[00:37] pjs: your first VPS order has been completed just now [05:41] *** SpaceDum1 has quit IRC (Ping timeout: 240 seconds) [05:42] *** m0unds has quit IRC (Ping timeout: 264 seconds) [05:48] *** SpaceDump has joined #arpnetworks [05:54] *** m0unds has joined #arpnetworks [10:22] *** mercutio has quit IRC (Ping timeout: 264 seconds) [10:22] *** mercutio has joined #arpnetworks [10:23] *** mercutio is now known as Guest61571 [10:26] *** ben2 has joined #arpnetworks [10:27] *** Guest61571 has quit IRC (Ping timeout: 240 seconds) [12:08] *** ben2 is now known as mercutio [13:32] *** SpaceDump has quit IRC (*.net *.split) [13:32] *** vissborg has quit IRC (*.net *.split) [13:32] *** dj_goku has quit IRC (*.net *.split) [13:32] *** merc2 has quit IRC (*.net *.split) [13:32] *** mercutio has quit IRC (*.net *.split) [13:32] *** jlgaddis has quit IRC (*.net *.split) [13:32] *** dwarren has quit IRC (*.net *.split) [13:32] *** qbit has quit IRC (*.net *.split) [13:32] *** b^_^d has quit IRC (*.net *.split) [13:32] *** tooth has quit IRC (*.net *.split) [13:32] *** ix33 has quit IRC (*.net *.split) [13:32] *** anisfarhana has quit IRC (*.net *.split) [13:32] *** pjs has quit IRC (*.net *.split) [13:34] *** novae has quit IRC (*.net *.split) [13:34] *** dne has quit IRC (*.net *.split) [13:34] *** meingtsla has quit IRC (*.net *.split) [13:34] *** NiTeMaRe has quit IRC (*.net *.split) [13:35] *** anisfarhana has joined #arpnetworks [13:35] *** pjs has joined #arpnetworks [13:35] *** tooth has joined #arpnetworks [13:35] *** dwarren has joined #arpnetworks [13:35] *** b^_^d has joined #arpnetworks [13:35] *** jlgaddis has joined #arpnetworks [13:35] *** merc2 has joined #arpnetworks [13:35] *** dj_goku has joined #arpnetworks [13:35] *** ix33 has joined #arpnetworks [13:35] *** qbit has joined #arpnetworks [13:35] *** vissborg has joined #arpnetworks [13:35] *** SpaceDump has joined #arpnetworks [13:35] *** mercutio has joined #arpnetworks [13:35] *** novae has joined #arpnetworks [13:35] *** dne has joined #arpnetworks [13:35] *** meingtsla has joined #arpnetworks [13:35] *** NiTeMaRe has joined #arpnetworks [13:35] *** vissborg has quit IRC (Excess Flood) [13:37] *** brycec has quit IRC (*.net *.split) [13:37] *** mnathani has quit IRC (*.net *.split) [13:37] *** mkb has quit IRC (*.net *.split) [13:37] *** phlux has quit IRC (Ping timeout: 244 seconds) [13:38] *** brycec has joined #arpnetworks [13:38] *** mnathani has joined #arpnetworks [13:38] *** mkb has joined #arpnetworks [13:38] *** hazardous has quit IRC (Ping timeout: 245 seconds) [13:38] *** vissborg has joined #arpnetworks [13:38] *** phlux has joined #arpnetworks [13:39] *** mdu59 has quit IRC (*.net *.split) [13:39] *** toeshred has quit IRC (*.net *.split) [13:39] *** DaCa has quit IRC (*.net *.split) [13:39] *** hazardous has joined #arpnetworks [13:41] *** mdu59 has joined #arpnetworks [13:41] *** toeshred has joined #arpnetworks [13:41] *** DaCa has joined #arpnetworks [13:43] *** BryceBot has quit IRC (*.net *.split) [13:43] *** BryceBot has joined #arpnetworks [13:44] *** hazardous has quit IRC (*.net *.split) [13:44] *** phlux has quit IRC (*.net *.split) [13:44] *** vissborg has quit IRC (*.net *.split) [13:44] *** m0unds has quit IRC (*.net *.split) [13:44] *** eryc has quit IRC (*.net *.split) [13:44] *** technoid_ has quit IRC (*.net *.split) [13:44] *** CaZe has quit IRC (*.net *.split) [13:44] *** staticsafe has quit IRC (*.net *.split) [13:44] *** gizmoguy has quit IRC (*.net *.split) [13:44] *** plett has quit IRC (*.net *.split) [13:44] *** Hien has quit IRC (*.net *.split) [13:44] *** hive-mind has quit IRC (*.net *.split) [13:44] *** carvite has quit IRC (*.net *.split) [13:44] *** joepie91- has quit IRC (*.net *.split) [13:44] *** reardencode has quit IRC (*.net *.split) [13:44] *** mike-burns