#arpnetworks 2015-05-20,Wed

http://www.amazon.com/dp/B0073W6YDA/

brycec

BryceBot

Amazon: "IOGEAR 2-Port Dual-Link DVI Cable KVM with Audio (GCS982U)"

mercutio

that kind of thing is probably cheaper on ebay

brycec

It was $95 yesterday

mercutio

oh it does dual-link dvi
not just dual dvi

brycec

Yeah, bit of a niche product

Though supposedly this will do it for $30 http://www.ebay.com/itm/StarTech-10-ft-4-in-1-USB-Dual-Link-DVI-D-KVM-Switch-Cable-w-Audio-Microphon-/291286882111?pt=LH_DefaultDomain_0&hash=item43d20d173f

I'm weary...

http://www.ebay.com/itm/StarTech-2-Port-High-Resolution-USB-DVI-Dual-Link-KVM-Switch-w-Audio-/251967162711?pt=LH_DefaultDomain_0&hash=item3aaa69c957

mercutio

i just use synergy :/
it's so handy being able to cut and paste etc.
but if you don't have space for another monitor..

[15:13]

brycec

When most products are $100 and this is $30, I question whether it's accurately listed.
mercutio: Yeeeaaah, or money for another 27" display :P Plus I don't need to use two computers simultaneously with it
I just don't want to unplug-replug when I switch computers

[15:14]

mercutio

http://www.ebay.com/itm/Thinklogical-Velocitykvm-8-Velocity-8-KVM-Receiver-Extensuon-Dual-Link-DVI-/151449592509?pt=LH_DefaultDomain_0&hash=item23431962bd
i wonder what this is :)
i can't see the back

[15:14]

brycec

yes you can

[15:15]

mercutio

oh click right arrow :)

[15:15]

brycec

not sure if UX failure, or mercutio failure :p

[15:15]

mercutio

yeh it should auto scroll :)
i found a datasheet anyway

[15:16]

brycec

I just read the description from the front of the unit

[15:16]

mercutio

it's not really what you want
still kind of nifty :)

[15:16]

brycec

lol, noooo not by a long shot :p
Great if I had to drive a video wall or similar, I suppose
Oh cool it looks like I can find the same $30 dual-link kvm on Amazon (for $30)
actually for cheaper

[15:17]

mercutio

maybe it's worth trying
although is that just a cable?

[15:19]

brycec

ohshit, no, it's just a cable

[15:19]

mercutio

[15:20]

brycec

can't really fault them, they do say it... it just didn't stand out to me.
Yeah probably complements that

[15:20]

mercutio

the other one looked nicer

[15:20]

brycec

probably why http://www.amazon.com/dp/B0073W6YDA/ ended up on my list :p

BryceBot

Amazon: "IOGEAR 2-Port Dual-Link DVI Cable KVM with Audio (GCS982U)"

mercutio

yeah that's there too
it's more expensive on ebay for me

brycec

Though I do tend to prefer detachable cables.

mercutio

but if i sort by price it doesn't show stufuf that doesn't ship to me
well you can use normal cables probably

brycec

(I wonder if I could just use usb cables I have laying around and cheap DL DVI cables off Monoprice with the $55 switch
lol

mercutio

yeh probably

brycec

3ft cable is $4.31 on Monoprice
and has the benefit of letting me "customise" the length

mercutio

i'd want one of mine to be longer than that at least.
ahh.
i wouldn't bother with audio :/

brycec

me either
(my tower sits just behind my monitor, so I don't need much length)

[15:23]

mercutio

heh i'm using a really really short network cable
i think it's 60 cm

[15:24]

brycec

that's not /that/ short

[15:24]

mercutio

it is for computer to computer
it's like 2 feet?

[15:24]

brycec

yeah 23"
I have something about that long here too. Again, don't need much - I have a switch on my desk

mercutio

but because it's infiniband, it was much cheaper that way.

brycec

Ah IB

mercutio

32 gigabit :/
i shoudl fix linux on my windows computer and see how fast it can go
i expect to only get like 20 gigabit out of it
but in windows it's more like 10 gigabit with samba

........... (idle for 54mn)

mnathani_

mercutio: are you doing ram to ram transfers, if not I would like to know what disks can sustain 10 gigabit reads / writes

[16:21]

mercutio

/dev/md1:
Timing buffered disk reads: 4606 MB in 3.00 seconds = 1534.74 MB/sec
ssd raid :)
that's basically the limit on onboard sata.
there's 4x pci-e 2 for 20gbit then with 8/10 encoding pushing you to 16 gigabit.
then sata overhead etc

[16:22]

mnathani_

i7 processor?

