walth

TLDR, not ready for prime time.

Sadly, probably still the best Cloudflare blog written in the last nine months.

Come to the Midwest. Over friendly. Zero air pods effect.

That is true at a certain scale, but there is also a reason why large organizations like Cloudflare ran nginx on their edge over any other product.

You might be interested in nginx's implementation

https://nginx.org/en/docs/http/ngx_http_upstream_module.html...

My biggest regret is now not making friends with Doc Brown.

Never attribute to malice that which can be explained by stupidity.

We had the same thing happen with any email with 2f<domain> anywhere in the message body on Google workspace

The "2F" URL decodes to slash / and a third party registered our 2f<company>.com (probably for nefarious purposes)

That kicked on the automatic filtering on messages that had URL encoded links and started blocking them.

Eventually, we had to register 2fgoogle.com ourselves to escalate the issue.

I'd recommend VictoriaLogs and shipping to via Vector

Safari on IOS still has a ton lingering HTTP/3 / QUIC bugs.

I think it is to the point that if your user base doesn't warrant it, (i.e. you are targeting well connected devices with minimal latency/packetloss) it's not even worth turning HTTP/3 on

Its great. We use it.

I'm not sure I would call it even close to battle hardened.

They are still many lurking footguns and bugs.

Try running it with > 250k tables. Falls down hard.

Error logic around etcd/topo server is very shaky, edge cases can wedge cells/clusters into broken state.

Also love gnuplot, and and ministat for stats/graphs from the command line

Also pretty easy to implement disk quotas on a modern system.

Heck, you could even display a warning or the top directories consuming space upon login.

Not a great take - this is a operations problem, not a design problem.

https://www.usgs.gov/faqs/what-lidar-data-and-where-can-i-do...

Meanwhile, it’s going on two weeks that a large volumetric amplification attack has been coming from CF itself against systems I manage.

Ironically, their abuse report does validate the domain being used to route traffic is a registered customer domain. But the abuse report and even Slack pings have yet to affect the traffic. It’s incredibly frustrating because you’d expect a company like Cloudflare, which positions itself as a defender against DDoS and similar threats, to take action much more quickly when they’re part of the problem.

For single instances, this seems very true.

For complex multi-member clusters Maria/MySQL are quite far ahead.

Found it much easier to just used structured logs and slice them with [angle grinder](https://github.com/rcoh/angle-grinder)

Chatted with these folks a few times and they are all lovely people and would be super fun to work with.

We all know its all about the money.

I want to know that you care enough to have done a modicum of research on your new potential employer. And in turn, that you can give a short answer on why you might want to spend 40 some hours a week with us.

If you can't do that, (and it really just is all about the money) then that's just a precursor to a disaster or new future burn out.

Those people are indeed hard to find. Individuals that write operators and/or know the internals vs just using kubectl and helm.

Nice - I normally use [bash-readline](https://github.com/iovisor/bcc/blob/master/tools/bashreadlin...) when coworking/co-inhabiting a server or training someone.

https://www.folklore.org/Discovered_Loops.html?sort=date?sor...

Appears some blocks near (but not in) RFC1918 space are missing?

We have a similar in house utility that looks at the P90 resource utilization (via prom) for last 48hrs and adjusts requests to this level.

This allows our scheduler to place/pack the workload according to our preference.

Most just utilize out of the box macro resources available in HPA.

For more advanced use cases there is keda - https://keda.sh/

Systems Performance: Enterprise and the Cloud, 2nd Edition (2020)

https://www.brendangregg.com/systems-performance-2nd-edition...

I believe this test is run several times and the data set fits in page cache.

Sharing the love for awk as well :)

Aho's second edition of The AWK Programming Language dropped a few months ago is recommended if you want to know more about the language.

Z-Wave is in some ways the better pick going forward

Z-Wave unfortunately is already dead. The legacy certification process, the higher cost chips, and the global frequency bifurcation.

There is no proof that they're doing what you're claiming.

do you recall when Plex started ingesting your media history and then emailed all shared users in your library what you were watching?

Many Plex users were pretty embarrassed to be outed for soft porn to family members and colleagues.

https://www.reddit.com/r/selfhosted/comments/180maoe/plex_cr...

Sloot lives!!!

https://en.m.wikipedia.org/wiki/Sloot_Digital_Coding_System

You can do the same thing on Mac with built-in tools

``` # Setup pipe sudo dnctl pipe 1 config bw 1Kbit/s delay 800

# Setup matching pf rule echo "dummynet out proto tcp from any to 127.0.0.1 port 11211 pipe 1" | sudo pfctl -f -

# Turn on firewall sudo pfctl -e

# Test time nc -vz 127.0.0.1 11211 Connection to 127.0.0.1 port 11211 [tcp/*] succeeded! nc -vz 127.0.0.1 11211 0.01s user 0.00s system 0% cpu 1.333 total ```