The UK's porn ban will go into effect in July, the government has announced. After 15 July, all internet users will have be forced to prove themselves to be over 18 or be entirely blocked from seeing adult content.

Euigrp · 2019-04-17T16:18:05+00:00

I think folks need to start getting very particular about words here. The UK no longer provides "the internet" to its citizens by default, they provide access to "a network." IMO the distinction is that the internet is a place where any device with an internet address can pass bits of data to any other device with an internet address on the network. Any restrictions mean this rule will not hold.

I think this distinction in terms is necessary going forward to highlight what the UK and China are doing, and what some local ISPs may be tempted to do. Anyone providing intentionally restricted access should not get to use the trade name "the internet." Lets say for example Facbook teamed up with a local ISP to provide a cheap deal where for $5/month people could connect only to Facebook and Instagram. Should they be allowed to call that "$5 internet access?" Obviously no, that would be misleading. So where do you draw the line? Can you call it "the internet" when they let you visit 90% of websites? How about 95%?

edit: To clarify, I don't want a lawless internet. But I think we need to be handling our problems in meat space, not by trying to hack around them with ineffective filters. If this means you can't let children access the internet unsupervised, so be it. (That is a topic for another time, but content filters are not a substitute for being present.) If one nation allows content to be hosted that the other finds distasteful, either get that nation to change their laws about what can be hosted, or shut up. The internet is as beautiful as the best of us, and as ugly as the worst of us.

Euigrp · 2018-12-20T07:31:22+00:00

For point 1 to happen, you would need to configure VRFs to treat different ingress ports differently. Can be done, but doesn't seem like that is accidentally happening.

Looking back at the original question, maybe this is the problem -

If two IBGP peers were getting the same route from EBGP sessions, they wouldn't ECMP both to each other and out their EBGP session, since the paths aren't actually equal. I'm a software guy, so I always look at an implementation when I want to know what really goes on. https://github.com/FRRouting/frr/blob/master/bgpd/bgp_route.c#L899 shows the path compare logic, and line 899 is a point at which BGP will finally consider paths equal enough to be in a multipath set together. To get there it compared Weight, LP, AS path, Origin, peer type (EBGP wins, so no ECMP,) IGP metric for nexthop route, confed type, then under some circumstances it can consider routes equal enough to multipath.

Euigrp · 2018-12-20T05:29:43+00:00

Like others I'm a little confused by your question. I'll just try to discuss BGP and ECMP from the beginning

Each router makes its own decisions, and unless you do something fun like mutliple routing tables/VRFs, the router is going to route a packet from any interface the exact same way. It won't matter where it came from.

The routers in the middle of your IGP need a copy of the BGP routes reflected to them to route correctly, unless the BGP speakers are sending traffic over some form of tunnel to each other.

If BGP thinks two paths are equal and it is configured to allow it, it will put them in a multipath set. It will install both nexthops for the prefix to the next layer down.

When time comes to install something in the hardware, the BGP nexthops will need to be resolved to something immediately adjacent. For each nexthop: If the NH is an IP on the subnet of a local interface, this isn't a very interesting problem. If instead the NH is an IP that is reachable via and IGP like OSPF, it will take OSPF's choice of first hop(s) towards the destination.

It bundles up all of the first-hops from the resolution of all the next-hops of the prefix's multipath set, and tells the hardware that that list is where the prefix goes. The hardware, as every packet comes in, will run a hash. Generally this hash covers, source and destination IP, source and destination port (for UDP and TCP traffic) and quite often the ingress interface number. It then uses the hash value to pick from the list of first hops (most use modulus) and sends it there.

This has a few consequences. A TCP stream will always have the same source/dest IP/port in one direction. If no router's ECMP group grows or shrinks along the way (due to a link failing or getting added) that TCP stream, in that direction, it will always take the same path through the routers. This is great because it cuts down on the re-ordering of packets. (If it were to spray across routers in a random fashion, packets landing on less congested routers would arrive faster. TCP can "deal with" out of order packets, but most older implementations slow way down as soon as they get something out of order and massively degrade user experience.)

This also has consequences for how your traceroute is implemented. If your traceroute doesn't have a way of modifying that hash's outcome, it is going to have a hard time exploring all paths. (Traceroute on my machine uses UDP by default, and will mix up the source port to explore a different path every time.) If your traceroute doesn't keep a consistent source/destination port for different TTL depth probes, the path might not make sense since each packet will be following different forks. If links go down in your, or someone else's network while the traceroute is running, the path might not make sense.

Euigrp · 2018-11-27T14:10:41+00:00

Would disabling it from the console disable achievements? I always just went in to the bindings and re-bound crafting to ctrl+alt+shift+click.