[16:23]

mercutio

i7-4770 on linux server
i7-3770 on windows desktok
both with ddr3-2000 @ cas 9 latency i'm pretty sure
but samba isn't multithreaded so it can use 100% cpu on one core of i7-4770
i'm using zfs for normal data though
and have lz4 compression enabled..
i have a feeling performance would be slightly higher with ext4.
but higher speeds are just nifty, i more care about not getting slow, snapshots, checksumming, redundancy
and by using ssd's it's easier to backup over the net
because you're not tempted to stick big files on there too much

[16:24]

mnathani_

brycec: I could clear my local dns cache, but most likely the upstream recursive dns server (either my ISP or Google DNS) has an old cache entry in there as well

[16:28]

mercutio

mnathani_: dnsmasq automatically propogates /etc/hosts if you use that.
it's pretty handy for home networks.

[16:30]

mnathani_

so I would point local hosts to that designated name server box running dnsmasq?

[16:37]

mercutio

yeh
and you get a local dns cache out of it too

[16:38]

mnathani_

not to mention single point of faliure
s/faliure/failure

[16:39]

BryceBot

<mnathani_> not to mention single point of failure

[16:39]

mnathani_

I guess I could have 2 setup and use as primary and secondary dns

[16:39]

mercutio

for home just having single dns is fine
you can alwyas set secondary to an extenral

[16:40]

staticsafe

i have a local resolver with Google Public DNS as a backup

[16:41]

mercutio

i don't have any backup on my windows host i think

[16:41]

staticsafe

DHCP all the things

mnathani_

staticsafe: did your prefix ever get the right as path via NTT and Cogent?

mercutio

yeah no backup

staticsafe

mnathani_: haven't checked

mercutio

i can always change it if i have a hardware meltdown or something
i'd rather fix it if there is an issue though

mnathani_

does dnsmasq have a feature where it re-requests records as they are expiring so as to have a perpetual cache?

[16:43]

mercutio

nope
unbound's doesn't really help in home situations much though
it's only if it's requested in the last 10% or something
so it more helps if you have a busy cache.

[16:43]

staticsafe

unbound's prefetch feature is indeed useless for small caches
it would be more useful for a ISP running resolver for their clients

[16:44]

mercutio

basically unbound doesn't want to create significant extra dns load
so it's pretty conservative.
and i mean unbound is REALLY popular now.
so if unbound was aggressive people would probably notice.
i mean there's probably still more bind etc than unbound out there
but a lot of isp type situations have shifted to it.

[16:45]

staticsafe

yeah tonnes of BIND out there

mercutio

and it's the more used dns that tend to have moved :)

staticsafe

especially since BIND comes preinstalled with some distros

mercutio

*cough*
i hate bind.
i think arp is using bind and unbound for recursive
i wonder if prefetch is enabled.
i used to do dnsmasq and powerdns to have different servers for recursive.

mnathani_

authoritative at arp is poweredns with bind slave

[16:47]

mercutio

but now days i just use unbound, and if there's an issue there's an issue.
i'm talking about recursive.
unbound is recursive only.

[16:47]

mnathani_

s/poweredns/powerdns

[16:48]

BryceBot

<mnathani_> authoritative at arp is powerdns with bind slave

[16:48]

mercutio

i still haven't tried nsd :)
keep meaning to
powderdns recursor isn't too bad. but the authorative looked a bit ick to me

[16:48]

mnathani_

mercutio: what do you guys use at $dayjob for recursive

mercutio

unbound.
*3

mnathani_

load balanced?

mercutio

nope.
there's anycast on primary though
but 1 gets all the load.
hmm, haven't enabled dnssec yet though
we've got a list of blocked domains here too.

brycec

I love nsd. Don't think I'll ever look back at bind after I started using nsd. Super easy.

mercutio

it got in the news, becauuse the list added baidu

staticsafe

I could switch to NSD for my auth. slaves, still need to use BIND for the master though

mnathani_

if its a simple dns block, cant your subscribers just use google dns or such

brycec

(And I used to love bind)

mercutio

it's published by the fbi, then emailed to providers in nz.

brycec

staticsafe: What's keeping you on bind, if you don't mind my asking?

mercutio

mnathani_: yeh they could, but it's really dodgy stuff.
well it's meant to be.

