tried it yet, but it's meant to have support
and 64mb of ram i think
only 100 megabit ports
but i kind of like this wireless bridging thing now

[18:02]

....... (idle for 30mn)

m0unds

i got a few refurb linksys e3000s for use as APs a couple years ago
they were like $35/ea on amazon and i run tomato on them
if you want something powerful to use for routing and something else for APs, check out mikrotik routerboard devices
some of the features are squirrelly, but they're generally significantly better than anything you'd get and slap openwrt or ddwrt on
if you only require 2.4GHz, http://routerboard.com/RB2011UiAS-2HnD-IN

[18:34]

mercutio

???
damnit, cant' use unicode
m0unds: that's more expensive than the arm boards?
they're also slower cpu than the tp-link 4300s
routerboard 1100ahx2 is ok
but thinks like 2011 are basically similar to the modems/routers
i have been wodnering if can stick linux on cloud core router though

[18:45]

m0unds

ahx2 is junk
it's good at ipsec, but has thermal issues and horribly buggy firmware
also, some of the ports aren't on the switch chip, which adds 200+ms to first hop latency (not kidding)

[18:49]

mercutio

rb2011 is liek that too
rb2011 you ahve to ignore half the ports
cloud core router doesn't even have a switch
it switches on the cpu
they're all kind of bad, but cheap
but powerpc vs mips is quite a jump in cpu

[18:49]

mnathani

Mikrotik RB750GL Mini-Router 5 Gigabit Ethernet Ports can that device do an ipv6 tunnel to hurricane electric?

[18:52]

mercutio

and you have to go through the core anyway if using things like nat

[18:52]

jbergstroem

my rb1200 is suffering from the latency hit as well. not as bad as 200msec but jumping from the atheros chip to cpu bound is just.. shit

[18:52]

mercutio

jber: did you disable connectino tracking?
routeros doesn't really scale
the new switch chips around actually support doing hardware nat

[18:53]

jbergstroem

mercutio: yep. i mean, we're talking a few msecs here but it still non-zero which is annoying with gbit.

[18:53]

mercutio

including the one in rb2011 i think
which i think is the same as what's in the tp-link
jber: ccr is pretty good for latency
a few msec is terrible
do you mean like 0.3 msec?
or like 3 msec?

[18:53]

jbergstroem

mercutio: jitters in between those ranges depending on load.

[18:55]

mercutio

and is that only when trying to push gigabit through it ?
and it's using hardware queues on the ethernet ports?

[18:55]

jbergstroem

mercutio: not really, you get that penalty on <10% load as well. when i picked it up and started testing i thought i had faulty hardware all over the place until i realised i was hitting cpu outside of the switch plugs
mercutio: yeah. the first five are on an atheros 8316

[18:56]

m0unds

jbergstroem: yeah, same here - i used an rb1100ahx2 for about 2 months and gave up on it. i thought it was faulty out of the box, but nope

mercutio

heh

m0unds

the rb450g was pretty good, but the first run had production issues

jbergstroem

haven't really done any more testing since. i just use the first five

m0unds

latter ones had that fixed

mercutio

jber: good solution :)
i'm onyl using abuot 5 ports i think on switch
which i think is 24 port heh
it can be easy to stay low in port count with all the wirelss etc these days

jbergstroem

I have a few rb751g-2hnd as well. not very happy about them tbh. switch is all fine, but i've been fighting with its wifi for a good while. all kinds of issues
RB2011UiAS-2HnD-IN is a good bet. that's been my best experience to date.

[18:59]

staticsafe

rb751g-2hnd is the one i have
wifi issues as well

[19:00]

jbergstroem

:-/

[19:01]

mercutio

what has that got over the tp-link 3600 though?