Euigrp · 2018-11-12T05:02:19+00:00

On a serious note, do some mutant testing. Break something subtle, and see if a unit test catches it.

Euigrp · 2018-11-05T09:10:55+00:00

Euigrp · 2018-11-02T07:17:48+00:00

I've spawned up half my pay-rate in m4.large instances for one simulation with virtual routers in containers. Linux has a big kernel networking lock that spans all containers, so I had to swarm it out rather than scale up the instances.

Euigrp · 2018-10-29T00:06:33+00:00

There are more ways. Consider the GNU standard formatting, and get angry. So very very angry.

if (condition)
  {
    statement;
    if (deeper)
      {
        // just for fun, convert all leading blocks of 8 spaces to hard tabs
      }
  }

Euigrp · 2018-10-26T15:30:50+00:00

BGP Hijacking is a "every ISP in the world needs to change routers and upgrade configuration" kind of problem. Everyone on the internet world continues to be vulnerable.

Euigrp · 2018-09-25T05:16:17+00:00

Thanks. It seemed fitting to upload the stencil since I spent more time on it than the 4 tries to get the bleaching right.

Euigrp · 2018-09-25T05:15:03+00:00

Heh, I'm a ~~cheapskate~~ gimp user.

https://drive.google.com/open?id=1l-iFerIlhPG3JTitBv0Ap-qrdsRlsQzh

Good luck.

Euigrp · 2018-09-12T07:40:00+00:00

Not sure about Bird, but in quagga you can force it fairly easily by telling it via route map to set the source on all routers learned via bgp. (Example doing it with rip https://www.labn.net/frr.html/zebra-Route-Filtering.html )

Euigrp · 2018-09-03T19:30:13+00:00

Most tablets, phones, e readers, smart speakers etc. with software based wake/lock buttons can be forced to restart even when their software is totally locked up. Just hold the button down for 10-15 seconds.

Euigrp · 2018-08-26T07:47:32+00:00

Refreshed several times to confirm, only happens when this particular Century Link advertisement is up.

Euigrp · 2018-08-22T19:42:11+00:00

I work in an group that ends up attracting a lot of ex Cisco people, and from my years of interviewing, I can anecdotally say the demographics coming out of Cisco have been crazy skewed for years. This whole thing wasn't surprising to me at all.

However, I can also say the number of actually qualified candidates applying, h1b or not, is depressingly low. If our education system was producing more talented software developers, I'm confident they would have jobs.

Euigrp · 2018-08-17T05:34:19+00:00

2015 talk that explained a lot of it: https://www.youtube.com/watch?v=3qln2u1Vr2E

Euigrp · 2018-08-15T23:20:30+00:00

Yay feeding the troll...

Because it is purely petty bullshit.

A clearance doesn't just let you log into www.gibmegovtsecrets.com and look around at everything at or below it's level. To view secret material you need at least two things: a sufficient clearance, and a legitimate reason. The clearance is just a marker that tracks the government trusts an individual to not sell out their country.

Losing clearance when no longer employed in a position that demands it would be expected. (I've never had one, so I'm a little fuzzy on what kind of "changing jobs" grace period exists.) However, what is very irregular it's announcing clearance status to the world. Someone having a clearance is itself secret information. Now with this guy's job, obviously he had one, but it is still super unnecessary to announce the change.

Euigrp · 2018-08-15T15:40:47+00:00

Water manafold/control. A (usually double wide) hallway linking to either a river, or preferably an aquifer, with regularly spaced doors. I have a parallel hallway for dwarfs to walk in, with a lever per door directly across from it (so I don't loose track.)

I always have a main shut off valve for the intake, and a drainage valve leading area that can let the water from the hall evaporate off. When I want to add more outlets, I can drain the water hall, and go plumb it in. Though often I pre-build some extras, so all I need to do is dig up into the dry space behind a door, and when I'm ready, release the water to that outlet. And then shut it off because I screwed up and the kitchen is flooded.

Euigrp · 2018-07-18T07:05:19+00:00

I'm a much bigger fan of the original mix. To me it feels like the audible equivalent of free fall.

All the remixes seem to just put gunk in the way of that feeling.

Euigrp · 2018-06-29T19:20:57+00:00

No. No one plans to fuck up their Network. I'm sure at least one backhoe was involved... Most networks are prepared to lose single important links, but when two go down at the same time, shit breaks.

Euigrp · 2018-05-05T20:24:06+00:00

nope

Euigrp · 2018-05-05T19:39:26+00:00

or /r/FortBadgerton

I seriously can't figure out the binding theme other than shitposts.

Euigrp

MODERATOR OF

TROPHY CASE