staticsafe

i use the auto-magic DNSSEC signing ability

brycec

(There are some things Bind can do that nsd canot)

staticsafe

in BIND

brycec

mercutio

i skimmed through it, but it's huge

staticsafe

but that only needs to exist on the master

mercutio

i completely missed baidu being on it
probably because it doesn't look like a word to me.

staticsafe

almost all of my zones are signed, even my PTR zones for my IPs

brycec

(I have no idea what automagic dnssec thing in bind you're talking about.)
Nice

staticsafe

it automatically signs and maintains signatures on domains
makes DNSSEC much less painful

mercutio

i can't even sign my domains, because i use tinydns.
and don't have tcp enabled for dns.
even

staticsafe

yuck

[16:56]

mercutio

well tcp for dns is yuck :/

[16:56]

staticsafe

*shrug*

[16:57]

brycec

I should look into signing my zones someday...
Seems like it's just one extra step when making changes at least, run ldns-signzone

[16:57]

mnathani_

brycec: dont forget to provide your registrar with your zone signing key records zsk to place in the parent zone

[17:03]

staticsafe

yeah

[17:08]

mnathani_

hopefully you wont get a rep who goes DNS what? when you mention DNSSEC support

[17:09]

staticsafe

heh, which is why I use Gandi

[17:10]

mnathani_

they are a bit more expensive I recall
than say namecheap or godaddy

[17:10]

staticsafe

yeah
http://wiki.gandi.net/en/domains/dnssec

[17:11]

m0unds

ugh, godaddy

[17:13]

staticsafe

m0unds: http://steamcommunity.com/sharedfiles/filedetails/?id=446246422
i need that armor on all my vehicles

[17:14]

m0unds

argh, steamcommunity is dragging its ass something fierce

[17:26]

brycec

lol - first autocomplete when typing namecheap was dnssec
(A quick Google suggests that Namecheap doesn't support DNSSEC, so I'll have to store in DLV)
(Then again looks like DLV is not long for this world either https://ripe70.ripe.net/wp-content/uploads/presentations/81-RIPE-DLV-timeline-20150513.pdf)

[17:29]

staticsafe

yeah

[17:32]

brycec

Apparently it's a requirement to be ICANN-accredited
2013 "near future" https://twitter.com/Namecheap/status/294872690102267905

[17:33]

BryceBot

TWITTER: @mdjanic Ah, we're adding DNSSEC support in the near future. Hang tight :) (Fri Jan 25 18:21:42 +0000 2013, in reply to @mdjanic)

[17:35]

staticsafe

2013 heh

[17:36]

mnathani_

LOL Godaddy: https://twitter.com/GoDaddy/status/294874487713849344

[17:37]

BryceBot

TWITTER: @mdjanic We'd certainly love to have your business :) ^C (Fri Jan 25 18:28:51 +0000 2013, in reply to @mdjanic)

[17:37]

brycec

that's... wow. I mean, I hate GoDaddy, but how the hell are they the "winner" in this?

[17:38]

For what little good it will do me https://twitter.com/brycied00d/status/601185958042697728

[17:43]

BryceBot

TWITTER: Hey @ICANN how is @Namecheap still accredited? TWO YEARS since the 2013 RAA and still no DNSSEC - clearly violating their RAA. (Thu May 21 00:41:16 +0000 2015)

[17:43]

staticsafe

i think its because they are still reselling Enom
namesilo is another one I can recommend

[17:44]

brycec

you have a point, eNom is in breach of their RAA
Corrected/tweaked https://twitter.com/brycied00d/status/601187245828263936

[17:46]

BryceBot

TWITTER: @ICANN I guess that as @Namecheap is reselling @enom, it's really eNom that is in breach of their 2013 RAA. @icann_president @NameCheapCEO (Thu May 21 00:46:23 +0000 2015, in reply to @brycied00d)

[17:48]

brycec

(And yes kids, I did double-check that eNom, Inc - the name on my whois record - is on ICANN's accredited list having signed the 2013 RAA)

[17:48]

staticsafe

[17:49]

brycec

(ty)

[17:53]

staticsafe

Enom is probably one of the biggest registrars
due to their resellers

[17:53]

brycec

Indeed they are huge

mnathani_

you would think banks and other institutions would really be a big DNSSEC driver. Preventing Man in the Middle DNS attacks.

brycec

So how can we be 5+ years later without dnssec?

m0unds

image finally loaded staticsafe - reminds me of the tech-centric gang in saints row 3

brycec

Except that banks etc don't represent a large customer to registrars
Banks are a handful of domains, and a registrar loses <$1000 if a bank changes to a dnssec reg.

