132 reputation
7
bio website
location
age
visits member for 3 years, 6 months
seen Jul 21 at 15:10

Jan
16
awarded  Tumbleweed
Jan
9
revised How to correctly summarise routes in an OSPF multi-hub-and-spoke scenario?
added 7 characters in body
Jan
9
asked How to correctly summarise routes in an OSPF multi-hub-and-spoke scenario?
Oct
31
awarded  Commentator
Oct
31
comment OpenVPN performance: how many concurrent clients are possible?
Just came across this old question while doing some research. For reference OpenVPN 2.x isn't multi-threaded, it's planned for 3.x. See community.openvpn.net/openvpn/wiki/RoadMap and comments.gmane.org/gmane.network.openvpn.user/30272
Feb
26
comment Is it possible to bitwise match in iptables?
Brilliant, thank you! I'm completely embarrassed to say I didn't even think of trying that!
Feb
26
accepted Is it possible to bitwise match in iptables?
Feb
25
comment Is it possible to bitwise match in iptables?
It's a whole cluster of sites, I don't think there's a nicer way to do it, is there?
Feb
25
comment Is it possible to bitwise match in iptables?
I want the one rule to cover: 10.0.0.16/28, 10.0.1.16/28, 10.0.2.16/28, ...
Feb
25
asked Is it possible to bitwise match in iptables?
Mar
14
accepted Assiging VLAN based on MAC under linux
Feb
6
comment Is there such a thing as a “typical” or “de facto” default for MTU size?
For what it's worth, when it comes to IPv6, the minimum MTU that is mandated in the RFC is 1280 bytes (your guess is as good as mine as to how strictly people adhere to it).
Dec
27
comment Logging per-user Internet access
Accepting this answer as the best so far. You are right, no matter how I try dance around it, that other router needs to go.
Dec
27
accepted Logging per-user Internet access
Nov
15
awarded  Student
Nov
15
awarded  Editor
Nov
15
revised Logging per-user Internet access
improved title
Nov
15
asked Logging per-user Internet access
Nov
3
comment Will everyone having Globally Accessible IP's in IPv6 be kind of a security nightmare?
@Chris - ISPs don't renumber ULAs - in fact they have no control over them and ideally should not be aware of their existence. Set up IPSec links between all the sites (endpoints terminate at ISP provided IPs) which carry the ULA packets as the payload. I.e. no different from IPSec on IPv4.
Nov
2
comment Will everyone having Globally Accessible IP's in IPv6 be kind of a security nightmare?
@Chris - companies with multiple sites should use unique local addresses (ULA). They should also probably operate a DNS server and access all resources through named addresses rather than IPs.