mercutio: you around?
staticsafe: i am now
mercutio: you think up_the_irons will announce IPs for a VPS without my own AS?
staticsafe: nope
staticsafe: do you have a /24 ?
yes
and is your provider just advertised it with their own ASN atm?
indeed
it's aRIN?
yes
looks to be $550 for an ASN and $100/year
on arin's fee schedule page.
the general issue with multiple providers doing that is it's harder to tell if people are spoofing or such.
im looking to move from my current provider, i'll be asking them to drop the announcement as soon as I'm done moving some stuff
you could always ask
new asn's juumped to 32 bits too.
there's no real ip to asn mapping
but if too asn's advertise the same ip address it can look like one provider is spoofing the other provider
actually i wouldn't worry too much, it used to be common.
but it's not considered good practice
wow the average programmer is 42.8 years
err average age for
how can you have your own IP space but no AS Number?
someone else is announcing the IP space
arin fees are so much smaller than apnic fees.
mnathani_: that's actually pretty common for legacy space.
can you multihome like that
with no AS
nope
mnathani_: in theory yes.
would require coordination among providers?
nope
inbound multihoming or outbound ?
you can do both
does it require anything special from the providers
not really, this is how things like google getting spoofed happens
there's quite a few instances of route hijacking that happen
there's various levels of filtering...
but overall it's a sorry state of affairs.
that said; it's easy to hijack.  but it's also reasonably easy to notice hijacking
but there's a reasonably real concern that if it got possible to make false certs easily for instance, it'd be easy to spoof paypal
if you can do damage in a short period of time, ..
http://www.slate.com/articles/technology/future_tense/2014/08/bgp_hijacking_cybercriminals_used_internet_architecture_to_mine_bitcoins.html
something like that
it's one of those issues that people have known about for years..
just like the other issue where you can spoof anyone's ip
the spoofing people's ip addresses makes ddos's harder to track.
and it seems to be less of an issue than it used to be.
but i don't know if it is that providers have done more to stop it, or if there are just more easily hackable sites to ddos from.
there must be well known solutions to system being down when a cron job is schedule to run it anyway lataer.
arp stops you ddos'ing from random ips.
I seem to recall something like "anacron" or something
RandalSchwartz: chronie
and anacron
that stuff all got fixed years back
when linux on desktop became common :)
https://wiki.archlinux.org/index.php/Cron
seems to be lots of information on there.
thanks
http://www.bgpmon.net/bgp-optimizer-causes-thousands-of-fake-routes/
hmm
so enzu(budgetvm) leaked routes on any2ix recently.
anyone else tracking the stock price of Amazon and Microsoft over the last few days?
nope, si it going downor up?
both going u p
MSoft %10
Amazon closer to %15
wow
i wonder why
wow
amazon web services made shit loads of money
its a solid product offering
it never impressed me :/
at the low end it pretty much sucks to my mind
but they are pretty well known with some big customers.
i really don't understand why people like netflix use aws
Api to control the vms, regions for redundancy
i suuppose it has that going for it
but they have all of their servers everywhere
youu'd think they could just go in house
netflix's web site is pretty bad actually
http://aws.amazon.com/solutions/case-studies/netflix/
hmm they have a case study
10s of thousands of instances
sounds really expensive :/
thousands of instances and hundreds of open connect appliances at the expense of service providers everywhere
they didn't design it to be used like a cloud server
"cloud" server in quotes (e.g. a VPS w/dedicated storage)
i think that's the biggest thing lots of folks don't get (not saying you don't, but it's a common misconception about aws and azure both)
m0unds++
Ooooh.... fcron.
like regular crons on steroids
I remember fcron (et al) from my Gentoo days...
did anyone ever use the at command?
it seems underused
i uused to just use sleep &&
use atq on fbsd
especially when doing updates to firewall or something critical to a server coponent incase i slam myself out remotely.. have a backup command ready to fire off after x time if i didnt jump in and stop it
s/atq/at/ - although atq is a command related too
just seemed cleaner using it in scripts instead of sleep and &(&&)
yeah
it's been around forever, i just don't see it uused much
i still suspend, bg, fg, jobs a lot too
yeah i do a bit
ah crap, i broke my bloody aosp repo again - my isp must ♥ me, be downloading like the end of the world is nigh
13GB a pop to download it again
maybe should get a good copy, tarball it, then if i break again just use the good repo
running out of space though... and places to put drives
can'y you just back it up
oh right yeh do that :/
or just zfs snapshot it
mercutio++ I was going to suggest the same thing (until I got caught up this far)
I typically transfer between 500GB and 1TB a month, my ISP can suck it.