mnathani_

they probably go to niche registrars online portfolio managers
markmonitor.com etc

[17:55]

brycec

I thought ^ was an enom reseller
(Apparently I'm wrong/thinking of something else/it's changed)
Oh look I have a new follower

[17:56]

mnathani_

:-)

[18:00]

...... (idle for 29mn)

up_the_irons

m0unds: brycec mnathani_ : thanks!
brycec: it was on v6 b4 too

[18:29]

brycec

cool

[18:29]

up_the_irons

brycec: i wonder how one sets the toolip/hover text... i'll ask the designer
mnathani_: still vps

[18:31]

mnathani_

perhaps the network test file should reside on a dedi for people to burst to 1gig

[18:33]

acf__

I think the alt attribute for img

[18:33]

brycec

(There are actually a handful of ways to do it. "alt" was the main method through HTML 4. HTML5 added tooltip and some other stuff, not to mention the things you can do with Javascript and custom elements)

[18:34]

up_the_irons

brycec: fixed speed test link in kb

[18:37]

brycec

word

[18:37]

mercutio

+1 for dedicated speed test
maybe have the ookla speed test?
it "kind of sucks" but it tests upload too

[18:37]

brycec

up_the_irons: FYI the KB link should be updated to https://
ie. a link you can curl (curl'ing the http:// just returns the 301)

mercutio

don't think kb supports https?

brycec

I meant the link provided ON the kb
curl -v http://arpnetworks.com/files/100mb.bin == 301

mercutio

oh right
there's a blanket rewrite

brycec

Yea
h

mercutio

it's still not a+ on ssleay test :(

brycec

(Ideally the speedtest would be allowed to be http:// I think)

mercutio

i'm not sure why it isn't.

up_the_irons

brycec: done

mercutio

brycec: ssl compression used to be common, and i really hated https speed tests
because they'd often give false numbers.
i think arp's using random data, not sure though
but shouldn't have ssl compression enabled anyway

brycec

I'm maxing 100mbps from the file to my ded :/

mercutio

i'm getting 3MB/sec
from vdsl.
4 now.

brycec

(And yes that 100mbps was ipv4)
(I got it over v6 too, but that's no surprise)

mercutio

yeh it's still on a vm

brycec

VM's can have GbE connections

acf__

/dev/null 47%[=========> ] 47.13M 11.1MB/s eta 5s ^C

brycec

ditto ^
The only reason I mention this is that it will look like ARP only has 100mbps connection to the Internet for anyone testing with >100mbps pipe.

mercutio

i'm getting 96.8mb/sec

[18:45]

brycec

(which for all intents and purposes can be rounded up 3.2mbps to 100 :P)
brycec is overlooking that the 'm' prefix is milli. mb= "millibits"

[18:46]

mercutio

err megabytes/sec that is

[18:47]

brycec

Really?? I'm still maxing at 11.1MB/s

[18:47]

mercutio

yeh i'm using a different location
http://mirrors.arpnetworks.com/speedtest/100mb.bin

[18:47]

brycec

Oh ha
yeah I get GbE to the mirror

acf__

much better :P
I wonder why that link isn't in KB..

mercutio

it is

brycec

lol the page was *just* updated

mercutio

heh
yeah

brycec

90 seconds ago
I never noticed this before (a 5 year-old KB article) that the VM host machines only have a single 100mbps connection
http://support.arpnetworks.com/kb/vps/what-is-the-uplink-speed-of-a-vps
"Each VPS shares a 100 Mbps uplink with other VPS's running on the same host machine."

[18:49]

mercutio

brycec: that's still the case.
i was a bit apprehensive about that when i first got my vps
but in practice it never seems to be an issue
except if someone ddos's.

[18:50]

acf__

I thought there were some people testing gigabit to VPS

[18:54]

brycec

My VPS' second NIC is GbE

[18:55]

mercutio

acf__: it's not the default though

[18:57]

brycec

I'd always assumed the hosts had GbE and the guests were just limited to 100mbps to keep from overloading the link

mercutio

nope

brycec

(I understand that assumption was wrong now)

mercutio

yeh i questioned it when i first got my vps

acf__

is it because the hosts just happen to have fast ethernet cards

mercutio

nah the hosts have gigabit cards.

acf__

or is that done intentionally to limit the rate?

mercutio

it's the switch ports that are 100 megabit.

brycec

It's the switch
heh

acf__

interesting

mercutio

the switch ports are "good" 100 megabit though.

brycec

(Quality Cisco stuff)

acf__

there is bad 100 megabit?

mercutio

ie they don't have stupidly short queues.

brycec

There's cheap

acf__

http://www.ebay.com/itm/Cisco-WS-X4548-GB-RJ45V-V05-Gigabit-PoE-Line-Card-From-Working-Catalyst-4507R-/191437209907?pt=LH_DefaultDomain_0&hash=item2c928c0133
?
:D

mercutio

if you have three hosts on a cheap gigabit switch try doing concuurrent access to one port from both
if you send at all more than a gigabit to one port they tend to not behave well.
before switching was common, intel ethernet used to be faster because it was more aggressive.