[19:02]

jbergstroem

if i got paid to admin these things (haha) i'd probably pick some other brand and go to openwrt. routeros is still a pretty good "setup once, just works" destination

[19:02]

mercutio

it's the same cpu
rb2011 has more ports, but all the tp-link ones are on the switch
jber: until you ened to do a firmware upgrade
i'd love to see an open source solution better than openwrt myself

[19:02]

m0unds

yep, openwrt and dd-wrt are super flakey
i wouldn't trust dd-wrt on anything

[19:04]

mercutio

with 0 downtime security updates etc

[19:04]

gizmoguy

I run lots of openwrt nodes

m0unds

i found code in a whole run of builds that was intended for one of their commercial customers
(dd-wrt)

mercutio

that's why i was advocating cubietruck :)

m0unds

and it included hardcoded firewall rules and stuff
when i brought it up, i got banned from posting on their forums

gizmoguy

lol

jbergstroem

gizmoguy: do you bake your own stuff from openwrt trunk?

gizmoguy

jbergstroem: I did for a time, but that got annoying

jbergstroem

m0unds: yeah, openwrt is kinda the way to go

gizmoguy

I just run the latest trunk builds from openwrt

mercutio

is that for network testing gizmo?

jbergstroem

gizmoguy: how do you handle upgrades (packages, configs, changes et al)?

gizmoguy

Hah no. My house :)

mercutio

gizmoguy

jbergstroem: I only use it for personal stuff
even then, I'm considering jumping ship to a proper CPE

mercutio

why do you have lots of routers at home?

gizmoguy

like the ubiquiti Edge Router Lite
I have 1 router at home

m0unds

ERL++

mercutio

gizmoguy

but I also maintain a few networks for other people

m0unds

those things are so fun

mercutio

gizmoguy ? I run lots of openwrt nodes

gizmoguy

yeah ERL 99$ USD
can't go wrong really

mercutio

what cpu is in those?
oh

gizmoguy

mercutio: http://wiki.gentoo.org/wiki/MIPS/ERLite-3

http://dl.ubnt.com/datasheets/edgemax/EdgeRouter_Lite_DS.pdf

m0unds

mercutio

that's the one that was going to be relased sometime for years right?

gizmoguy

MIPS64
mercutio: yeah

mercutio

it sounded good

gizmoguy

runs a port of vyatta

mercutio

can you run linux on it?

gizmoguy

yes

mercutio

can you run openbsd on it?

gizmoguy

read the gentoo link
depends, does openbsd run on mips64?

mercutio

it runs on some mips i'm pretty sure

m0unds

it runs debian + vyatta by default iirc

mercutio

it runs on octeon

gizmoguy

mercutio: http://www.openbsd.org/octeon.html

mercutio

whaich says cavium
and that says cavium
so yes :)

gizmoguy

Look

mercutio

it probably mostly works

gizmoguy

Supported hardware:
Ubiquiti Networks EdgeRouter LITE

mercutio

maye missing drivers
is that the same as v3?
oh it's not v3
it's just a weird url
Currently it is possible to install OpenBSD/octeon on the Portwell CAM-0100 machines, as they have a working storage driver. The DSR-500 and EdgeRouter LITE may also be used by booting over NFS.

gizmoguy

afaik, I might be wrong here. I think there has only been one hardware revision so far

mercutio

damnit

gizmoguy

booting over nfs. lol
its funny
cause all you need to do is support USB

mercutio

yeh but it's probably not that complicated.
what is it usb for hdd?

gizmoguy

apparently their rootfs is stored on a removable pen drive inside the ERL
which seems cool to me

mercutio

heh

gizmoguy

take the original FW pen drive out
plug your own in
if you ever want to revert it, just swap pen drives

mercutio

http://www.bsdguides.org/2014/freebsd-10-edgerouter-lite/
can you buy them in nz?
$160+gst
ouch

gizmoguy

Yup, buy them from gowifi
yeah
really expensive

http://www.amazon.com/EdgeRouter-ERLite-3-512MB-Ethernet-Router/dp/B00CPRVF5K

mercutio

BryceBot

Amazon: "EdgeRouter Lite ERLite-3 512MB 3 Ethernet Ports Router"

gizmoguy

buy it from amazon and use a US mail forwarding service

mercutio

you shouldn't need mail forwrading

gizmoguy

Only 2 left in stock.
Race ya mercutio

mercutio

i'm not going to buy it right now :)

gizmoguy

I'll buy both and sell you one for $159

mercutio

just proceeding to checkout
to check shipping cost
We're sorry. This item can't be shipped to your selected destination. You may either change the shipping address or delete the item from your order.
goddamnit

gizmoguy

yeah thought so

mnathani

one million packet per second? does that still hold true for NAT?

