#arpnetworks 2015-04-30,Thu

sorressean

Yeah, I figured it was'bnt.

staticsafe

submitted the needed paperwork to ARIN, now we wait o/

sorressean

thanks, going to try ipmitool

brycec

Hooray staticsafe
I want an ASN of my own... just to have, not for any real purpose.

[08:54]

staticsafe

heh
unfortunately ARIN frowns upon that

[08:56]

brycec

Yeeeaaaah
That they do.
I just want to feel important.

[08:56]

....... (idle for 30mn)

RandalSchwartz

For many months after I was abruptly terminated from Intel, the ASN for intel corp was still in my name
might have even been years... I forget.
it was some amazingly low number. :)

[09:26]

brycec

lol
AS99?

[09:28]

RandalSchwartz

Yeah, that was it

[09:29]

brycec

RegDate: 1987-02-19
Seems like it's no longer used

[09:29]

RandalSchwartz

yeah - I don't even remember why we got it, or why my name ended up attached to it.
oh - it's because we had an internal net, and two connections to the world

[09:30]

twobithacker

doesn't appear to be in the routing table

[09:35]

brycec

Because it's not announcing anything

[09:35]

RandalSchwartz

Yeah, not sure how they're doing it now

[09:35]

twobithacker

huh, bgp.he.net says it was seen as recently as Oct 2014

[09:36]

RandalSchwartz

weird

[09:36]

brycec

I thought Intel had a /8 but I don't see it now so I'm guessing they gave that back too.

[09:37]

RandalSchwartz

for a while, they used 128.215 inside the company, but it didn't belong to them. :)

brycec

lol. I wonder who it does belong to...

RandalSchwartz

Oh wait... that was the right number
one part of the company was using a routable number, but just made it up
eventually became a problem when we got "the net"

brycec

You stay classy, Intel!

RandalSchwartz

so they had to do a great renumbering
eventually joining 128.215

[09:40]

............. (idle for 1h2mn)

***

acf___ has joined #arpnetworks
SpaceDum1 has joined #arpnetworks

[10:43]

anis has joined #arpnetworks
acf__ has quit IRC (*.net *.split)
CaZe has quit IRC (*.net *.split)
SpaceDump has quit IRC (*.net *.split)
anisfarhana has quit IRC (*.net *.split)
ix33 has quit IRC (*.net *.split)
ix33 has joined #arpnetworks

[10:48]

staticsafe

hm ARIN needs an invoice, I guess I'll have to wait for billing to run today

[11:01]

brycec

staticsafe: What's wrong with last month's invoice?

[11:01]

staticsafe

my last ARP invoice was in April 2014 :P

[11:02]

brycec

Oh I see, returning to the fold then

[11:02]

................... (idle for 1h33mn)

***

hive-mind has quit IRC (Ping timeout: 256 seconds)
hive-mind has joined #arpnetworks

[12:35]

mercutio

static: with 32bit asn's you'd think they wouldn't see the need for such things?
or are requeusting a short ASN?

[12:37]

brycec

I think they just realized that there's no point in being reckless, that's how we end up with /8's used by a single company.
brycec should upgrade zeit.arpnetworks.com to Jessie...

[12:38]

mercutio

i don't that was a bad thing in the first place.
i just don't think anybody expected the internet to last so long
without changes

[12:40]

brycec

Well sure nobody planned ahead/expected it.
But I still don't think Ford Motor Company needs 16.8 million public IP addresses.

[12:40]

mercutio

that could have been fixed 18 years ago or something though

[12:41]

brycec

Practically everything could have been fixed in the past... hindsight and whatnot

[12:42]

mercutio

yeah

[12:42]

brycec

I have less of an issue with /8s that are assigned to computer companies (Apple, HP, DEC) or whole governments and transit providers, but COME ON why does an car company need 17 million IP's?!? Or an oil company? Or financial services?
brycec rages

[12:44]

m0unds

gotta put those PLCs on the public internet brycec

[12:44]

brycec

(That being said, I still don't think the United States Dept. of Defense needs 201 million public IP's, especially when they run their own non-Internet networks)
lol m0unds

[12:44]

mercutio

yeah well we know ipv4 is a mess

[12:45]

brycec

(And MIT's /8 is just MIT holding out to be dicks. True story.)

[12:45]

mercutio

so now we're trying to screw up ipv6
the ip address side of ipv6 is fine..
but how the hell do you multihome?

[12:45]

brycec

heh

[12:47]

mercutio

do you need a /48? do you need a /32?

[12:47]

sorressean

Anyone done any installs with IPMI using ipmitool? trying to install BSD over SoL. it's just hanging, not sure if there was anything special I needed to do.

[12:54]

mkb

I usually spend an enormous amount of time and effort trying to make it work and eventually give up and try to get someone else to do it

[12:56]

mercutio

the sol is configured normally, but you need to make sure whatever you're using is outputting to serial
java works

sorressean

awshit.

mercutio

i think i did java

sorressean

okay, maybe I can do that from FreeBSD installer

brycec

mercutio++

sorressean

Yeah, the java one isn't accessible with a reader.
There is literally no way for me to do this.

