Reputation
Next tag badge:
97/100 score
31/20 answers
Badges
1 24 51
Impact
~725k people reached

Feb
25
comment Are self-signed SSL certificates secure?
The purpose of the CA is to prove to others that a certificate belongs to who you say it belongs to. Since you already know who the certificate belongs to, in terms of you accessing your own server and presenting your own certificate, a CA serves no purpose. However, others cannot securely access your servers, because they have no way to know which certificate to trust. (You do know -- trust the one you issued.)
Feb
25
comment Are self-signed SSL certificates secure?
You are incorrect. Nobody could spoof things to get you to connect to their server instead of yours. They have no key that corresponds to the self-signed certificate you issued, and can't present a different certificate to you since you wouldn't accept it.
Feb
23
comment Trying to make it so on my mac (or entire local network) any *.dev domains point to an IP
Each local computer would have to use that machine as its DNS server.
Feb
23
comment Trying to make it so on my mac (or entire local network) any *.dev domains point to an IP
It's really not clear what it is you're trying to do. But it sounds like all you need to do is run bind on that machine, make it authoritative for dev. and put in a wildcard entry for *.dev that maps to 192.168.0.150.
Feb
23
comment No route to host in different subnet
The first question you have to answer is this: What is supposed to make this work? Then you can move on to the second question: Why isn't it?
Feb
23
comment Packet loss during TCP handshake
It's the nature of the beast. If you require nothing at all, you don't have any protocol. And you have to tolerate some loss, or your protocol doesn't work. So it's a necessity that you will require some things that the protocol would work fine without. It's an unavoidable consequence of the two generals (or "last ack") problem.
Feb
21
comment Slow connection times from remote server doing apache bench
Then so long as the cost of ab is constant across tests (which it should be) you should be able to run the test locally. Note that tuning for best performance in this test may or may not optimize real-world performance over the network.
Feb
21
comment Slow connection times from remote server doing apache bench
It depends what you really want to measure. For example, does it matter if the web server can handle more requests than the network can feed it? (And, of course, how could you measure?)
Feb
21
comment Slow connection times from remote server doing apache bench
You're going to have to get the machine under load to see a difference. You're testing without the machine even breaking a sweat, so all you're seeing is the network latency.
Feb
21
comment DHCP range starts with 194.77.30. Could that lead to problems?
I once worked at a company that had used an IP range that belongs to Boeing for their internal network. Everything worked fine until they got a big contract with Boeing, but nobody at Boeing could reach any of the services behind our firewalls.
Feb
19
comment Netgear GS108E switch, requires external ``management'' software?
Say it had a web server, how would you access it without external software? Would you compose HTTP requests by hand?
Feb
19
comment public ip resolves externally but not internally
pfsense requires a specific rule for hairpin NAT.
Feb
19
comment Netgear GS108E switch, requires external ``management'' software?
How else would you enable or control those features?
Feb
18
comment Increasing the number of outbound TCP connections
Are you sure you're typing ulimit -n from the exact same context in which node.js is launched?
Feb
18
comment Increasing the number of outbound TCP connections
What I/O discovery method are you using? Is it select, poll, epoll, thread per connection, process pool, or what? And what goes wrong when you try to go over 1,000 connections?
Feb
17
comment Why Doesn't Ping Show RTT?
That timestamp is not accurate enough to display a meaningful RTT measurement. And while the RTT could be derived from the ICMP identifier, it isn't.
Feb
17
comment How to access my site with ip address?
That won't work because the IP address it not yours, it's the machine's. If you need a dedicated IP address, you'll have to request one from your hosting provider, and likely pay more for it.
Feb
17
comment Setup 2 routers and 2 networks with a single internet provider
@Jerry Just configure Router #2 not to allow that access. (You will need to run alternative firmware on it like Tomato or DD-WRT.)
Feb
16
comment Loop redirect when ping my gateway
It sounds like you have a router that's trying to route between hosts inside the same subnet. That won't usually work correctly. Are the APs using WDS?
Feb
15
comment Disk Throughput Terminology
@Dan If Windows locked the file on a write and the program didn't close/reopen the file on every write, there either would have to be no write lock at all or a continuous write lock. With a continuous write lock, how could the reader ever get in? If you want to use a file this way, both ends have to be designed to use appropriate file locks at application level. Even then, it still might not work, but at least it has a chance.