1,833 reputation
1716
bio website blog.l1x.me
location Santa Monica, CA
age
visits member for 5 years, 2 months
seen Jul 2 at 22:14

I am a highly motivated, results-driven IT professional with 10 years experience, a systems engineer who enjoys working on large-scale systems and challenging problems. I have experience with large number of servers (10.000+) connected via WAN and LAN, which makes it possible for cloud providers to deliver reliable services to customers

My current role is: systems engineer of the team which runs the websites.

On the top of usual systems engineering tasks, I like to develop softwares, my main language is Ruby (and I use Ruby on Rails of course :) ) but I can read and understand (and fix) Perl and Python, however it is not my favorite. I started to learn Erlang recently, which helps me understand the challenges what software developers face with distributed systems.


Sep
4
comment Setting up monit to work with Varnish and nginx
i guess you might have problem with understanding what i wrote The idea here is that properly written programs will respond to a -15 by cleaning up anything they need to do before dying. immediately. A "kill -9" just causes the process to die; it gets no chance to do any cleanup. Therefore, if you don't know how a program was written, you should try the -15 first, in case it does need to clean up files, flush logs or whatever. en.wikipedia.org/wiki/Functional_illiteracy
Sep
4
comment Setting up monit to work with Varnish and nginx
I dont think that he need additional. Just the basic unix commands would do the job.
Aug
31
comment Linux distributions without selinux
check you kernel config: CONFIG_SECURITY_SELINUX=y i presume this is the default for all teh major linux distros
Aug
31
comment Linux distributions without selinux
for me it seems ubuntu ships the kernel with selinux $ grep -i selinux /boot/config-2.6.24-23-generic CONFIG_SECURITY_SELINUX=y CONFIG_SECURITY_SELINUX_AVC_STATS=y CONFIG_SECURITY_SELINUX_BOOTPARAM=y CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=0 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1 CONFIG_SECURITY_SELINUX_DEVELOP=y CONFIG_SECURITY_SELINUX_DISABLE=y # CONFIG_SECURITY_SELINUX_ENABLE_SECMARK_DEFAULT is not set # CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set
Aug
31
comment how to completely disable ipv6 on Ubuntu 9.04
i am the one who is deciding what is annoying on my system, but thanks to confirm that it is a real problem because it is fixed in the next release :)
Aug
31
comment how to completely disable ipv6 on Ubuntu 9.04
I see, so here is one case study for you: -i have a linux system with iptables and we are filtering the incoming and outgoing connections, but only ipv4 because we are not running any ipv6 service. we update to the next kernel and realize that somebody just attacked our service from a unfiltered ipv6 ip because we are in the same layer2 space in the co-loc company how should i deal with this issue? change my approach not to do anything with ipv6 just because somebody forced to enable it in the releasing team? i don't think that you see my point at all...
Aug
30
comment how to completely disable ipv6 on Ubuntu 9.04
completely disagree you have no idea about security considerations and performance questions i would like to control my operating system and if i want disable ipv6
Aug
30
comment how to completely disable ipv6 on Ubuntu 9.04
in the meantime i have found the page describing that 9.04 is broken, ipv6 cannot be disabled i feel the smell of enterprise :DD ipv6 is evil for some reason: -DNS lookups -browsers and other tools using ipv6 at first to communicate -firewall, security questions There must be a way to disable it on any operating system IMHO.
Aug
30
comment how to completely disable ipv6 on Ubuntu 9.04
no it is not working :(
Aug
30
comment how to completely disable ipv6 on Ubuntu 9.04
the question is how to disable not why to disable but isn't is so obvious, i am not using ipv6 and really annoying to see ::1 and so in in netstat output, i want to disable it like on other unixes