[13:00]

brycec

Some installers start a serial terminal by default alongside VGA.
I think Debian does, for instance.

[13:01]

staticsafe

multihoming with /48 works just fine

[13:01]

mercutio

static: yeh i think it generally does atm
but if everyone wanted to do it, there might be a push to become more restrictive

[13:03]

sorressean

Hrm. wonder if I can get arp to deploy bsd for me, given my issues

mercutio

and it goes back to the way of doing things that happened in ipv4

sorressean

This is fun learning, but I need this working so I can start the switch

mercutio

with people using "provider" space to multihome
sorressean: you can't get java wokring?
oh right

brycec

sorressean: Which BSD? if it's OpenBSD, I'll do it for you.

[13:05]

sorressean

mercutio: applet is not accessible
brycec: it's FreeBSD

[13:05]

brycec

blech :P

[13:05]

sorressean

I'm not cool enough for OpenBSD. :p
I like my jails.

[13:06]

mercutio

jails aren't necessarily secure

[13:06]

sorressean

No, they're not.
But they make my life a lot easier sometimes.

brycec

It's nice to have logical machines :)

sorressean

(I can easily just wipe them out and rebuild if I need. So I have a development jail)

mercutio

cool

brycec

it's not a hatred of FreeBSD or anything, just that I have far less experience installing it (and there are more questions involved, etc)
(oh and it takes longer)

BryceBot

That's what she said!!

mercutio

yeah as long as you're not overvalueing security from them, they're probably pretty useful

brycec

Too often people think of VM's and containers and jails as magical security cures. Gotta correct those people before they do damage.

mercutio

brycec: i think vm's are introducing less security in general :)
it's a complex problem though

[13:09]

sorressean

Yeah, it's useful in a sense, but it's not really the base of my security

[13:09]

brycec

Good.

[13:09]

mercutio

like 4 vm's are more likely to have a hole than 1 server.

brycec

(all my jails communicate over lo - now THERE's some network security :D)
*lo0
(er, lo1 actually)

mercutio

lo1

sorressean

brycec: I do that too.

staticsafe

100ge7-2.core1.lon2.he.net thats a lot of bits

sorressean

It's cool because you can limit what connects where and resource usage of groups of services

mercutio

it's only ge
* 100 :)

[13:11]

staticsafe

heh

[13:12]

mercutio

youu can get 100 gigabit ethernet cards for pc now i thnk
like connectx-4 does 100ge i thikn

[13:12]

mnathani_

@exch 56.49 usd to cad

[13:13]

BryceBot

56.49 USD -> 68.20224117 CAD (as of Thu, 30 Apr 2015 13:01:02 -0700)

[13:13]

staticsafe

the GBP to CAD exchange rate is painful
@exch 72.50 gbp to cad

[13:14]

BryceBot

72.50 GBP -> 111.26679936831 USD -> 134.33607868174 CAD (as of Thu, 30 Apr 2015 13:01:02 -0700)

[13:15]

staticsafe

yeah

[13:15]

mercutio

damnit have to request quote to get price for 100gbe card :/

[13:17]

brycec

heh

[13:19]

mercutio

i wonder what rouuting performance would be like on linux near 100gbe :/

[13:20]

http://arstechnica.com/security/2015/04/30/spam-blasting-malware-infects-thousands-of-linux-and-freebsd-servers/
this souunds like they've put some effort into doing a good job.

[13:32]

what openbsd has a bug
with mailformed executables.

[13:43]

brycec

It happens sometimes

BryceBot

That's what she said!!

brycec

And specifically, maliciously-formed ELFs

mercutio

yeah
hmm hammer2 may be getting ported to openbsd :)
gsoc project

https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/

brycec

<-- not holding his breath

[13:47]

mercutio

neither
that's why i said may
may overload whoever is doing it

[13:48]

.................................... (idle for 2h55mn)

oh openbsd 5.7 is out already

[16:43]

.......... (idle for 48mn)

m0unds

gah, one of my fans sounds sick
sounds like an old garage door opener

[17:31]

mercutio

at least fans are cheap

[17:39]

......... (idle for 42mn)

mkb

but nobody has received it in the mail yet

[18:21]

mercutio

oh?
it's usually early :(
isn't it?
i don't like cd's

[18:22]

mkb

it used to be
the new shipper is in England, that won't help us in North America

[18:22]

mercutio

i don't even have a cdrom drive :/
the idea mostly is for support
and to make it easier to write it off as a business expense
rather than to actually use
i think most people who buy cd's still download it
i'm starting to even use usb sticks less now

[18:23]

mkb

eh.. it'll arrive by the time I have a chance to install it and I only need it on my thinkpad locally at least

[18:24]

mercutio

i can just do pxe boot over network

[18:24]

mkb

now I'll download it a million times to install on servers
why in the world do they do this?