mercutio

it'll be hardware nat
but they have some kind of network acceleration buffer thing with fsat sram too i think

mnathani

only 3 ethernet ports though

mercutio

just use a switch :/

gizmoguy

how many do you want in a router?

mercutio

they have autosending power supply

gizmoguy

I'll sell you an 8 port SRX ?

mnathani

can this one do dual wan?

[19:15]

mercutio

i remember reading about thse things ages ago
they did sound cool

[19:15]

gizmoguy

according to some block posts apparently version 1.2 of the ERL firmware does policy based routing mnathani

[19:16]

mercutio

my i7 makes a fine router though

[19:16]

gizmoguy

mnathani: https://community.ubnt.com/t5/EdgeMAX-Configuration-Examples/EdgeMAX-Automatic-WAN-failover-with-PBR-load-balancing/ta-p/511289
um wait no, this one
https://community.ubnt.com/t5/EdgeMAX-Configuration-Examples/EdgeMAX-Dual-WAN-load-balance-feature-v1-4-0/ta-p/699501

[19:17]

mnathani

gizmoguy: thanks

[19:19]

m0unds

i loves my srx

[19:20]

gizmoguy

m0unds: played with the virtual srx stuff? (firefly)
I just setup my first vsrx last night
it's like an official version of olive :)

[19:20]

m0unds

nope, not yet

[19:21]

gizmoguy

m0unds: http://www.juniper.net/support/downloads/?p=junosvfirefly-eval#sw

[19:21]

m0unds

oh, didn't realize they had an eval
neat

gizmoguy

yeah "eval"...
it's soft licenced
it runs forever

m0unds

oh.
well shit. i know what i'll be doing this week at work
haha

gizmoguy

:D
it's super cool
the only limit, is you can only have 10 interfaces

m0unds

oh darn, only 10
hahaha

[19:23]

gizmoguy

but, you can get around that by using vlans
so
m0unds: http://www.juniper.net/techpubs/en_US/firefly12.1x46-d10/topics/reference/general/security-virtual-perimeter-feature-support-kvm.html
here's everything it supports

[19:23]

m0unds

oh no, they don't support tftp algs?!?!?

[19:23]

gizmoguy

BGP Yes
IS-IS Yes

m0unds

hah

gizmoguy

OSPF yes
mpls yes

m0unds

if cisco did this, you'd have to pay $2500 for the eval to get bgp, ospf and mpls support

gizmoguy

so uh.. yeah free juniper ;)
and it's even a recent version

m0unds

yeah, i think htat's the same build on my srx210he

dj_goku

so the downtime is tonight right?
oh wait this isn't for everyone. :D

m0unds

--- JUNOS 12.1X46-D10.2 built 2013-12-18 02:03:20 UTC

gizmoguy

I vote we take down ever node, give them a break
every*

dj_goku

hmmm

gizmoguy

Model: firefly-perimeter
JUNOS Software Release [12.1X46-D10.2]

dj_goku

guess I'll just shut it down. I presume all will be brought back up? :D

m0unds

this release fixed flow-based routing w/ipv6

gizmoguy

dj_goku: usually
m0unds: root@Amnesiac> show system license
License usage: none
Licenses installed: none

m0unds

haha

[19:27]

gizmoguy

and everything works
I love it

[19:27]

m0unds

too cool
i'm definitely gonna check it out

[19:27]

dj_goku

dj_goku waves to d^_^b

[19:28]

***

d^_^b has quit IRC (Quit: leaving)

[19:28]

m0unds

juniper screwed up my acct and gave me entitlements to download software images for any juniper product except pulse vpn devices

[19:28]

gizmoguy

there's meant to be restrictions on what you can download?