[19:01]

up_the_irons

vps hosts' primary interface plug into s1.lax, a Cisco 4500 with 48 port 10/100 Mbps linecard. 7 years ago, when I got it, that was expensive. that's why it's not 1gbps :)

[19:10]

mercutio

can you get a cheap gigabit line card second hand now for it?

[19:11]

acf__

[19:11]

mercutio

that's what i found acf
you don't want poe

[19:11]

acf__

can you just turn it off?

mercutio

maybe

brycec

Still ends up being a waste of parts, power (even off), something else to break, etc

mercutio

also if there's an issue, there's a lot of dependency on s1 atm

acf__

yea..
do you know if they hot swap?

http://www.ebay.com/itm/Cisco-WS-X4548-GB-RJ45-Gigabit-Line-Cards-f-Catalyst-4506-4500-Switch-/291457935757?pt=LH_DefaultDomain_77&hash=item43dc3f298d

brycec

brycec predicts "no"

[19:13]

acf__

2015-02-28 s1.lax uptime is 6 years, 17 hours, 48 minutes

[19:14]

mercutio

[19:14]

brycec

or http://www.ebay.com/itm/Cisco-WS-X4548-GB-RJ45-CATALYST-4500-Enhanced-48-Port-Gigabit-Module-/311360341076

mercutio

50 euro

brycec

$30 for mine and it's near LA

mercutio

that's better
bt it's poe
buuut

brycec

is it? didn't see that in the title

mercutio

it's in the description

brycec

oh i see in the descr
Did Cisco make these cards withOUT poe?? That's all I'm finding

mercutio

well both have the same model code
maybe they didn't.

[19:16]

brycec

(your 50EUR is poe too)

[19:16]

mercutio

yeah i couldn't read the language
it may have said in english

[19:16]

brycec

It certainly doesn't look like it has enough "guts" to be POE, but what do I know

mercutio

it'll be 5w per port or something
the newer poe does more power ouutput

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/catalyst-4500-series-line-cards/product_data_sheet0900aecd802109ea.html says NOT POE

brycec

mercutio

the old stuff is fine for phones

acf__

why would POE be an issue?

brycec

the "V" variant is POE

mercutio

cool
well it says poe in description

brycec

(And you can see the difference pictured too - lots of power supply for poe)

mercutio

but no V in the model
it's hard to know
how much does a 4500 cost now
http://www.ebay.com/itm/Cisco-Catalyst-4500-Series-Chassis-w-3-extra-cards-2x-1300w-Power-Supplies-/201311024324?pt=LH_DefaultDomain_0&hash=item2edf1274c4

brycec

So assuming the photos are of the actual hardware, you can tell it's definitely not the 'V"

mercutio

of couurse then there's "getting rid of it"

brycec

Oh wow up_the_irons, only $300, reeeeaal expensive </sarcasm>

mercutio

well they only support 100k routes

brycec

Later gents
(didn't we hit that last year?)

mercutio

so they've probably devalued a lot now
we hit 512k last year

acf__

that was a fun day

mercutio

the first day or the second day?> :)
ie the leak, or when the proper size got to 512k
last i knew it was about 536k now

acf__

I don't remember when I noticed all of the problems
but apparently Microsoft, etc... were effected
*affected

mercutio

ok it's abouut 537 to 547k now for me
hmm 7 years ago is actually a long time

up_the_irons

brycec: dirt cheap now
brycec: mercutio : they certainly hot swap

[19:30]

mercutio

are you planning to migrate off that?

[19:32]

up_the_irons

I actually have 2x of the 48 port gigabit cards in storage. but it made more sense to build out s7.lax and slowly migrate there.

[19:32]

acf__

have you changed plans at all? :P
I remember s7 was acting super strange a while back..

mercutio

wasn't it an upstream on s?

up_the_irons

it was acting strange so that kinda just got put on hold

mercutio

oh it was.
hmm
what about using linux and normal layer2 switches?
or layer3 switches and a hybrid