[00:17] *** atmark has joined #arpnetworks [00:21] *** Kindra has joined #arpnetworks [00:59] *** Kindra has quit IRC (Quit: My Mac has gone to sleep. ZZZzzz…) [01:12] *** Kindra has joined #arpnetworks [01:13] *** Kindra has quit IRC (Client Quit) [01:14] *** Kindra has joined #arpnetworks [01:21] anyone use FreeRADIUS before ? [01:22] *** mnathani__ has quit IRC () [01:25] i have [01:34] Yup [01:35] It's the only Radius I've ever used, in fact :P (And I've used it in several deployments, and using it now.) [01:36] *** mnathani_ has joined #arpnetworks [01:37] i've used cistron radius too [01:37] although not in a long long time [01:38] *** rendrag has joined #arpnetworks [01:41] brycec: does it have a web interface for configuration or is it command line / config files only? [01:42] also what capacity have you used it? My use case is centralized cisco login database [01:43] but I hear it can be used for VPN, WPA2 Enterprise wifi logins etc [01:43] I need to do read more documentation [01:43] s/do/go [01:43] I need to go read more gocumentation [01:45] mnathani_: there are heaps of web ui's for it [01:45] afaik they all suck [01:45] mnathani_: you could consider ldap too for that i imagine [01:46] if you just want to add users the sql structure is pretty simple [01:48] http://wiki.freeradius.org/modules/Rlm_sql [01:52] *** LT has joined #arpnetworks [01:52] Don't suppose anyone knows how long graphs.arpnetworks.com is going to be down? [01:54] rendrag: probably not long? [01:54] up_the_irons: you around? [01:54] ok [01:54] been down about 12 hours so far [01:54] wasn't sure if it was a known outage, or if I should email them [01:54] did you do a ticket? [01:55] probably if in doubt email [01:55] well that's what i'd do if i cared ;) [02:00] FreeRadius itself does not have a GUI. 01:39:51 mnathani_ | brycec: does it have a web interface for configuration or is it command line / config files only? [02:01] But since it can pull from all sorts of sources/databases... [02:01] brycec: it sort of does now [02:01] there's soemthing called dialupadmin on their page [02:01] That would be news to me. But I don't care :P [02:01] but it's loosely coupled etc i imagine [02:01] pfSense makes a pretty easy GUI/RADIUS server actually [02:01] i've used ara too [02:01] ara is pretty basic [02:02] http://labs.asn.pl/ara/ [02:03] Well *I* didn't know about it, if that counts for anything :P 01:52:42 ⤷ | wasn't sure if it was a known outage, or if I should email them [02:03] i checked my graphs like a week ago and it was working [02:03] but i don't check very often at all [02:03] Ditto [02:04] i learnt that leaving mtr running pushes my traffic baseline up [02:04] My machines monitor their own bandwidth, and I have such a fat allotment anyways... [02:04] i don't think i'm even doing much volume [02:04] haha yeah, I don't check it overly often either [02:04] we've just been doing a fair bit of international traffic this week, so i wanted to check were we're at [02:04] ahh [02:05] (one of our upstreams uses black lotus for DDoS mitigation, and BL suck majorly for throughput - can't get more than ~5mbps through them, so we use an ARP networks VPS with a BGP session and GREv6 tunnels to get our international traffic over the pond to AU here, without BL being in the way [02:05] you get like 10tb of data if you get a dedicated server [02:05] yeah I'm about to send them an email to see about migrating to a dedi [02:05] just had a few months on a VPS to see what their stability is like :) [02:05] I have 12TB [02:06] yeah for your user case i'd recommend [02:06] (on my dedi's account) [02:06] It's been pretty impressive, only one BGP outage [02:06] use [02:06] (though there is a VPS in that mix now that I think about it) [02:06] what was the bgp outage? [02:06] I don't know, late march, they dropped off the internet for ~5 mins [02:07] rendrag: what's throughput like from nz to you out of curiosity? [02:07] could get in on V6, but not V4 [02:07] does it bypass the mitigation shit [02:07] depends on where in NZ [02:07] * mercutio is in new zealand and can upload at high speed if you want to check :) [02:07] like 202.49.71.24 [02:07] our main upstream has gear in NZ, so anything on peering in NZ ends up coming across directly [02:08] ahh [02:08] what's an ip of yours [02:08] That's what she said!! [02:08] i hope it's not vocus :/ [02:08] yep that goes straight across :) [02:08] 103.235.52.2 [02:08] vocus are shit from nz for their peered stuff [02:08] bloody vocus [02:08] 25.8msec min, 26.5msec average [02:08] (I should mention I also work at my upstream, lol) [02:09] do you peer in sydney? [02:09] i don't, my upstream does [02:09] traceroute to your IP hits megaport peering in syd, then goes across the pond inside plain's network from the look [02:10] who's the upstream? servercontrol? [02:10] yip reverse path hits vocus ape [02:10] yeah, servers australia [02:10] megaport in both dircetions would be faster [02:10] (servercontrol is their whitelabel brand to keep some customers happy ;) ) [02:10] ahh [02:11] wow your web site loaded quick [02:11] some of their smaller (but like to pretend they're bigger) customers got cranky having sau.net.au hops in traceroutes lol [02:11] heh [02:11] Thoughts on https://www.icann.org/stewardship/coordination-group out of curiosity? [02:12] you have cheap vps's ;) [02:12] and yet noone ever signs up for them, go figure [02:12] meanwhile I sell a mega-shit-tonne of shoutcast streaming lol [02:12] heh [02:12] it's probably openvz [02:12] yeah those ones are :) [02:13] is my thought upon reading it [02:13] I should put the xen plans up some day [02:13] sell a lot of those, but it's all word of mouth [02:13] put it up then [02:13] figured I wouldn't sell expensive VPS's by general passing traffic [02:14] i have a vultr host i use for testing stuff from australia [02:14] it's all citrix xenserver with iscsi san backend [02:14] no-one else seemed to have affordable au vps's [02:14] nice and reliable, but not cheap in the slightest [02:14] oh they're expensive. [02:14] hahaha [02:15] i like your icon for your service status ;/ [02:15] it reminded me of xymon [02:15] it is ;) [02:15] damn xymon is ugly [02:15] but it works well [02:15] started off as big brother back in the 90's [02:16] and then when that went commercial, I installed hobbit, and it used the same config and history, and then went to xymon when hobbit changed names [02:16] i like it how your web pages load quick [02:16] ramdrive for mysql tmp tables :) [02:16] makes a crazy difference [02:16] with all the database lookups etc most people selling hosting and stuff seem to have web sites that crawl [02:17] bloody mysql [02:17] hah ayeah [02:17] would be bad form for me to have a slow DB ;) [02:18] we (servers aus, not rendag) hosted the afl/nfl fantasy football last year [02:18] now THAT was some mysql tuning ;) [02:18] That's what she said!! [02:18] had 32gb of ramdrive per db server ;) [02:18] is it serversaustralia or rendrag you work for? [02:19] but we were stustaining 5000 concurrent web requests without a sweat :) [02:19] or do youwork for both? [02:19] both :-p [02:19] ahh [02:19] sau is my day job, rendrag is my own thing [02:19] ahh right [02:19] and serversaustralia don't mind? [02:19] well they're selling you bandwidth [02:19] so they can't mind too much :) [02:19] (rendrag kinda formed out of a previous employer that went bust back in 2004, and paid me out by handing me their client base) [02:20] ahh [02:20] haha yeah they don't mind, just have to keep it balanced if I do rendrag stuff during work hours [02:20] so you're not really expanding it [02:20] nah, it just slowly expands, pickup ~15 clients a year, drop maybe 5 a year [02:20] haha [02:20] serversaustralia web page loads much slower [02:20] hah ayeah,I have nothing to do with the public website [02:21] this is what i mean by web sites that load slow ;/ [02:21] I look after the customer portal and all the backend provisioning automations [02:21] yeah, their site has way too much marketing crap on it [02:21] all the various analytics-ey stuff [02:21] curl --compressed -v https://www.serversaustralia.com.au/ 0.01s user 0.00s system 0% cpu 3.720 total [02:21] i mean seriously [02:22] the main web page before all that stuff still takes 3.7 seconds to load [02:22] curl --compressed -v https://www.rendrag.net.au/ > /dev/null 0.01s user 0.00s system 3% cpu 0.300 total [02:23] an order of magnitude faster :) [02:23] hahahahh yeah [02:23] man, wtf are they doing