Viewing profile — daper

Sure, you can. But on advantage of IPv6 is you addresses are globally unique. If you ever need to connect two networks that were created independently (like different companies), u…

I've given a try to IPv6 in a company with few tens on servers in a 2 DCs, an office + additional location, 3 ISPs in total. For me the real challenge is not just different way to …

With BGP (especially anycast) you don't have direct influence where the requests lands. You can steer traffic by techniques like AS prepend, some priorities per BGP session (I'm no…

Varnish (HTTP caching only) also uses one thread per client. I believe worker threads are used to handle reuqests while a dedicated thread handles all the idle connections between …

Can I ask if your whole content can be stored on a single server so content is simply replicated everywhere or there is some layer above that that directs requests to the specific …

AFAIK no. The point of DRM is to prevent recording / playing the media on a device without decryption key (authorization). So the goal is different than TLS that is used by the cli…

I have some experience serving static content and working with CDNs. Here is what I find interesting / unique here: - They are not using OS page cache or any memory caching for tha…

I had brief experience managing such IT team after which I've gained big respect for them. I've never seen such low budget to amount of work ratio in my IT career. Everybody expect…

Note that they are using 10GbE network when even a single NVMe disk used in the test has few times more bandwidth so the bandwidth results are constrained by the network hardware. …

I categorize this as bugs caused by data inconsistency because od data duplication. That includes: - Using asynchronous database replication and reading data from database slaves -…

If you have your own domain, then move it to one of the listed DNS providers and use DNS challenge with ACME: We are using using certbot + cloudflare whis way. There is no HTTP req…

From the described mistakes two come from lack of understanding how exactly DNS works. But I agree it's in fact hard, see [1]). 1. "This strict DNS spec enforcement will reject a C…

Generally agree, for basic configuration it just works. But I was planning to use IPv6 in some network segments in my company. Providing proper VPN (road warrior style) for employe…

As I understand my favorite resolver - unbound - has separate "infra" cache that also caches RTT times, and "down" status of name servers: https://nlnetlabs.nl/documentation/unboun…

Our security team complained that we have some services like monitoring or SSH access to some Jump Hosts accessible without a VPN because VPN should be mandatory to access all inte…

I think the described machines were designed for a very specific workloads even in CDNs world. As I guess they serve exclusivelly fragments of on-demand videos, no dynamic content.…

Same here. mSBC coded that started working for me around Fedora 33/pipewire 3.2x is a night/day change for me. I can use my Jabra bluetooth headset with high quality audio instead …

After some searching I've found that Supermicro is selling ATX power supplies with SMBus (hopefully PMBus really) connection in reasonable price but never had one and I'm not able …

Server PSUs support such communication (looks like this is PMBus protocol, variation of SMBus, which is variation of I²C). In servers it's connected to the BCM and usually allows t…

There are advantages of using HTTP cache on application side even if you use CDN: - Varnish can guarantee that a given resource will be fetched at most once every TTL expiration si…

You're right. I'm wasn't really serious. Since I'm in the middle of calculating costs of own servers in rented racks in Poland (you're right labor is more difficult than hardware) …

10x Supermicro SSG-6049P-E1CR60H servers (60 x 3,5" HDD in 4U enclosure) - $5k each 600x WESTERN DIGITAL Ultrastar DC HC550 18TB (10800PB in total) - $500 each ~$350k in hardware, …

IPv6: curl http://ipv6.whatismyip.akamai.com curl http://ipv6.whatismyip.akamai.com/advanced IPv4: curl http://whatismyip.akamai.com curl http://whatismyip.akamai.com/advanced Both…

Some providers are doing that. For example you can rent such bare metal servers from OVH's cheap brand So You Start. But that doesn't make sense if you need something more that one…

The way I look at the major improvements in the two recent HTTP versions is: HTTP/2 was needed to better utilize the bandwidth by keeping the TCP connection busy without silence pe…