HNHacker News
TopNewBestAskShowJobs

X-Istence

7,174 karma · joined February 18, 2010

[ my public key: https://keybase.io/deltaregeer; my proof: https://keybase.io/deltaregeer/sigs/fB1spa9ustk6eYzq4uXRVHb1D85EaTlipzh1uutGT34 ]

Portfolio: http://deltaregeer.com/ Engineering Notebook: http://funcptr.net/

delta@regeer.org

submissionscomments
X-Istence··on IPv6-only subnets and EC2 instances
Even with the ability to renumber RFC1918 is just not that large, and when you need to summarize routes/BGP you can't easily re-use empty space from one location in another because it'll blow up your routing tables.
X-Istence··on IPv6-only subnets and EC2 instances
Okay, so I may have left out a key detail that these "companies" were large ISP's and had massive networks of their own with hundreds of thousands of devices, let alone customer devices on that same network that needed to be managed.

When every set top box, cable modem, customer wifi gateway, and all of your routers/management interfaces need RFC1918 space it goes real quick, real fast.

It gets even worse when you are have to have a lab where you can setup infrastructure that looks/feels exactly like production and thus needs similar setups, now do that for testing/staging... and there's doubling of your required IP space already.

X-Istence··on IPv6-only subnets and EC2 instances
I am glad to see I am not the only one frustrated with Azure's supposed "IPv6 support".
X-Istence··on IPv6-only subnets and EC2 instances
Right now you have a choice in how you configure your network:

1. IPv4 private with NAT gateway and ELB dual stack providing IPv4/IPv6 for clients

2. IPv4 private with 1:1 ephemeral IP (avoids the NAT gateway tax, but now every VM gets a public IPv4 address) and ELB dual stack providing IPv4/IPv6 for clients

3. IPv6 globally unique with no IPv4 and ELB dual stack providing IPv4/IPv6 for clients

With option 1 you end up paying money for the NAT gateway for any outbound traffic instantiated from the instance (not return traffic through the ELB), this costs you 2 IPv4 addresses (1 for NAT gateway, one for the ELB, ignore AZ's and HA for now)

With option 2 you end up not paying for the NAT gateway, but get a free IPv4 address per VM, so N VM's + 1 ELB IPv4 address is N + 1 IPv4 addresses. (NAT Gateways are expensive, even if you have one sitting mostly idle, and don't forget cross AZ traffic if you have only one NAT gateway but instances in multiple AZ's, or you need to spin up multiple NAT gateways).

With option 3 you end up not paying for the NAT gateway, nor do you use a public IPv4 address. This might not work if your instance needs to reach IPv4 parts of the internet, but if its just API servers that communicate internally, they likely don't need to and can use IPv6 for the remaining traffic. Now you have just 1 IPv4 address on the ELB.

If AWS were able to incentivize its customers to deploy their systems in an IPv6 only configuration this would put pressure on the publishers of software to make sure their systems are IPv6 enabled so that their customers could download it, and it would reduce the amount of public IPv4 addresses that are required across AWS as a whole.

Running an IPv6 only core is entirely possible, and makes sense. No more worrying about overlapping IP space (having worked at two companies where they ran out of RFC1918 space and you had to deal with multiple hops to get into various networks, which is no fun), thus simplifying network management.

X-Istence··on IPv6-only subnets and EC2 instances
GCP has support for IPv6 dual stack in only 4 or so regions: https://cloud.google.com/vpc/docs/vpc#ipv6-regions not only that but enabling IPv6 is not as simple as it is in AWS and requires a lot of manual fiddling with the subnets. Once enabled it does give you a prefix that is automatically assigned to each VM in the subnet which you can use for containers and the like.

Azure's IPv6 support is terrible, and does not support IPv6 only networks: https://docs.microsoft.com/en-us/azure/virtual-network/ip-se... including limitations on the prefix size you can get for your VM's: https://docs.microsoft.com/en-us/azure/virtual-network/ip-se... no /56 like you can get in AWS that you can then slice /64's out of for subnets and no prefix delegation for running container workloads on their own GUA.

Where Azure was ahead was that its load balancers supported targeting IPv6 addresses and thus didn't require IPv4 for forwarding traffic.

AWS fixed that today.

AWS should be lauded, and while it is long overdue (IPv6 core, with IPv4 only on the edge makes so much sense) AWS is the first hyperscaler to do so.

X-Istence··on Unicast Use of the Formerly Reserved 127/8
When kube-proxy for IPVS tried to use 127/8 for network traffic it went all kinds of bad. I realize that this doesn't make as wide ranging of a change, but 127/8 is hardcoded in a lot of different places. It is going to take a LONG time before all those devices are updated.

It seems kind of silly to undergo this endeavor, instead of adopting IPv6. We are simply staving off the inevitable with these extensions people keep proposing.

X-Istence··on macOS Monterey's new network quality tool is surprisingly good
ip doesn't exist on macOS. That is a Linuxism.

You can use the following:

   netstat -rn -f inet | grep default | head -n 1 | awk '{ print $2 }'
To get the default gateway that is the preferred one on macOS, so you don't need to hard code it.

  scutil --dns
Will display the DNS servers/split DNS configuration as well.
X-Istence··on macOS Monterey's new network quality tool is surprisingly good
I doubt its a bug in a particular model. I'm on an M1 Max and the tool works without issues.

I am guessing its an bug in the tool itself that the user ran into.

