I completely forgot about the April 1st, I will try something tomorrow but I am afraid we have too little time to review and improve the writing :S (maybe you guys has already prepared something)
Just a quick question: I'm running a recursive DNS, which is rate-limited to five queries per second to prevent DNS amplification attacks. I'm going to make this server public, so there will be a lot more DNS queries per second, but I still want to prevent DNS amplification. This is in my configuration:
rate-limit { responses-per-second 5; //other stuff below here that I won't paste into chat };
Will that limit clients to five queries per second or will that limit _everyone_ to a collective maximum of five queries per second?
I already tried, had a nice question set up too and _of course_ twenty-five minutes of stumbling through `man named`and Googling didn't give me the linked question when it was marked as a duplicate.
My question: http://serverfault.com/questions/585414/does-nameds-responses-per-second-rate-limit-option-limit-collective-queries-or
I deleted it but you should have enough rep to see it, looks like
@AustinBurk I do. In the question yours duplicated it gives you the answer: basically it limits the number of responses sent to each individual endpoint (not queries from!) to 5/sec.
@AustinBurk I meant to say identical responses, though the actual meaning of identical is itself specific. You should read the docs: kb.isc.org/getAttach/91/AA-00845/Bv9ARM.pdf
(that is a way better doc than the manpage for named or named.conf)
window I think is a bursting window? shrug
let's take a look
yes, window is the number of seconds for which quota can be banked.
@TerryChia I meant to look at my profile; I'm not really in any position to sign up for big expensive services; my own is costing me ~$140 a month already
@AustinBurk Dude, puppet is open source. So is chef and ansible. And $140/month for a VPS that loses internet connectivity every few weeks is ridiculous.
@TerryChia nah, vps is only $8 a month plus the $10 I pay for backup 'slots' (2 of them), plus the NAT support and the extra IP address
http://www.sudomemo.net/ Ignore the bit about the proxy, that's changing to DNS soon, hence my questions And I run most everything through a company called Fastly
You should read the administrator reference manual for BIND 9.9.
Basically, responses-per-second is the number of identical replies that can be sent to one single destination, per second. The definitions are tricky.
A single destination is a block of network addresses, of the size configured i...
Nonono, that's the cost from Fastly I get 2TB transfer from Host1Plus a month, but the bandwidth is the terrible part Fastly is amazing: everything works great, they have integration for all sorts of stuff, great APIs, and live statistics to boot
There's this app for Nintendo DSi called Flipnote Studio, and you could make flipbook animations and stuff It's pretty great
Anyways, you used to be able to post your Flipnotes to Flipnote Hatena - http://flipnote.hatena.com - but (follow the link)
So I've reverse-engineered it and made my own And I'm finishing my senior year at high school too Tough stuff
Let's put it in perspective: A flipnote can be, at maximum, ~900KB. I started the service February 1st...and there's been 1349.434GB b/w usage since then
I started selling T-shirts yesterday! https://www.booster.com/sudomemo-1 If that's is successful, then I'll accept people's offers to make more designs and have those made, move to one of those stores that are for paraphernalia re:Youtube videos and stuff
It's too bad I can't do advertisements The DSi-side, which is what's most used, has a basic html rendering engine with no js, basic css, and proprietary image formats
I've been too busy to spend much time working on the regular website, and still figuring out how to clean up the raw audio from the flipnote
@FEichinger Took me longer to get rid of that position than I'm willing to admit too, was prolly the worst time I had in the IT industry ever. Imagine a team of developers in a medium-sized enterprise that didn't have an overview of what they're even doing and their memory lasting about a week long at best. It was ... Kafka-esque
@RоryMcCune well for knees it's a bit tricky, best would be ones with MSM (methyl something something) in it like Bengay ... or alternatively, but only if you don't plan on moving much this week, vinegar soaked patches (mind that it'll soften your tendons and also bones tho, so you shouldn't stress them, but it does work)
Guys - those Mongo answers. The two have disclosed their affiliation, and they probably do have correct answers, but to me they seem less like answers with actual content, and more like 'follow the shiny link to our website'
Full disclosure, I am an employee of Gazzang, Inc a leader in big-data and cloud security applications based in Austin, TX. I'm hopeful that I can answer at least a part of your question. We have recently partnered with 10Gen to provide data security for their MongoDB customers. Our product zNcr...
SSL - To encrypt data in motion you need to use SSL. You need a special build of mongodb to enable SSL
Encrypt data at rest - You can use volume encryption technologies like LUKS. Then your backups are encrypted as well if you use snapshots.
At MongoDirector.com we can setup both SSL and disk ...
@RoryAlsop Man, that nearly blew my head off, that loud it is LOL
@RoryAlsop You didn't read the new mod blog then did you? It's now possible to dismiss flags on same posts individually, not only in bulk like before
> Moderators are now able to provide separate resolutions for flags on the same post. When viewing a post with several flags, you can click on the individual flags in order to generate a pop-up for handling that specific flag. This will allow you to deal with situations where some flags are valid and others not, or instances where different manners of guidance must be given.
saw a nice double iridium flare again, that's incredible, I didn't see any in years and now two times a double one in probably less than a fortnight's time