has quit IRC (*.net *.split) [13:44] *** neish_ has quit IRC (*.net *.split) [13:44] *** tellnes has quit IRC (*.net *.split) [13:44] *** twobithacker has quit IRC (*.net *.split) [13:44] *** acf_ has quit IRC (*.net *.split) [13:47] *** jbergstroem has quit IRC (*.net *.split) [13:47] *** jbergstroem has joined #arpnetworks [13:48] *** bitslip has quit IRC (*.net *.split) [13:48] *** raptelan has quit IRC (*.net *.split) [13:48] *** mjp has quit IRC (*.net *.split) [13:48] *** awyeah has quit IRC (*.net *.split) [13:48] *** hazardous has joined #arpnetworks [13:50] *** vissborg has joined #arpnetworks [13:51] *** phlux has joined #arpnetworks [13:51] *** m0unds has joined #arpnetworks [13:51] *** eryc has joined #arpnetworks [13:51] *** technoid_ has joined #arpnetworks [13:51] *** CaZe has joined #arpnetworks [13:51] *** staticsafe has joined #arpnetworks [13:51] *** gizmoguy has joined #arpnetworks [13:51] *** plett has joined #arpnetworks [13:51] *** Hien has joined #arpnetworks [13:51] *** hive-mind has joined #arpnetworks [13:51] *** carvite has joined #arpnetworks [13:51] *** joepie91- has joined #arpnetworks [13:51] *** reardencode has joined #arpnetworks [13:51] *** mike-burns has joined #arpnetworks [13:51] *** neish_ has joined #arpnetworks [13:51] *** tellnes has joined #arpnetworks [13:51] *** twobithacker has joined #arpnetworks [13:51] *** acf_ has joined #arpnetworks [13:51] *** sinisalo.freenode.net sets mode: +o mike-burns [13:52] *** technoid_ has quit IRC (Write error: Broken pipe) [13:52] *** technoid__ has joined #arpnetworks [13:53] *** toddf has quit IRC (*.net *.split) [13:53] *** kevr has quit IRC (*.net *.split) [13:53] *** relrod has quit IRC (*.net *.split) [13:53] *** tabthorpe has quit IRC (*.net *.split) [13:53] *** jcv has quit IRC (*.net *.split) [13:53] *** JC_Denton has quit IRC (*.net *.split) [13:54] *** toddf has joined #arpnetworks [13:54] *** relrod has joined #arpnetworks [13:54] *** kevr has joined #arpnetworks [13:54] *** tabthorpe has joined #arpnetworks [13:54] *** jcv has joined #arpnetworks [13:54] *** JC_Denton has joined #arpnetworks [13:54] *** sinisalo.freenode.net sets mode: +o toddf [13:54] *** up_the_irons has quit IRC (*.net *.split) [13:54] *** ant has quit IRC (*.net *.split) [13:54] *** KDE_Perry has quit IRC (*.net *.split) [13:55] *** bitslip_ has joined #arpnetworks [13:55] *** up_the_irons has joined #arpnetworks [13:55] *** ant has joined #arpnetworks [13:55] *** KDE_Perry has joined #arpnetworks [13:55] *** sinisalo.freenode.net sets mode: +o up_the_irons [13:55] *** pyvpx has quit IRC (*.net *.split) [13:55] *** milki has quit IRC (*.net *.split) [13:55] *** SpeedBus has quit IRC (*.net *.split) [13:55] *** pcn has quit IRC (*.net *.split) [13:55] *** josephb has quit IRC (*.net *.split) [13:55] *** bitslip has joined #arpnetworks [13:55] *** raptelan has joined #arpnetworks [13:55] *** mjp has joined #arpnetworks [13:55] *** awyeah has joined #arpnetworks [13:56] *** bitslip has quit IRC (Ping timeout: 244 seconds) [14:00] *** pyvpx has joined #arpnetworks [14:00] *** milki has joined #arpnetworks [14:00] *** SpeedBus has joined #arpnetworks [14:00] *** pcn has joined #arpnetworks [14:00] *** josephb has joined #arpnetworks [14:02] *** phlux has quit IRC (*.net *.split) [14:02] *** m0unds has quit IRC (*.net *.split) [14:02] *** eryc has quit IRC (*.net *.split) [14:02] *** CaZe has quit IRC (*.net *.split) [14:02] *** gizmoguy has quit IRC (*.net *.split) [14:02] *** staticsafe has quit IRC (*.net *.split) [14:02] *** plett has quit IRC (*.net *.split) [14:02] *** Hien has quit IRC (*.net *.split) [14:02] *** hive-mind has quit IRC (*.net *.split) [14:03] *** carvite has quit IRC (*.net *.split) [14:03] *** joepie91- has quit IRC (*.net *.split) [14:03] *** reardencode has quit IRC (*.net *.split) [14:03] *** mike-burns has quit IRC (*.net *.split) [14:03] *** neish_ has quit IRC (*.net *.split) [14:03] *** tellnes has quit IRC (*.net *.split) [14:03] *** twobithacker has quit IRC (*.net *.split) [14:03] *** acf_ has quit IRC (*.net *.split) [14:06] *** phlux has joined #arpnetworks [14:06] *** m0unds has joined #arpnetworks [14:06] *** eryc has joined #arpnetworks [14:06] *** CaZe has joined #arpnetworks [14:06] *** staticsafe has joined #arpnetworks [14:06] *** gizmoguy has joined #arpnetworks [14:06] *** plett has joined #arpnetworks [14:06] *** Hien has joined #arpnetworks [14:06] *** hive-mind has joined #arpnetworks [14:06] *** carvite has joined #arpnetworks [14:06] *** joepie91- has joined #arpnetworks [14:06] *** reardencode has joined #arpnetworks [14:06] *** mike-burns has joined #arpnetworks [14:06] *** neish_ has joined #arpnetworks [14:06] *** tellnes has joined #arpnetworks [14:06] *** twobithacker has joined #arpnetworks [14:06] *** acf_ has joined #arpnetworks [14:06] *** sinisalo.freenode.net sets mode: +o mike-burns [14:08] *** CaZe has quit IRC (Remote host closed the connection) [14:09] *** CaZe has joined #arpnetworks [15:43] *** hive-mind has quit IRC (Ping timeout: 244 seconds) [15:50] *** hive-mind has joined #arpnetworks [16:07] *** mkb_ has joined #arpnetworks [16:10] *** mnathani has quit IRC (Ping timeout: 264 seconds) [16:10] *** mkb has quit IRC (Ping timeout: 264 seconds) [16:10] *** brycec has quit IRC (Ping timeout: 264 seconds) [16:10] *** brycec has joined #arpnetworks [16:13] *** mnathani has joined #arpnetworks [16:55] *** twobithacker has quit IRC (Read error: Network is unreachable) [16:56] *** twobithacker has joined #arpnetworks [17:31] *** gizmoguy has quit IRC (Ping timeout: 244 seconds) [17:32] *** gizmoguy has joined #arpnetworks [18:49] *** toddf has quit IRC (Ping timeout: 265 seconds) [18:51] *** gizmoguy has quit IRC (Ping timeout: 244 seconds) [18:55] *** gizmoguy has joined #arpnetworks [18:57] *** toddf has joined #arpnetworks [18:57] *** ChanServ sets mode: +o toddf [19:00] *** mike-burns has quit IRC (Ping timeout: 244 seconds) [19:05] *** mike-burns has joined #arpnetworks [19:05] *** ChanServ sets mode: +o mike-burns [19:11] *** CaZe has quit IRC (Quit: Reconnecting) [19:11] *** CaZe has joined #arpnetworks [19:12] *** gizmoguy has quit IRC (Ping timeout: 244 seconds) [19:13] *** CaZe has quit IRC (Changing host) [19:13] *** CaZe has joined #arpnetworks [19:16] *** gizmoguy has joined #arpnetworks [19:21] *** Hien has quit IRC (Ping timeout: 244 seconds) [19:29] *** CaZe has quit IRC (Ping timeout: 244 seconds) [19:31] *** gizmoguy has quit IRC (Ping timeout: 244 seconds) [19:34] *** gizmoguy has joined #arpnetworks [19:51] *** zhangxiaobao has joined #arpnetworks [19:54] *** toddf has quit IRC (Ping timeout: 244 seconds) [19:54] *** toddf has joined #arpnetworks [19:54] *** ChanServ sets mode: +o toddf [19:58] Hello guys [20:00] hi [20:01] I'm trying to set up ipv6 multihoming without BGP. Does LISP(Locations/ID seperation protocol) work when the other endpoint doesn't support LISP? Should I use ULA with prefix translation? Does it break anything? Are there any other options? [20:02] i have no idea sorry [20:07] What are the benefits of enabling IPv6 for an average home user? [20:11] nil :) [20:11] the main advantage of ipv6 is more ip addresses with direct connectivity. but the majority of things do not use it. [20:12] it has more benefit to mobile providers who are running out of ip addresses and are starting to use nat, and it may in some cases stop you having to use carrier grade not of your provider [20:12] but as of right now, it's mostly useful if you want to "play" with more ip addresses, or if you want direct connectivity to multiple hosts. [20:12] which home users don't generally need. [20:13] *** Hien