Sure, you can. But on advantage of IPv6 is you addresses are globally unique. If you ever need to connect two networks that were created independently (like different companies), unique addresses, even local are very…
I've given a try to IPv6 in a company with few tens on servers in a 2 DCs, an office + additional location, 3 ISPs in total. For me the real challenge is not just different way to write an IP address or doing NAT. The…
With BGP (especially anycast) you don't have direct influence where the requests lands. You can steer traffic by techniques like AS prepend, some priorities per BGP session (I'm not an expert in BGP) but eventually it's…
Varnish (HTTP caching only) also uses one thread per client. I believe worker threads are used to handle reuqests while a dedicated thread handles all the idle connections between requests using epoll(). Also…
Can I ask if your whole content can be stored on a single server so content is simply replicated everywhere or there is some layer above that that directs requests to the specific group of servers storing the requested…
AFAIK no. The point of DRM is to prevent recording / playing the media on a device without decryption key (authorization). So the goal is different than TLS that is used by the client to ensure the content is authentic,…
I have some experience serving static content and working with CDNs. Here is what I find interesting / unique here: - They are not using OS page cache or any memory caching for that, every request is served directly…
I had brief experience managing such IT team after which I've gained big respect for them. I've never seen such low budget to amount of work ratio in my IT career. Everybody expects them to fix the "trivial" problems…
Note that they are using 10GbE network when even a single NVMe disk used in the test has few times more bandwidth so the bandwidth results are constrained by the network hardware. Creating on-premise infrastructure a…
I categorize this as bugs caused by data inconsistency because od data duplication. That includes: - Using asynchronous database replication and reading data from database slaves - Duplicating same data over multiple…
If you have your own domain, then move it to one of the listed DNS providers and use DNS challenge with ACME: We are using using certbot + cloudflare whis way. There is no HTTP request, certbot makes a temporary DNS…
From the described mistakes two come from lack of understanding how exactly DNS works. But I agree it's in fact hard, see [1]). 1. "This strict DNS spec enforcement will reject a CNAME record at the apex of a zone (as…
Generally agree, for basic configuration it just works. But I was planning to use IPv6 in some network segments in my company. Providing proper VPN (road warrior style) for employees to access such network isn't simple…
As I understand my favorite resolver - unbound - has separate "infra" cache that also caches RTT times, and "down" status of name servers: https://nlnetlabs.nl/documentation/unbound/unbound.conf/#inf...
Our security team complained that we have some services like monitoring or SSH access to some Jump Hosts accessible without a VPN because VPN should be mandatory to access all internal services. I'm afraid once comply…
I think the described machines were designed for a very specific workloads even in CDNs world. As I guess they serve exclusivelly fragments of on-demand videos, no dynamic content. So high bytes to number of requests…
Same here. mSBC coded that started working for me around Fedora 33/pipewire 3.2x is a night/day change for me. I can use my Jabra bluetooth headset with high quality audio instead of really crappy sound. I think neither…
After some searching I've found that Supermicro is selling ATX power supplies with SMBus (hopefully PMBus really) connection in reasonable price but never had one and I'm not able to find any review. Example:…
Server PSUs support such communication (looks like this is PMBus protocol, variation of SMBus, which is variation of I²C). In servers it's connected to the BCM and usually allows to read input and output power, FAN…
There are advantages of using HTTP cache on application side even if you use CDN: - Varnish can guarantee that a given resource will be fetched at most once every TTL expiration since you can set up one instance to do…
You're right. I'm wasn't really serious. Since I'm in the middle of calculating costs of own servers in rented racks in Poland (you're right labor is more difficult than hardware) let me imagine the rest of the…
10x Supermicro SSG-6049P-E1CR60H servers (60 x 3,5" HDD in 4U enclosure) - $5k each 600x WESTERN DIGITAL Ultrastar DC HC550 18TB (10800PB in total) - $500 each ~$350k in hardware, up to 20kW energy consumption, should…
IPv6: curl http://ipv6.whatismyip.akamai.com curl http://ipv6.whatismyip.akamai.com/advanced IPv4: curl http://whatismyip.akamai.com curl http://whatismyip.akamai.com/advanced Both hosts are distributed around the world…
Some providers are doing that. For example you can rent such bare metal servers from OVH's cheap brand So You Start. But that doesn't make sense if you need something more that one cheapest server. Consider the total…
The way I look at the major improvements in the two recent HTTP versions is: HTTP/2 was needed to better utilize the bandwidth by keeping the TCP connection busy without silence period. That means instead of "request -…