m0unds

yeah, they're supposed to be tied to j-care

gizmoguy

m0unds

or support contracts for products

gizmoguy

I seem to be able to download most things
and I don't have a support contract

m0unds

funny, maybe they changed it?

gizmoguy

I even managed to convince them to give me domestic versions

m0unds

my buddy works for an isp up in portland and he can only get downloads for products they have deployed w/active support contracts
nice

gizmoguy

technically my account is tied to equipment on the jacademic alliance stuff

dj_goku

gizmoguy: alright. I might have forgot my root login. lol

gizmoguy

hm ok, I thought everyone always got access to anything ;)
dj_goku: password

m0unds

i had issues registering my srx, so they gave me complimentary j-care for 6 months

gizmoguy

password1
password2

dj_goku

lol

gizmoguy

m0unds: nice
someone should force me to start working again

m0unds

gizmoguy: go work or you can never have scotch again

gizmoguy

Oh no! :(

dj_goku

dj_goku I'll just let it forcefully shutdown then.

gizmoguy

I'm about 200 levels deep into an openstack cluster that doesn't work
dj_goku: if you have ACPI you'll be all good
KVM sends ACPI shutdown to all VMs before it stops

dj_goku

ahh alright. I need to upgrade openbsd anyways soon.

[19:32]

.... (idle for 18mn)

m0unds

packet loss doesn't seem as terrible tonight
latency is still wonky on that inbound nlayer link though, twice as high as off-peak

[19:50]

mercutio

it's hard to know if it's inbuond or asymmetric issues
i think up_the_irons wwnated mtr's to sent to ntt

[19:51]

m0unds

the ntt thing is way upstream

[19:52]

mercutio

and asymmetric makes it more annoying
yeh i know it upstream
maybe running mtr --report hourly is a good idea

[19:52]

m0unds

okay, so the outbound (NTT) is normal, no loss, no latency spikes, nothing
i've had it running for an hour

[19:53]

mercutio

i have us.battle.net as an at&t address, www.comcast.net as comcast address
but verizon is on akamai
to wehre?

[19:53]

***

dj_goku_ has joined #arpnetworks

[19:55]

m0unds

http://pastebin.com/S9EaF9Qx
the hop on the bottom w/the <-- on it is the comcast ip that has been contributing to 10-20% packet loss the last 6 nights
it's been completely fine. i restarted mtr on accident (meant to close another terminal and closed that one)

[19:56]

***

dj_goku has quit IRC (Ping timeout: 245 seconds)

[19:58]

acf_

m0unds: super strange
http://kremvax.acfsys.net/smokeping.cgi?target=Remote.verizonnet
set up my smokeping to probe from Amazon EC2 as well

[19:58]

m0unds

`could just be that the comcast one isn't bad tonight

[19:59]

acf_

http://kremvax.acfsys.net/smokeping.cgi?target=Remote.comcastnet
no it's bad

[19:59]

CaZe

Did you give Comcast extra money?

acf_

yes and they still haven't fixed it >:(

m0unds

what address are you probing?

acf_

comcast.net

m0unds

just comcast.net?

mercutio

need a good verizon address to trace

acf_

http://kremvax.acfsys.net/smokeping.cgi?target=Local.comcasthome
this is my Comcast cable connection

mercutio

www.comcast.net is on akamai

acf_

but comcast.net isn't

m0unds

comcast.net isn't though

mercutio

oh right
oh and verizon.net isn't either

[20:01]

m0unds

i saw some spikes to 60ms, but almost no packet loss

[20:01]

mercutio

it is monday night in teh US?

[20:01]

m0unds

yep, but i was seeing worse tue-sun

[20:02]

mercutio

i dunno if things are different there, but monday night's tend to have less internet traffic here
less traffic on streeets too
but that's just a generla rule, there's also more internet traffic in poor weather
but generally i'd say wed through saturday are higher for residential
and evening congestino suggests residential
i wonder if netflix is going over ntt or something now

[20:02]

m0unds

they use ntt in their blend

[20:04]

RandalSchwartz

it's redirecting over EDGE :)

[20:04]

mercutio

verizon.net is still bad
although it looks like link aggregation bad
two hops are worse in the middle then one earlier and oen alter, ...