has joined #arpnetworks [20:13] *** Hien has quit IRC (Changing host) [20:13] *** Hien has joined #arpnetworks [20:13] OK, thank you very much [20:13] the amount of usage of ipv6 is increasing, but it's mostly to things like google, facebook etc which are all on ipv4 as well as ipv6 [20:14] with businesses there are some advantages. if you want to connect two networks together and directly access each other, you can each have your own ip address space and not have to renumber. [20:15] but so many things depend on ipv4 right now you still have to renumber. and just using an ip address space other than 10.0.0.0/8, 192.168.1.0/24, 192.168.0.0/24 means you're less likely to clash. [20:16] if you really want to multihome then it's reasonably easy to get ip address space to multihome. [20:16] it's easier in most instances than increasing your amount of ip address space. [20:16] well my mobile provider uses 172.x and my college uses some 10.x and 192.168 :) [20:17] i wouldn't say there's anything bad about playing with ipv6. [20:17] i can't get my own ip address because my upstream(college) won't route it [20:17] well you'd need two providers to be of benefit anyway. [20:18] do you want multiple incoming addresses at home? [20:18] err at your college? [20:18] er...yes [20:19] why? :) [20:19] because of the great firewall of china [20:19] you mean you want to bypass firewall? [20:19] you can vpn [20:19] you could vpn to somewhere which may let you have incoming connections. [20:19] it's not about incoming connections, but outgoing ones [20:20] from my understanding, the most consistent performance from china for vpn'ing comes from vpn'ing to hong kong. [20:20] but if you want to access the US, then as long as you have a route that doesn't give evening congestion than vpn'ing to the US should work ok. [20:20] i've been doing this [20:21] but the problem comes when you want to route some stuff over vpn and some stuff not. [20:21] but then if you want to visit a website in china you're going china-->us-->china [20:21] yes, exactly [20:21] exactly. [20:21] that's why i'm trying to do multihoming [20:21] ok there are other solutions. [20:21] do you have a linux box there? [20:22] yes i'm using one as a router [20:22] can it run squid? [20:22] i think so [20:22] can you code in perl? [20:22] not really :) [20:22] if you can fake it you're probably fine :) [20:23] i did a perl plugin for squid before that can proxy to various proxies depending on what country a destination is in [20:23] or go direct if within the same country [20:24] it's really sloppy and proof of concept, but i think it'd work the best/easiest for normal usage for you [20:24] this can only proxy http connections right? [20:24] http and https [20:24] so can do fakebook etc [20:24] how does https work? [20:24] you set proxy as explicit proxy on your computer [20:24] doesnt it break the end to end model? [20:25] and then it does a CONNECT www.facebook.com etc [20:25] and looks like http [20:25] http://en.wikipedia.org/wiki/HTTP_tunnel [20:25] like that [20:25] HTTP tunnel :: HTTP tunneling is a technique by which communications performed using various network protocols are encapsulated using the HTTP protocol, the network protocols in question usually belonging to the TCP/IP family of protocols. The HTTP protocol therefore acts as a wrapper for a channel that the network protocol being tunneled uses to communicate. The HTTP stream with its covert channel is termed an HTTP tunnel. HTTP tunnel... [20:25] so it proxies https from the tcp layer? [20:26] i'm in new zealand, i played with having it proxy for US, UK etc. [20:26] but it can probably be simplified [20:26] acttually even how it is now it goes direct for china :) [20:26] because NZ -> CN is faster than NZ -> US -> CN [20:26] yeah [20:26] } elsif ($geoip =~ m/CN/) { [20:26] print "ERR\n"; [20:26] it's hackish like that :) [20:26] basically squid just has to see OK or ERR [20:27] if it's a china or non china web site [20:27] :) [20:27] but you probably want TW etc to go direct too [20:27] http://pastebin.com/mpFQW11r [20:28] what about things other than http(s)? [20:28] well you'd have to VPN properly for that [20:28] lots of things can use http/https proxy [20:28] even things like skype can afaik [20:28] that's just a subsection [20:28] basically i just added a few things hah [20:29] but you still have to set the proxy setting yourself? [20:29] most things listen to internet explorer proxy settings in windows [20:30] well i'm trying to set up wireless network for my roommates who doesn't know what is http... [20:30] it's just using the maxmind database for geoip [20:30] well i'd do it the squid way myself :) [20:30] there is an alternative way [20:31] but it's the simplest way to get good performance for web [20:31] now i'm routing everything over vpn but they complain it's too slow for websites within china [20:31] yeah [20:31] the other way is using BGP [20:32] and the other way still is to vpn to hong kong [20:33] # lookmeup www.china.cn [20:33] Rev 1: CN 22 Beijing [20:33] so i have a script like that [20:33] what is that? [20:33] if all the web sites end in .cn, ,tw etc you can make rules in squid too [20:33] it's a maxmind lookup [20:34] geoiplookup -f /usr/local/share/GeoIP/GeoLiteCity.dat $1 | mawk -F, '{ print $2, $3, $4 }' [20:34] it just formats it a little nicer [20:34] oh ok [20:34] http://dev.maxmind.com/geoip/geoip2/geolite2/ [20:34] seems there's a new format [20:35] but you can basically download database of where ip's are [20:35] i'm thinking of a global routing table [20:35] you can do that too [20:36] but it's still complicated :/ [20:36] like this:https://github.com/fivesheep/chnroutes [20:36] gets subnet allocation from apnic [20:36] then add routes to a specific country [20:37] works at ip layer instead of squid layer [20:38] ok try that then ;) [20:39] i imagine you'll have to force it to route things like google through it [20:39] i haven't tried it [20:39] well google gives me an apnic ip [20:40] but i'd imagine it would have some trouble with anycast ips? [20:40] google doesn't anycast normally [20:40] 8.8.8.8 is anycasted [20:40] but it's not the norm [20:41] and 8.8.8.8 is ARIN ip [20:41] are you receiving ip for google.co.nz? [20:41] google.co.nz is a cname to google.com [20:41] so it's the same [20:41] oh, ok [20:41] 74.125.237.216 [20:41] i usually get ip's like that though [20:41] which i assume is arin [20:42] yeah that's arin [20:42] but it sometimes can give APNIC results, google are kind of weird. :) [20:42] and there's nothing worse than thinsg that randomly break [20:43] yeah [20:43] but yeah as a first shot try bypassing for all apnic ip addresses [20:43] should be able to find a list of their ranges somewhree [20:44] http://www.apnic.net/publications/research-and-insights/ip-address-trends/apnic-resource-range [20:44] so uhh [20:44] that should be easy, it's all /8? [20:44] yeah hangon [20:46] http://pastebin.com/D3Ey4fJy [20:46] try that [20:46] but change 192.168.1.1 to your gateway [20:47] i'm not trying now [20:47] only have ssh access to my router [20:47] will do when i get back [20:48] ok [20:49] it may still go via US to some universitys etc [20:49] at least here some universities have legacy pre-apnic address space [20:50] but it should fix most stuff [20:50] even just 202.0.0.0/8 and 203.0.0.0/8 would probably fix qutie a lot [20:56] *** zhangxiaobao has quit IRC (Quit: Page closed) [21:52] *** dj_goku has quit IRC (Ping timeout: 244 seconds) [21:55] *** dj_goku has joined #arpnetworks [21:55] *** dj_goku has quit IRC (Changing host) [21:55] *** dj_goku has joined #arpnetworks