21,745 reputation
12449
bio website ripple.com
location Oakland, CA
age 45
visits member for 3 years, 4 months
seen yesterday

I am Chief Cryptographer at Ripple Labs and one of the architects of the Ripple payment system.


Jan
14
comment How do I prevent excessive ARP requests sent from Windows Server 2003?
Good thing you didn't use 10.0.0.0/8 for your LAN!
Jan
13
comment BGP preferred outbound peer for given prefix when none of my peers directly announce the prefix (it's handled by the Default route)
@CosminPrund That still won't work. Even if you do specify Router1 as the gateway, it won't be directly reachable because routers typically have /32 addresses. You don't just have to know the router's address, you have to know the path to it, which won't work if the path is dynamic. Say you have a router with an interface in net1 and an interface in net2, either of which may be up or down. You don't want to use either net interface as the next hop, you want to use the networkless loopback address. It's really broken.
Jan
13
comment BGP preferred outbound peer for given prefix when none of my peers directly announce the prefix (it's handled by the Default route)
Does it really do that?! That's seriously broken. Say I know 10.1.1.0/24 is handled by the router with loopback IP address 10.1.2.1/32, but my route to that router 10.1.2.1 is through 2 routers which may or may not always be both up. Rejecting the route just because its next hop is dynamically learned and indirect makes no sense. It's not unusual at all to know that a particular router handles a particular route by its loopback address not on any physical network. You want traffic to go to that router regardless of how this machine reaches that router.
Jan
13
comment (D)DOS Deflate Bug/Alternative
Then it sounds like the script is broken. Perhaps it doesn't use proper file locks to prevent concurrent updates from breaking the list.
Jan
13
awarded  Enlightened
Jan
13
awarded  Nice Answer
Jan
13
revised DNS Error Randomly Takes Down Site All Day
added 60 characters in body
Jan
13
comment (D)DOS Deflate Bug/Alternative
When you say it "removes items from that whitelist", do you mean the actual whitelist file is modified?
Jan
12
answered DNS Error Randomly Takes Down Site All Day
Jan
12
comment BGP preferred outbound peer for given prefix when none of my peers directly announce the prefix (it's handled by the Default route)
See my updates to the answer. (Also, since you have a default route, how can the next hop ever not be understood?! You have a defined route to every possible IP address.)
Jan
12
revised BGP preferred outbound peer for given prefix when none of my peers directly announce the prefix (it's handled by the Default route)
added 1229 characters in body
Jan
12
answered Is there an Infinite Number of QR Codes?
Jan
12
comment BGP preferred outbound peer for given prefix when none of my peers directly announce the prefix (it's handled by the Default route)
@CosminPrund You want it to reject the route if it doesn't understand the next-hop. That's the whole point. The OP wants that behavior: "If I can find a BGP mechanism to do the same, I can prefer a route to BGP peer 2, but if that route is not available, the route to BGP peer 1 would be used."
Jan
12
comment BGP preferred outbound peer for given prefix when none of my peers directly announce the prefix (it's handled by the Default route)
That's why I recommend tracking a route rather than a link. It's still not perfect, but it will never be perfect if you don't take full BGP tables. (And, at least arguably, not even then.)
Jan
12
comment Can a switch be noise reduced?
Definitely, replace the fan(s). I had a Cisco 4700 router in my office that sounded like a vacuum cleaner. I replaced all the fans with low-noise fans and now it's quieter than my PC.
Jan
12
comment BGP preferred outbound peer for given prefix when none of my peers directly announce the prefix (it's handled by the Default route)
That would only work if he has two BGP routes for the same prefix and wants to control which one is preferred. That's not his situation -- he has no BGP route for the prefix.
Jan
11
answered Clustering TCP servers, so can send data to all clients
Jan
11
comment VDS Memory Optimization
Are you seeing excess disk I/O? Tools like atop and iotop can help. As for how much load your server can support, there's really no simple formula. It depends on how much work your server has to do to serve a page and how long your users stay on each page, whether you use things like AJAX and so on.
Jan
11
comment Using first available in an IP Address Block
@Joe Why would you skip .226?
Jan
11
revised BGP preferred outbound peer for given prefix when none of my peers directly announce the prefix (it's handled by the Default route)
added 277 characters in body