[20:05]

***

dj_goku has joined #arpnetworks
dj_goku has quit IRC (Changing host)
dj_goku has joined #arpnetworks
dj_goku_ has quit IRC (Read error: Connection reset by peer)

[20:15]

mercutio

yeah right now verizon is bad, comcast is fine, and at&t is slightly bad
but i'd just tested comcast before adn there was loss

[20:17]

m0unds

yea, squirrelly shit
haa
haha

[20:17]

brycec

For those wondering, OpenBSD/octeon doesn't have USB support yet due to licensing (as usual). So until someone r-e's USB support and writes a completely free driver for it, ERL is limited to netbooting.

[20:28]

mercutio

lame
well someone could read the linux driver
and document it
and someone else wriet openbsd driver

[20:28]

brycec

IIRC the Linux+FreeBSD drivers use a Cavium SDK

[20:29]

mercutio

which is closed source?

[20:29]

brycec

Which is licensed
I'm not the most reliable source on these things... Just stuff that bcallah@ (builder of snaps, among other OBSD things) has said

[20:29]

mercutio

kind of annoying
https://wiki.freebsd.org/FreeBSD/mips/Octeon'
that sems to have some info
ndas suck
broadcom have a whole lot of binary drivers in linux
on most routers

[20:30]

m0unds

branch series SRXes are powered by an octeon plus cpu @ 600mhz

[20:33]

***

pseudorandom has joined #arpnetworks

[20:39]

m0unds

http://www.imdb.com/title/tt2543312/?ref_=fn_al_tt_1 this is pretty good so far

[20:39]

BryceBot

Error fetching information for http://www.imdb.com/title/tt2543312/?ref_=fn_al_tt_1: Not Found

[20:39]

m0unds

haha, latency came back up again

[20:51]

acf_

I wonder if for some reason a ton more traffic just started going over that link
and NTT/Comcast just haven't been able to upgrade it yet

[21:05]

m0unds

or aren't planning on it, haha
just hit 2100 west coast
had a good blip of solid low latency though

[21:06]

acf_

yeah, I see that
it looks like it's a lot less saturated than the Verizon one
that reminds me of T-Mobile
I get like 30Kb/s here
on 3.5G
and dropped calls
so I called them and asked them what was up

[21:07]

milki

and then the call was dropped

[21:08]

m0unds

hahaha

[21:08]

acf_

lol not quite
they told me that their networks sucks and they have no plans to fix it within the next 6 months

[21:08]

milki

wow thats frank

[21:09]

m0unds

hahaha

[21:09]

acf_

any of you on T-Mobile?

[21:09]

m0unds

i was for 2 months
it was awful
haha
i was on it in the early 00s when tmo acquired voicestream in the us

[21:10]

acf_

yeah, probably I'm going the AT&T route soon
it's like the same price

[21:10]

m0unds

that was okay til they changed my plan without telling me and i racked up a $300 phone bill one month
yeah, i'm on at&t in abq
they've been solid - i've heard san fransisco is a rough market for them
dunno if you're ever that far north

[21:10]

acf_

I'd rather have reliable service here and spotty service other places than the other way around

[21:11]

m0unds

gotcha
they expanded their rural coverage in NM pretty heavily
i drove up to denver via us-285, which is really sparsely populated, and i had hspa+ the whole way

[21:11]

acf_

they're upgrading to LTE here
in the suburbs
I live right next to the cell site they're upgrading atm
and the took off the cage for the upgrade
acf_ looks for pictures

[21:13]

m0unds

the wind carried a radio rig right off the top of a vzw tower out here a few years ago
it was funny
fell down in the parking lot
one of those enclosed/shielded ones

mercutio

it's pretty windy here right now
@weather auckland

BryceBot

Auckland, New Zealand: Light Rain ☂ 55°F (13°C), Humidity: 99%, Wind: From the NE at 6.0 MPH Gusting to 15.2 MPH -- For more details including the forecast and almanac, see http://www.wunderground.com/cgi-bin/findweather/getForecast?query=-36.973896,174.878021 or re-request this with: @weather -v auckland

mercutio

what
it's more than that
@weather "north shore, auckland"

