New tcp stack attack

2008-10-01 Thread Leon Dippenaar
Hi there, is there any weight to this new story on slashdot http://it.slashdot.org/it/08/10/01/0127245.shtml about a new attacker possible to break any tcp stack? Sounds rather shady, so here I am, perhaps you guys have your ears closer to the ground Regards

Re: Hardware recommendation request

2008-09-29 Thread Leon Dippenaar
I have successfully used the below Nic's on 4.3 and 4.4 -current setups (especially the 4 port version) http://h18004.www1.hp.com/products/servers/networking/index-nic.html They go well with the HP DL range in my experience. Example the HP DL385 will give you 4 PCI express lanes i.e 16

Re: relayd http-https-redirects with sticky-address

2008-09-29 Thread Leon Dippenaar
I can relate to that, having load balancers fixing backend services. If you have the time, you will probably find pound reverse proxy http://www.apsis.ch/pound/ to be a nice alternative to try out in your lab. I have pound on openbsd for several years and can recommend it for http - https

Carp and PF cluster design question

2008-09-16 Thread Leon Dippenaar
I'm in the process of setting up a redundant reverse proxy cluster for someone. Currently the setup is working in a single box non redundant setup and everything is perfect and purring nicely. What I want it to ultimately do: I want to load balance the 2 boxes with carp and each box in their