with the redirects [02:23] curl --compressed -v https://www.arpnetworks.com/ > /dev/null 0.01s user 0.00s system 1% cpu 0.579 total [02:23] www.servers -> servers -> https://servers, and THEN 3 seconds [02:23] arp is fine too, and it's further away.. [02:24] probably some cookies thing i dunno [02:24] yeah, I might dig at that a bit tomorrow [02:24] that knid of slowness isn't uncommon though [02:26] heh, out of curiosity i tried checking my email for rendrag. you post to ausnog a lot? :) [02:26] perhaps ;) [02:27] heh [02:27] nothing about blacklotus sucking i see though [02:28] haha nah [02:28] i suppose you can't really say that in public [02:28] can't really gripe about it too publically when my work spruik's them so hard ;) [02:28] yeh [02:29] yeah it's one thing that really puts me off serversaustralia :/ [02:29] the other is using vocus :/ [02:29] haha [02:29] it's hard to get away from vocus now [02:29] even equinix use them as their upstream :\ [02:29] price? [02:29] megaport :/ [02:29] why even touch equinix [02:30] equininix is overpriced anyway [02:30] because the boss did some crazy deals with both, and x amount of transit gets included with every rack [02:30] and if they're going to use vocus ... [02:30] which ads up like mad when you're buying hundreds and hundreds of racks ;) [02:30] so they're not allowed to buy non vocus transit? [02:31] or just harder to justify the expense of [02:31] nono, equinix and vocus are the largest datacenters here in .au ;) [02:31] hmm [02:31] isn't equinix like really expensive per 1u? [02:32] new zealand sucks for data centres [02:32] it's not that cheap to fix though [02:32] yeah they're not cheap.. but we buy a few hundred racks from them, so the price comes down quite remarkably [02:33] so no-one seems to be willing to suddenly build a decent datacentre with good pricing [02:33] at a few hundred you could consider building your own dc?: ) [02:33] was funny actually, I got a call from equinix a few weeks ago.. 'We noticed on your website, that you say you're colocated at equinix! We don't have a record of you, so you must be through one of our customers.. We'd like to get you to move directly to us!! We can be very competitive!' [02:33] 'Sure, just match what I pay with my current provider, and I'd be receptive!' [02:33] haha [02:33] 'Oh, how much do you pay? [02:34] $0? [02:34] i think that's fucking rude btw [02:34] '1450 a month per rack for 3 racks, and 2 gig of transit!' [02:34] *crickets chirping* [02:34] 2 gigabit flat rate for $1450/month? [02:34] hell 3 racks for $1450/month [02:34] that sounds good ;) [02:35] yeah, they left a message, so I called them back from my work phone, and they went through all of that, so I emailed my boss and he pulled the call and then got stuck into our account manager :-p [02:35] well, 3 racks * 1450/month, and then transit thrown in.. helps to work there ;) [02:36] though they tend to throw in 10-20mbit per rack if you order full racks [02:36] oh it's 1450 per rack [02:36] duh [02:36] (sau don't sell racks that cheap though normally ;) [02:37] is power on top of that? [02:37] nah that's included [02:37] dual feeds? [02:37] but 13.5Amps which is a little low [02:37] yeah dual feeds though [02:37] that's a lot low [02:37] well to really use a rack :) [02:37] i thought they'd do 15amp [02:37] i suppose that's 10% head room? [02:38] yeah I think they do that, to get some head room for their dedicated server racks [02:38] using these new supermicro cases doing 12 servers in 3ru [02:39] they're bloody cool [02:39] also averaging around 40w per blade [02:39] how much power? [02:39] what's max like? [02:39] which is freakishly good [02:39] even that's like 2amps per 3u [02:39] the dual cpu blades will pull about 120W max [02:39] yeah [02:39] so you could only do like 18u of them [02:39] though you can't fill a rack with them [02:40] hence the not enoguh power to fill a rack :) [02:40] one 3ru microcloud chassis has 12 ipmi ports, and 24 ethernet ports [02:40] and you're selling them as cheap dedicated servers? [02:41] yeah we're starting to [02:41] they've only just come out of product development [02:41] ahh [02:43] yeah actually now i check out your prices they don't seem so great haha [02:43] 15gb of bw in your