BryceBot

Multiple locations matched your query: North, SC (zmw:29112.1.99999), North, VA (zmw:23128.1.99999),

mercutio

uhh

m0unds

lol
nice

mercutio

oh you can use gps coordinates

m0unds

i think some of the PWS' have bad anemometers or whatever

mercutio

yeh but it's also not close enoguh to me :/

m0unds

because remember i said it was windy as hell here and the data showed 4mph or whatever
lame

http://unixcube.org/who/acf/tmp/14050162.jpg

mercutio

haha
yeah

[21:18]

acf_

[21:18]

mercutio

it says east 43km/h gust 61km/h

[21:19]

m0unds

48v ftw

[21:19]

mercutio

on the weather forecast
i think its' udpated every 10 minutes or something, but wind is a strange thing
you can get lots of tunnels etc where it's higher
hmm it's getting windier tonight
and wetter
13mm/hour later it seems
i watn a weather meter heh

[21:19]

m0unds

latency stabilized again

[21:21]

mercutio

i'll run my script again
i didn't cron it heh

[21:21]

acf_

mercutio: script?

[21:22]

mercutio

mtr --report --report-cycles=100 verizon.net
mtr --report --report-cycles=100 comcast.net
mtr --report --report-cycles=100 us.battle.net
just something basic :/

[21:23]

acf_

oh cool

[21:23]

mercutio

it kind of needs to echo what it's tracing to

acf_

up_the_irons: here you are:
http://paste.unixcube.org/k/d249f2

http://i.imgur.com/j4Y56wZ.png

m0unds

acf_

Verizon mtr
http://pastebin.com/S9EaF9Qx
Comcast mtr (from m0unds)

mercutio

yours is like mine

http://kremvax.acfsys.net/smokeping.cgi?target=Remote.comcastnet

acf_

mercutio

see how hoes 9 and 6 are worse

acf_

comcast Smokeping
http://kremvax.acfsys.net/smokeping.cgi?target=Remote.verizon-lsanca

mercutio

9.|-- 206.46.228.129 7.0% 100 62.8 63.1 62.5 65.1 0.2

acf_

Verizon smokeping

mercutio

10.|-- 206.46.232.39 11.0% 100 63.7 64.2 62.8 68.6 1.1
for some reason last hop gives me more now
comcast.net is fine again

acf_

still some latency on that affected hop

[21:26]

m0unds

yea, it's not too bad though
not adding 60ms like usual, haha
err, 30

[21:26]

mercutio

the comcast was never as bad

[21:26]

acf_

so, say the Verizon thingy degraded to like 50% packet loss eventually
the link would be effectively out completely

[21:27]

mercutio

http://pastebin.com/LykYgs6S
does aznyone use at&t

[21:27]

m0unds

as an isp?

[21:28]

acf_

I've never had them
this is kind of neat though:
http://ipnetwork.bgtmo.ip.att.net/

[21:28]

mercutio

i just test it cos i used to have issues with battle.net

m0unds

mercutio

and it tends to have problems :/
it's used ntt for ages
and used to be fine
but cogent to at&t used to be bad

acf_

that's strange

m0unds

huh, neat
i like data

acf_

in the mtr it looks like 28ms of latency is coming from within ntt

mercutio

it needs java

acf_

4. ae-3.r05.lsanca03.us.bb.gin.ntt. 0.0% 52 0.8 0.8 0.7 2.1 0.1
5. ae-0.att.lsanca03.us.bb.gin.ntt. 1.9% 52 26.1 29.9 24.5 34.0 2.2

m0unds

too bad it needs java for some of the functionality

mercutio

umm yeh that is strange
considering it's los angeels the whole way it seems

m0unds

what paste app is that you're using? homebrew?