X-Istence··on 14-inch MacBook Pro review: A Mac Pro in your backpack
Docker has been working for months.
X-Istence··on Lead time for new Intel NIC orders is quoted around 52 weeks
No drivetrain components are becoming unavailable.

https://www.jittruckparts.com/blog/post/3-takeaways-from-the... https://www.ccjdigital.com/maintenance/article/15066337/truc...

X-Istence··on Lead time for new Intel NIC orders is quoted around 52 weeks
If you look at the various ports, the ships are waiting to enter so that they can offload.

There's a lack of shipping options available to get items to the US in the first place, that means that various bits and bobs necessary to manufacture a widget aren't available because they are stuck in a shipping container somewhere around the world and there is no available space to put it on a ship.

X-Istence··on Apple didn't revolutionize power supplies; new transistors did (2012)
The Anker power charger I have on my desk has a cTUVus logo on it.
X-Istence··on Apple didn't revolutionize power supplies; new transistors did (2012)
Even-though the Anker brick I have does not have an Underwriters Laboratory logo on it, it does have a TUV and a CE logo. TUV is the equivalent to UL but is a testing house mostly geared towards Europe.

That being said, TUV like UL is listed as a Nationally Recognized Testing Laboratory (NRTL) in the United States (for more information see: https://www.tuv.com/usa/en/ctuvus-certification.html) and thus is just as safe.

The UL logo may be more recognizable in the US, however they too certify for both markets, with UL also having their UL EU certification program.

X-Istence··on Using two keyboards at once for pain relief
I bought an Ultimate Hacking Keyboard and I absolutely love it. It has solved my primary complaint of feeling tired at the end of the day, and have been loving the custom key commands that can be sent depending on the layer of the keyboard.

Certain shortcuts for things like managing windows are now behind Fn + a key vs Ctrl + Option + Cmd + key.

While traveling I miss my keyboard, but because its not ortholinear at least it retains similar key position so switching to a different keyboard hasn't caused too many issues.

X-Istence··on DNS alias mode (2020)
Use route 53 and create an iam policy that locks down access to a specific hosted zone.
X-Istence··on DNS alias mode (2020)
Yes. I use hosted zones in Route53 to do this automation and use iam to limit access to that one zone.
X-Istence··on Bug in Lynx's SSL certificate validation – leaks password in clear text via SNI
SNI matches certificates by looking at the SAN list on a list of certificates and finding the best match.
X-Istence··on It looks like a product but is secretly a subscription
> Glass-contained milk delivery seems great.

Not sure where in the world you are, but Sprouts in the US sells milk in glass bottles. You pay a fee, and you get that back when you return the glass bottle the next time you come in to buy more milk.

It's not delivery, but it's a whole lot better for the world than more plastic.

X-Istence··on Longest Possible Domain Name
There's a maximum limit of ~250 bytes for a DNS name.

See https://stackoverflow.com/questions/32290167/what-is-the-max... for more information.

Using a longer TLD won't change the maximum length.

X-Istence··on Someone has to foot the bill for empty offices
Anecdotal I admit, but I have a large group of friends who are currently shopping new employment because their company is looking to have them back in the office full time and they don't want that, they want to continue working from home and it is now a line they are drawing in the sand.

In the past 4 weeks I have received 6 resumes for people looking for remote work because they much prefer to live outside the city center and have more room for activities, and they don't want to go back to commuting for hours per day or sitting in traffic.

X-Istence··on iOS4 Built in SwiftUI
Those screenshots invoke a lot of good memories from when I was in college and hanging out with friends. It's really weird how the design choices stuck with me as a trigger for that.
X-Istence··on Apple-Epic judge asks why offering iOS users a choice is bad
Apple does offer Apple Pay on websites and it can easily be integrated with a payment processor. I use it for buying stuff on Apple Pay enabled sites all the time.
X-Istence··on Lima: Linux-on-Mac
I’ve got a 49 inch ultra wide connected to my MacBook Pro using a Belkin Thunderbolt dock… what about ultra wide support?
X-Istence··on Emulating AirTags to upload arbitrary data via Apple's FindMy network
Most users have Find My turned on for their devices so that if they are lost or stolen they can find them.

Find My on your phone already has to get an approximate location, and it does so fairly frequently (since you can track somewhat realtime).

So having an Air Tag piggy back on the same mechanism won't cost a whole lot in terms of having to power on the geolocation capabilities.

X-Istence··on The global chip shortage is starting to have consequences
Highest these days is like 0.5%. If you are really lucky you can find 0.8%
X-Istence··on A problem repeatedly occurred with Safari 14.1
Is that because the user has a certain amount of karma? I tried to dig into it but I am not sure how it got that flag.

Telling users to re-install the system seems a little drastic and seems like the last thing Apple would recommend were you take your machine to the genius bar...

X-Istence··on A problem repeatedly occurred with Safari 14.1
Is that user an Apple employee? I though the forums were a free for all?
X-Istence··on IPv6 Fragmentation Loss
The minimum size dictated by IPv6, and thus almost always guaranteed to work.
X-Istence··on Apple Introduces AirTag
Someone already has.

https://appleinsider.com/articles/21/03/04/researchers-rever...

X-Istence··on Users are losing out against Big Sur’s sealed System
What do you mean that macOS doesn't virtualize memory? Would you mind expanding on your thoughts a bit more?
← PreviousPage 5 of 34Next →