7,129 reputation
21743
bio website
location Boston, MA
age
visits member for 5 years, 9 months
seen Nov 11 '14 at 7:54

Aug
16
comment Network cables - make them or buy them
As far as the cable tester -- you could run into situations where the link worked fine at 100mb and okay at gig without a large amount of traffic but when you try to use the system to push large amounts of traffic performance falls through the floor.
Aug
16
comment Network cables - make them or buy them
Network cards aren't like modems -- if the connection is poor they won't scale back to a lower speed, instead you'll just get lots of garbled packets and then the application will have to retransmit the packet later at a substantial loss of speed.
Aug
15
comment Any thoughts on 6 inch ethernet patch cables?
This really seems to be a common way of doing things, and I've seen it done well. It seems to be the approved of "panduit" way of organizing a rack, but in an organization like ours where lots of people make changes in racks, I'm afraid the 2 foot patch cables will get turned into a knot eventually.
Aug
15
comment Any thoughts on 6 inch ethernet patch cables?
@john: Other than being a judgmental scold, what was the specific answer to my question?
Aug
15
comment Any thoughts on 6 inch ethernet patch cables?
1. you're answer of "be like me and try harder" isn't actually all that helpful. 2. the rack pictured above isn't all that dense. Manage 100 of those 2 post rack with double the number of cables in less than the above space and put them into retrofitted broom closets, and have untrained helpdesk people manage adds and changes, thenn tell me about "a complete lack of a methodical approach to cabling".
Aug
15
comment Network cables - make them or buy them
Does your tester cost more or less than $3000? If it just checks pinouts, it is nearly worthless
Aug
13
comment Any thoughts on 6 inch ethernet patch cables?
How old is that rack and how much churn is there on that rack? The rack with the comically ugly wiring "organization" is about 5 years old and sees pretty constant change (though of only a small number of the ports). Everything looks great the first month it's in service...
Aug
5
comment Does it make sense to use 10Gbit Ethernet in a small business?
did you buy an arista switch? If so, how is it?
Aug
5
comment How to dispose of old rack-mount servers?
Most of these recycling operations are terrible -- they ship the stuff over seas and some kid watches over a flaming pit of PC boards and cables and captures the melted metal that oozes out of the flaming nightmare.
Jul
30
comment Firewall rule to allow access to windows updates or other resources on a CDN?
bross: Yes, but the firewall looks up the record once per hour and the TTL on the records is usually around 30 seconds or less so there is a giant window where the firewall thinks the domain is at one address (and has a hole for that address) but the client gets a different record and their connections get blocked by the firewall.
Jul
30
comment Benefits of Gigabit uplink for high traffic webserver?
I generally see duplex issues only where people have hard-coded the link speed on one or the other end these days. That said, if I'm connected to a 10/100 switch, I'd be sure to double-check that everything linked up properly, and be wary that ports weren't hard-coded by some other superstitious admin at some other time.
Jul
30
comment Firewall rule to allow access to windows updates or other resources on a CDN?
It does add a delightful twist to the problem...
Jul
30
comment Firewall rule to allow access to windows updates or other resources on a CDN?
That "Force proxy configuration" link does look pretty useful. I'll have to examine that more. Thanks!
Jul
30
comment Firewall rule to allow access to windows updates or other resources on a CDN?
@paul: We're implementing NAC and requiring users to comply with a policy prior to being allowed to use the network. This means we're not allowing outgoing traffic until your system has been updated and is properly patched. Chicken, meet egg.
Jul
30
comment Firewall rule to allow access to windows updates or other resources on a CDN?
I don't have control over the end-point systems. They're student / faculty computers that aren't on the domain and aren't owned or managed by the campus IT organization.
Jul
30
comment Firewall rule to allow access to windows updates or other resources on a CDN?
I don't control the systems on the network -- it's a university. The helpdesk staff would lynch me if I required users to configure their browsers to use a proxy server. I have thought about using a reverse proxy server and poisoning DNS for these services, but that's adding a lot of moving parts to solve this problem.
Jul
30
comment Firewall rule to allow access to windows updates or other resources on a CDN?
Oh, our firewall can keep a DNS and IP in sync, but with TTLs of some sites at 30 seconds and the firewall doing the sync every hour, that still leaves a huge window of the DNS response for a client request for foo.microsoft.com not matching the firewalls notion of foo.microsoft.com. I could also poison DNS by overriding TTLs, but yikes, that's a dark road full of monsters...
Jul
19
comment Can we connect LAN (Ethernet) with a wide area network?
@johnh: sometimes you don't want a router but you do want a single VLAN to be in 2 places at once. Not often, and probably not in this case, but it does happen.
Jul
19
comment Can we connect LAN (Ethernet) with a wide area network?
People still do this with mpls to bridge 2 remote networks together for things like vmotion. $$$ but if you gotta do it...
Jun
28
comment ZFS and SAN — best practices?
I think this conundrum is referred to as "the wheel of reincarnation" where there is a constant cycle between offloading tasks to a specialized CPU, then rolling the tasks back onto the CPU as the general purpose CPU gets fast faster than the specialized CPUs.