[21:31]

acf_

yeah
written in golang

[21:31]

m0unds

cool

[21:31]

acf_

question: can anyone with an IPv6 tunnel reach http://ipnetwork.bgtmo.ip.att.net/ ?
it seems to have broken path mtu discovery for me

[21:33]

m0unds

yea, i was able to, but i don't know whether it used ipv6

[21:33]

acf_

hmm ok. it just times out for me now
because the tcp connection is established, but the packets get too big and are all dropped

[21:34]

m0unds

fwiw, it was super slow

[21:34]

RandalSchwartz

last hop 2001:1890:c00:6c02::11b5:9dbe

[21:34]

staticsafe

i reached that over v6
HE tunnel

[21:36]

***

pseudorandom has quit IRC (Quit: Leaving)

[21:41]

.................. (idle for 1h26mn)

brycec

http://ipnetwork.bgtmo.ip.att.net/ loads fine for me over HE (and over ARP)

[23:07]

acf_

hmm... my configuration must be jacked then
my router seems to be sending ICMP PTB messages though...

[23:08]

brycec: do you happen to remember your tunnel MTU?
23:19:29.563332 IP6 2607:f2f8:a0e0:4::2 > 2001:1890:1c00:3221::4:1022: ICMP6, packet too big, mtu 1440, length 1240
it's sending a bunch of those

[23:19]

brycec

acf_: 1280
(nothing that I set... I guess it's gif's default)

[23:21]

acf_

hmm ok thanks
do you happen to have any ideas?

[23:21]

brycec

nope

[23:22]

acf_

ok. I was having this problem with http://sprintlink.net/ a long time ago, but it went away
also http://www.enterprise.com/

[23:22]

***

mus1cb0x has joined #arpnetworks

[23:23]

brycec

holy crap, a non-tech company with ipv6

[23:23]

acf_

yeah it's cool
but it sucks when you have to force v4 in your browser when you want to rent a car

[23:23]

mus1cb0x

up_the_irons: i'd like to see if my vps on 14 comes down cleanly when you take it down for os upgrade tonight. how can i do that? (fbsd 9.2)

brycec

I'm jealous of Sprint's address, 2600::

acf_

I know. That's like the 8.8.8.8 IPv6

mus1cb0x

dang, why did spring get 2600::?

acf_

they didn't actually get the while thing, just the first part

mus1cb0x

ccc should have gotten it, or l0pht lol

brycec

acf_: more like having 1.0.0.0

acf_

yeah
I'm happy the sprint people put it to good use though :)

brycec

2600::/29
That's huge

[23:25]

acf_

16 /32s right?

[23:26]

brycec

8
:0 through :7:ffff_

[23:28]

up_the_irons

mus1cb0x: i start shutting them off at 00:05 PDT. If yours doesn't go down by 00:07 or so, you should manually shut it off. I keep retrying for 5 minutes. at 00:10, the whole box goes down.
mus1cb0x: acf_ brycec : I was a little too late for my /32 to be in 2600::, i've always been jealous
mine started at 2607::, as y'all know
acf_: can i ask you to send me that paste in a ticket (support@arpnetworks.com), otherwise i'm likely to forget forward to NTT

[23:35]

mus1cb0x

up_the_irons: ok i'll be here and watching the clock at :05. if it doesn't go down by :07 i'll manually shut it down
if i'm watching console would i see an acpi shutdown attempt?
(if it fails to take affect)

[23:37]

up_the_irons

mus1cb0x: you'll see it shutdown at least :)

[23:37]

acf_

up_the_irons: of course, just a bit :)

[23:39]

up_the_irons

[23:41]

mus1cb0x

btw is it just me or is it weird when women butcher their eyebrows down to thin unnatural lines?

[23:41]

up_the_irons

it's f'in weird and i hate it

mus1cb0x

THANK YOU

up_the_irons

np
:)

mus1cb0x

i don't know who sells women on this but it's NOT a friend of woman

up_the_irons

even worse: they shave 'em completely and pencil in their own

mus1cb0x

omfg yea
"hey miss potato head"