cheap vps :) [02:43] hah yeah [02:44] I need to sit down and do the maths again [02:44] I priced them back before I moved to SAU [02:44] and was on 100mbps with my previous workplace [02:47] the sales manager at work is always like 'dude, push your banwdidth limits etc right up, people don't use anywhere near their quota, so over-quote it!!!' [02:47] but I'm like 'yeah, but it'd be just my luck I DID say 1tb quota with every VPS, and then I'd sell 20 vps, and they'd ALL do 1tb each!' [02:49] i was hitting my quota limit on my cheap vultr vm [02:50] but i'm doing curl bandwidth tests with smokeping [02:50] ends up using about 200gb per location [02:50] hmm that's like 2/3rd of a megabit of bandwidth [02:50] oh well :) [02:51] just double them all, it's the easiest non-thinking thing to do [02:52] you could probably do 10x as much though yeh ... bu tyou might encourage people wanting to torrent etc [02:52] but you did say you had 2 gigabit of bandwidth... [02:56] lol yeah [02:56] my concern is that should I leave servers someday, that 2 gigabit may not be gratis anymore ;) [02:56] hmm [02:57] yeah, and what's the going price for bandwidth, $15/megabit? [02:57] so even though i don't pay for it, I work it out at what I know it would cost if I have to [02:57] yeah, about that :) [02:57] i doubt you're doing anything close to 2 gigabit [02:57] and at 2 gigabit commit it'd come down :) [02:57] hahah nothing near it [02:58] more like 60mbits [02:58] so that's like $900/month [02:58] maybe less [02:58] yeah [02:58] if you can do 95th and you just have some bursts of more [02:59] it'll come down further anyway [02:59] hmm [03:00] 60 megabit is still quuite a few tb [03:00] nearly 20tb [03:01] hmm, i see why you want to check graphs now :) [03:01] graphs seems to be working again btw [03:04] cool, changed plans around a little [03:04] lol yeah, currently on a 500gb/month vps :-p [03:04] (I do surprisingly little international traffic) [03:04] (and most of that is my own torrents LOL) [03:04] Oh they are back too! [03:08] yeah australia has poor upload speeds? [03:08] sometimes i have peers in australia if i torrent, they never seem to upload at more than like 20k/sec [03:09] probably more that most australians are stuck on adsl with 256k upload speed ;) [03:09] wow really [03:09] yeah, there's some epic congestion [03:09] plus teh lines are just really crap [03:09] vdsl is available here quite oftne [03:10] does about 9.5 megabit/sec up i think [03:10] im' only 3km from the exchange, but I only sync at 6/800 [03:10] 3km is ages away [03:10] i'm about 300 metres :/ [03:10] and if I upload/download more than about 75% capacity, the line drops every couple of minutes [03:10] which is pretty standard [03:10] haha [03:10] 3km is good [03:10] really? [03:10] most exchanges cover a 20km radius [03:10] they're doing cabinets here [03:10] wow [03:10] so you'll find rim's everywhere [03:10] i've been at uhh 6 or 7km [03:10] it sucked [03:10] where there's a rim, it's 8 or 16 adsl lines on a 8mbps backhaul to the exchange [03:11] eww ;/ [03:11] yeah i read something on whirlpool about that ;/ [03:11] or you might get a large rim (48 adsl ports), that they've upgraded to 600mbps instead (there's four fibres to each rim, they'll either be 2mbps each, or 155mbps each) [03:11] and ou're sharing that bandwidth with phone calls too [03:11] so it's still atm? [03:12] so there might be 500 phones lines into a rim, and there's 8, 16, or 48 dsl ports for them [03:12] lame [03:12] yeah i heard that internet is prett ybad there [03:12] but i thought local loop unbundling was helping things a bit [03:12] problem is, ULL only works if you're NOT on a rim [03:13] for some reason they're pushing for 200 megabit down here [03:13] and if the exchange is open for other providers [03:13] it's kind of weird [03:13] for example, the exchange I'm on (gorokan) is the largest single DA in australia [03:13] 5 years ago i had 10 megabit down [03:13] and there's no other providers in the exchange [03:13] so the only choice is telstra [03:13] then it jumped to about 20 megabit [03:13] haha yeah [03:13] NZ seems really good [03:13] and now people are all getting 200 megabit? [03:14] ewll if in fibre area [03:14] my previous work, we had 10mbps