Jeremy Gibbons
  • Member for 6 years
  • Last seen more than 1 year ago
  • Paris, France
Is it worthwhile to setup HTTP 2 reverse proxy in front of HTTP 1 server?
Accepted answer
5 votes

This is one of the scenarios Nginx explicitely supports, and you would most likely see at least some performance gains due to the improved pipelining, having only a single TLS session to negotiate, ...

View answer
How do VPN servers/clients avoid routing their own remote connection packets through themself?
Accepted answer
4 votes

You are correct that with purely destination-based routing this is a problem, if the destinations you are reaching through the tunnel overlap with routing needed for tunnel establishment, etc.... The ...

View answer
Our website is being blocked and we don't know why
3 votes

It looks like your DNSSEC setup is incorrect/incomplete. See here: http://dnsviz.net/d/nibble.id/dnssec/ Per Google standards their DNS servers will report lookup failure if DNSSEC validation fails. ...

View answer
Server IP is showing Firewall IP
3 votes

Most likely you cannot : the typical situation is that your server is on a private subnet behind the firewall, and any outbound traffic to the Internet (such as a "What's My IP" site) is NATed on the ...

View answer
Can VPN authentication be used for SSH?
Accepted answer
3 votes

Without more detail about what solutions you are using, it will be hard to answer your question precisely, but generically yes you can do that. Usually your VPN server and your SSH server point to ...

View answer
How do policy based routing tables actually work?
3 votes

Actually, I think the confusion comes from the fact that those instructions are mixing two topics : Dealing with policy routing Setting up your standard routing table in a best-practice way These ...

View answer
Better routing path to reduce network latency to China
2 votes

There's really not a whole lot you can do on a purely routing level: you are dependent on whatever routing decisions your ISP has made. Adding routes to your home router won't do anything, as it ...

View answer
Long lived TCP connection to DNS servers
Accepted answer
2 votes

The existing approved DNS-related RFCs actually don't cover DNS request pipelining, though it wouldn't take much to get there. Check out this draft of an update to RFC 5966 for example, which seems ...

View answer
Route traffic in a public network
2 votes

Public vs private doesn't really matter here, you can use either one. However, I think you'll find that it's very tricky to implement what you're looking for without placing your existing servers into ...

View answer
Direct server to server traffic via LAN
2 votes

You really should look into an internal DNS, and not so much a DHCP, as it is fairly rare to assign server IPs via DHCP. You should end up with essentially two DNS domains : - one for your ...

View answer
Multiple internet routing SSL to same windows server
1 votes

The setup you suggest may well work but to be honest I find it complex and probably hard to maintain over time. I would suggest you consider fixing this at layer 7, i.e. forward all port 443 traffic ...

View answer
Multiple NIC same subnet
Accepted answer
1 votes

It looks like you are trying to force a router to do a switch's job... but why not turn the server into an actual switch ? You can use the network bridge solution in Ubuntu to just bridge all the ...

View answer
Can't ping public endpoints when IPSec tunnel is up
1 votes

I'm not entirely familiar with the xfrm syntax, but it looks like : When your VPN is not up, you have a default route to the Internet, so you can ping the way you expect Once the VPN comes up, the ...

View answer
Manual routing in EC2 instance
Accepted answer
0 votes

Most likely you are bumping against the source/dest check that EC2 instances perform by default: they block any traffic that is not intended for their interfaces directly. This is the same issue you ...

View answer
Secure Dynamic DNS and DHCP Quandry
0 votes

In my 1000+ location network, we long ago gave up on having AD DCs at each location for obvious cost reasons, not to mention the fact that if the network is down, the users aren't getting any work ...

View answer
Bad throughput for single tcp connections
0 votes

Single TCP sessions are limited by the size of each sessions' window, which represents the maximum number of bytes that can be "in flight" between the two endpoints at any given time. So if you have ...

View answer
udp broadcast on port 25860
Accepted answer
0 votes

That is not one of the "standard" ports (e.g. for FTP, SIP, SNMP, etc...) so it's probably some proprietary protocol, but it's impossible to tell for sure with so little information. I would suggest ...

View answer
Cisco Aironet 1200 dhcp relay config
Accepted answer
0 votes

Configuring DHCP Relay is done through the ip helper-address command in interface config mode, like so : interface ethernet 1 ip helper-address 192.168.1.1 where 192.168.1.1 is your DHCP server.

View answer