21,745 reputation
12449
bio website ripple.com
location Oakland, CA
age 45
visits member for 3 years, 4 months
seen yesterday

I am Chief Cryptographer at Ripple Labs and one of the architects of the Ripple payment system.


Oct
20
comment How does my registrar (Namecheap) let me set up a CNAME record on the apex domain?
@tobek I tried to get an authoritative response and could not get one. Testing tools were unable to get one either. It happened to work when you tried it. The rules specifically prohibit it. Either you're happy with that or you're not. If you're looking for some kind of guarantee, you're not going to get it. It's not supposed to work.
Oct
20
comment How does my registrar (Namecheap) let me set up a CNAME record on the apex domain?
@tobek You're kind of missing the point. It doesn't make one bit of difference what tools your users use. Their browser is going to ask some DNS server to resolve your domain name to an IP address. That DNS server could be using any software.
Oct
20
comment How does my registrar (Namecheap) let me set up a CNAME record on the apex domain?
@tobek If you're satisfied with "it happened to do what I want when I tried it", then fine. But it is not supposed to work, and when I tested it, it did not work. I was unable to get authoritative DNS results.
Oct
14
comment Load Balancing over multiple ISP connections
You should clarify your question with the details of what you tried, what you observed, and what your goal is.
Oct
14
comment Load Balancing over multiple ISP connections
What do you mean by "a connection"? Do you mean a TCP connection?
Oct
9
comment How can I host multiple websites from the same Windows 2008R2 server?
Note that "upstream" can be a VM hosted by the Windows machine.
Oct
9
comment How can I host multiple websites from the same Windows 2008R2 server?
The rule you state in your last paragraph is the wrong rule. For one thing, how would it work if a packet is not a reply? What you mean is this: For an outbound packet whose source address is bound to interface A and whose destination address is not covered by a more specific route, send the packet using the default route whose next hop is reached through interface A. (And the same for interface B.)
Oct
6
comment Failed to ping through gateway which is not default gateway
You do understand that ping -I and traceroute -i do completely different things, right?
Sep
30
comment Static routing on CentOS through managed switch
You're trying to solve the wrong problem. The problem is not routing these packets to the Internet, that's easy. The problem is getting the replies back.
Sep
29
comment “Lock” a certain user to a certain user in SSH (Cygwin)?
What's the purpose of the user having SSH access? What is he supposed to be doing?
Sep
27
comment Service port accessible only by one network card
What error does the service return?
Sep
24
comment How can I have ntpdate ignore skew?
You have to bring it up to date. Modify the $cmd line to what is appropriate for your platform.
Sep
24
comment How can I have ntpdate ignore skew?
Yes. Start ntp and then wait for it to report that it is synchronized. There used to be a tool called ntp-wait for this. It was a fairly trivial perl script.
Sep
24
comment How can I have ntpdate ignore skew?
There hasn't been a good reason to do this for many years now. The ntp service handles this case already. (You may want to specify appropriate options, such as -g.)
Sep
22
comment How do we find out what is causing high cache usage on our server?
You need to understand why the machine is dying, not why it is using memory. Using memory is normal, dying is not. Can you describe the problem a bit better? When it "dies", what exactly happens? Does it crash? Reboot? Respond to pings? Log something?
Sep
17
comment High memory usage, where is it coming from?
"Why is my server wasting so little memory?" (There are only two things you can do with RAM, use it or waste it. You can't save it for later. So "lots of use" means "little waste".)
Sep
11
comment tcp ack delay almost 600ms, is this all right?
You seem to be expecting some unreasonable level of precision from TCP timers. It's not intended to be a real-time, low-latency service.
Sep
11
comment tcp ack delay almost 600ms, is this all right?
It looks like a packet was lost and retransmitted. The recipient didn't know the packet was lost and retransmitted, and so started a 200ms timer when it received the retransmit. A 500ms timeout over TCP is idiotic.
Sep
11
comment tcp ack delay almost 600ms, is this all right?
What client timeout are you talking about?
Sep
9
comment RAID6 generates quite a IO wait at relatively low TPS
For a given level of performance, the wait time is purely determined by load. You seem to be getting reasonable performance -- 200 TPS. (The heads have to seek.)