EFM into each office, which was the fastest we could get at all [03:14] my house doesnt' get fibre until 2019 [03:14] i've got vdsl+adsl [03:14] our NZ office when they moved, we were told 'oh, Snap have gear in the building, phone them' [03:14] upgrading the backup adsl connection to vdsl too [03:14] I phone snap, and we get 100mbps fibre for like $1k a month [03:14] where as our 10/10 EFM services in .au, we were paying $2500 a pop for [03:14] you can do gpon often [03:15] heh [03:15] dark fibre prices have come way down [03:15] you can do 10 gigabit really cheap using dark fibre [03:15] GPON is what they're doing for the NBN over here [03:15] think it's $350/end or something [03:15] yeah [03:15] you can get point to point non dark fibre too [03:15] only the govt screwed it in the last election, and instead of fibre to the house, most of the country is now going to get fibre to the node [03:15] yeah i saw that :) [03:15] so i have a cabinet 3 blocks away which I'll be able to get vdsl to [03:16] they reckon i'll get 35mbps down [03:16] but like [03:16] i saw someone saying about how they doing everything wrong [03:16] if you order a second service [03:16] and shouldn't do qos etc [03:16] you don't get a second VDSL [03:16] should keep things simple [03:16] you only ever get that ONE vdsl [03:16] if you order extra services, they're just delivered as extra ethernet ports off the same NTU [03:16] * rendrag sighs [03:16] oh what [03:16] they're still doing that ntu shit? [03:17] how lame [03:17] can they do vdsl bonding? [03:17] are they still charging like $20/megabit for domestic backhaul ? [03:18] that's what seemed to me the most scary part [03:18] like what's the point of having a fast pipe if you pay shit loads for local traffic over it [03:18] and when you charge more for domestic than international it's just crazy [03:18] which means people will all want to cap how quickly people can do stuff etc [03:19] block netflix as bandwidth intensive etc [03:19] man, to get $20/mbit you have to buy a LOT of transit [03:19] but the worst bit [03:19] and when it's lke $20 megabit then peak time with movies and stuff is extra scary [03:19] on the NBN, there's 121 POI's [03:19] (points of interconnect) [03:20] oh it's more than $20/megabit on nbn? [03:20] yeah [03:20] that's why internode got sold? [03:20] to service everyone in australia, an ISP has to have gear in every POI [03:20] someone should start doing their own fibre network :) [03:20] and you can't do your own fibre at a POI [03:20] you have to pay NBN to backhaul to the capital city for that state [03:20] why not? [03:20] at $45/mbit [03:20] err 35/mbit [03:20] what [03:20] oh it's 35/mbit [03:21] i mean seriously [03:21] that's not even appropriate for adsl [03:21] it's like wtf, it's private backhaul, it's not even trasnit or anything [03:21] let alone faster network connections [03:21] meanwhile NBN are trying to tell consumers that they can buy 100mbps NBN for $80/month [03:21] people are going to have 100 megabit fibre with 100gb data caps [03:21] or peak time rate limits of 2 megabit [03:21] yeah, there's already TIO disputes about it [03:22] i mean $3.50/megabit is pushing it [03:22] 'I USED MY WHOLE QUOTA IN AN HOUR, AND THEN THEY CHARGED ME A DOLLAR A GIGABYTE!!' [03:22] but $35 [03:22] yeah, like NBN should be a whole order of magnitude bigger than megaport intercap [03:22] heh there's been congestion issues here recently a bit [03:22] as bandwidth usage is climbing [03:23] yet it's stupidly more expensive than megaport [03:23] it used to be really bad here [03:23] but ever since the atm -> ethernet migration things have been a lot better [03:23] ahh nice [03:23] i mean there's occasional issues [03:23] but there used to be 5 to 10% packet loss at peak time all the time [03:23] oh wow [03:23] yeah made it hard to use the net [03:24] started getting worse and worse, was bad at 4 pm even [03:24] got better around midnight [03:24] and of course torrents were fine [03:24] my dsl is so bad here, that i actually run 3g as a backup, run PPTP over both ADSL and 3g, and MPLS+OSPF over the top with a 2 second timeout on the session over the adsl tunnel [03:24] because they used heaps of connections [03:24] but web browsing sucked [03:24]