Sure, you can. But on advantage of IPv6 is you addresses are globally unique. If you ever need to connect two networks that were created independently (like different companies), unique addresses, even local are very…
I've given a try to IPv6 in a company with few tens on servers in a 2 DCs, an office + additional location, 3 ISPs in total. For me the real challenge is not just different way to write an IP address or doing NAT. The…
With BGP (especially anycast) you don't have direct influence where the requests lands. You can steer traffic by techniques like AS prepend, some priorities per BGP session (I'm not an expert in BGP) but eventually it's…
Varnish (HTTP caching only) also uses one thread per client. I believe worker threads are used to handle reuqests while a dedicated thread handles all the idle connections between requests using epoll(). Also…
Can I ask if your whole content can be stored on a single server so content is simply replicated everywhere or there is some layer above that that directs requests to the specific group of servers storing the requested…
AFAIK no. The point of DRM is to prevent recording / playing the media on a device without decryption key (authorization). So the goal is different than TLS that is used by the client to ensure the content is authentic,…
I have some experience serving static content and working with CDNs. Here is what I find interesting / unique here: - They are not using OS page cache or any memory caching for that, every request is served directly…
I had brief experience managing such IT team after which I've gained big respect for them. I've never seen such low budget to amount of work ratio in my IT career. Everybody expects them to fix the "trivial" problems…
Note that they are using 10GbE network when even a single NVMe disk used in the test has few times more bandwidth so the bandwidth results are constrained by the network hardware. Creating on-premise infrastructure a…
I categorize this as bugs caused by data inconsistency because od data duplication. That includes: - Using asynchronous database replication and reading data from database slaves - Duplicating same data over multiple…
If you have your own domain, then move it to one of the listed DNS providers and use DNS challenge with ACME: We are using using certbot + cloudflare whis way. There is no HTTP request, certbot makes a temporary DNS…
From the described mistakes two come from lack of understanding how exactly DNS works. But I agree it's in fact hard, see [1]). 1. "This strict DNS spec enforcement will reject a CNAME record at the apex of a zone (as…
Generally agree, for basic configuration it just works. But I was planning to use IPv6 in some network segments in my company. Providing proper VPN (road warrior style) for employees to access such network isn't simple…
As I understand my favorite resolver - unbound - has separate "infra" cache that also caches RTT times, and "down" status of name servers: https://nlnetlabs.nl/documentation/unbound/unbound.conf/#inf...
Our security team complained that we have some services like monitoring or SSH access to some Jump Hosts accessible without a VPN because VPN should be mandatory to access all internal services. I'm afraid once comply…
I think the described machines were designed for a very specific workloads even in CDNs world. As I guess they serve exclusivelly fragments of on-demand videos, no dynamic content. So high bytes to number of requests…
Same here. mSBC coded that started working for me around Fedora 33/pipewire 3.2x is a night/day change for me. I can use my Jabra bluetooth headset with high quality audio instead of really crappy sound. I think neither…
After some searching I've found that Supermicro is selling ATX power supplies with SMBus (hopefully PMBus really) connection in reasonable price but never had one and I'm not able to find any review. Example:…
Server PSUs support such communication (looks like this is PMBus protocol, variation of SMBus, which is variation of I²C). In servers it's connected to the BCM and usually allows to read input and output power, FAN…
There are advantages of using HTTP cache on application side even if you use CDN: - Varnish can guarantee that a given resource will be fetched at most once every TTL expiration since you can set up one instance to do…
You're right. I'm wasn't really serious. Since I'm in the middle of calculating costs of own servers in rented racks in Poland (you're right labor is more difficult than hardware) let me imagine the rest of the…
10x Supermicro SSG-6049P-E1CR60H servers (60 x 3,5" HDD in 4U enclosure) - $5k each 600x WESTERN DIGITAL Ultrastar DC HC550 18TB (10800PB in total) - $500 each ~$350k in hardware, up to 20kW energy consumption, should…
IPv6: curl http://ipv6.whatismyip.akamai.com curl http://ipv6.whatismyip.akamai.com/advanced IPv4: curl http://whatismyip.akamai.com curl http://whatismyip.akamai.com/advanced Both hosts are distributed around the world…
Some providers are doing that. For example you can rent such bare metal servers from OVH's cheap brand So You Start. But that doesn't make sense if you need something more that one cheapest server. Consider the total…
The way I look at the major improvements in the two recent HTTP versions is: HTTP/2 was needed to better utilize the bandwidth by keeping the TCP connection busy without silence period. That means instead of "request -…