[18:24]

mercutio

what
just title :)
what i want is in between http and https
i want validation of content, cacheable
and validation of where something's coming from-
having keys etc on packgaes etc gives a reasonable certainty

[18:29]

mkb

and doesn't require https

[18:31]

mercutio

i'd actually like extended attribute stuff to be done more on unix
like when you download a file it stores where it came from
but yeah i'm kind of irrate at the way that caching is going out hte window
if you have 20 cellphones in an office you can't have a local proxy it cache updates
s/it/to/

[18:32]

BryceBot

<mercutio> if you have 20 cellphones in an office you can't have a local proxy to cache updates

mkb

http was supposed to do that

mercutio

well not on android, as all the updates go via https.

mkb

the rfc describes all sorts of caches and proxies

mercutio

yeah i haev a local proxy

mkb

https screws it up

mercutio

it's even on ssd's :)
it's very noticable with things like updating packages on two hosts.
because it's like 100x the speed :)

mkb

I wish I had more than one openbsd machine at work

mercutio

why's that?

mkb

everything would work much better if only we'd scrap linux

mercutio

like what?

mkb

no more systemd

[18:36]

mercutio

systemd is fine

[18:36]

mkb

actually that's not a fair complaint because I don't think we're ever going to really upgrade past centos 6

[18:36]

mercutio

i find stability and predictability are better with openbsd
but upgrades can be a pita

mkb

exactly

mercutio

lots of people still use centos5
i hate centos

mkb

they go changing crap every six months on linux or else it's one of the old centos 6 machines

mercutio

what's with that fastmirror crap
it doesn't even work reliably
and it takes ages

mkb

we have a mirror but fastmirror can't figure that out
and there's like 5 mirrors on internet2 closer that it can't find either

mercutio

new zealand is actually good for mirrors in general
and most mirrors will do 60 to 80mb/sec+
there's no openbsd mirror in new zealand though.
yeah it's 5 mirrors on internet2 that's the issue
i can understand it not finding a local mirror...
if it's just your own mirror
but it seems to be bad even with public mirrors

[18:38]

mkb

I think we have a public mirror
It's a university

[18:39]

mercutio

oh
oh taht's even worse :)

[18:39]

mkb

should be 1Gbit/s

[18:40]

mercutio

the problem with universitys can sometimes be that file storage is non-local and slow

[18:40]

mkb

oh I never considered he might put the files on NFS

[18:41]

mercutio

so there may be plenty of network capacity and slow disk

[18:41]

mkb

I hope not

[18:41]

mercutio

it depends, is nfs everywhere there?
it used to be extremely common in sun days
it's not so common for newer setups, that are more linuxy ;/

[18:42]

mkb

we use it all over the place, but I don't know anything about how it's run

[18:42]

mercutio

but it's making a come back with vmware

[18:43]

.... (idle for 16mn)

sorressean: did you get sorted ok?

[18:59]

.......................... (idle for 2h8mn)

***

dj_goku has quit IRC (Remote host closed the connection)

[21:07]

............ (idle for 58mn)

mordac has joined #arpnetworks

[22:05]

mordac

hello, can i please request that the OpenBSD 5.7 install CD be added to the list of CD-ROMs available in the control panel? The amd64 URL is http://ftp5.usa.openbsd.org/pub/OpenBSD/5.7/amd64/install57.iso
the i386 url is http://ftp5.usa.openbsd.org/pub/OpenBSD/5.7/amd64/install57.iso
er...http://ftp5.usa.openbsd.org/pub/OpenBSD/5.7/i386/install57.iso

[22:05]

.... (idle for 16mn)

mercutio

it'll probably be added shortly mordac
it's less than 24 hours since release.

[22:25]

.... (idle for 15mn)

brycec

mkb, mercutio - if you hadn't heard there are manufacturing issues with the CD's so they're late.
(It's still best to send an email so up_the_irons has a todo item to cross off)

[22:41]

mordac

mercutio: I make the request because it was my request that got 5.6 up in November. I don't mind making the request and it seems to get the job done. :)

[22:53]

mercutio

ahh ok

[22:53]

brycec

heh
Oh mordac, typical OpenBSD nerd...
Well up_the_irons tells me my dedicated machine has been upgraded, and indeed it's back up and running... but for whatever reason I cannot SSH in. *sigh*

[22:54]

mercutio

ipmi?

[22:59]

brycec

looks like it. Damn firewall... worked fine before the shutdown, now I'm apparently locked out.
<3 "sol activate"

[23:01]

mercutio

yeah it's convenient. what'd you do to it?

[23:12]

brycec

Second hard drive and more RAM

[23:14]

brycec gets to look forward to an online RAID build in-production, w00t

[23:25]

wtf, Linux... "ip route add...." "RTNETLINK answers: No such process" and I have no routes
heh my network configs are apparently totally screwy. Thank goodness for IPMI sol!

[23:35]

mercutio

hmm
uubuuuntu trusty?

[23:40]

brycec

Debian Wheezy

mercutio

oops leaning on keys
ahhh
that shouldn't have anything weird about it's setup

brycec

Seems like it might be having some odd issues with bridging atop bonded interfaces

mercutio

sh
oh

brycec

purely script-wise. Technically it works fine.
For whatever reason when Debian's ifup adds the ipv4 to the bridge, it doesn't take. No errors or anything, and I can manually run the ip commands later and get it up.
well here goes nothing...
hooray! everything is just fine
removed the inet6 configuration and everything came up just fine