SDN - Killer Apps

2013-02-25 Thread Glen Kent
Hi, I am trying to understand how SDNs can dramatically change the networking paradigm and this is my understanding. Yahoo, Google, etc applications are running on one server and each application could be theoretically associated with a unique VXLAN tag. This way service providers will be able

Re: SDN - Killer Apps

2013-02-25 Thread Simon Perreault
Le 2013-02-25 09:23, Glen Kent a écrit : Yahoo, Google, etc applications are running on one server and each application could be theoretically associated with a unique VXLAN tag. This way service providers will be able to provide QoS per application (by effectively providing QoS to the VXLAN

Re: SDN - Killer Apps

2013-02-25 Thread Saku Ytti
On (2013-02-25 13:53 +0530), Glen Kent wrote: I understand that this is just some bit of what we can do with SDN. The amount of what all can be done is limitless. So, a question to all out there - Is my understanding of what can be achieved with SDN, is correct? Frankly I don't think there is

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Brian Reichert
On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: When I did my initial development with OpenSSL, I observed: - If I did not have the rooted domain name in the SAN, then any SSL client stack would fail the verification if a rooted domain name was used to connect to the

Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Brian Reichert reich...@numachi.com On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: [I believe this is Brian, then Mark: ] When I did my initial development with OpenSSL, I observed: - If I did not have the rooted domain name in the SAN,

Re: SDN - Killer Apps

2013-02-25 Thread Jeff Hartley
On Mon, Feb 25, 2013 at 3:23 AM, Glen Kent glen.k...@gmail.com wrote: Yahoo, Google, etc applications are running on one server and each application could be theoretically associated with a unique VXLAN tag. This way service providers will be able to provide QoS per application (by effectively

What are you doing about Six Strikes?

2013-02-25 Thread Jay Ashworth
This just in from Lauren Weinstein. This is, of course, today. Have people actually deployed changes to support this? Cheers, -- jra - Forwarded Message - From: PRIVACY Forum mailing list priv...@vortex.com ISP six-strikes starts tomorrow, and the expected results are ...

Re: can you share ipv6 addressallo cation

2013-02-25 Thread bmanning
don't think of this in terms of waste (v6 has an unthinkable number of numbers) and think of security. by announceing more space than you are actually using, you create dark-space that attackers can hide in-plain-sight. so, for example, in your P2P links, you can use tools that lazy

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Brian Reichert
On Mon, Feb 25, 2013 at 09:49:19AM -0500, Jay Ashworth wrote: - Original Message - From: Brian Reichert reich...@numachi.com On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: [I believe this is Brian, then Mark: ] When I did my initial development with OpenSSL, I

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Brian Reichert reich...@numachi.com My understanding is this: Unless you're doing client certificate verification (wherein the server is making decisions about which clients attempting a connection), all validation/verification is done by the client.

Re: 10 Mbit/s problem in your network

2013-02-25 Thread Owen DeLong
Correct. However, while A is 5Ghz (only), it's not significantly better than G. The true performance gains come from 5Ghz and N together. N on 2.4Ghz has limited benefit over G. N on 5Ghz is significantly better. Owen On Feb 24, 2013, at 8:56 PM, Frank Bulk frnk...@iname.com wrote: The IEEE

Re: What are you doing about Six Strikes?

2013-02-25 Thread Seth David Schoen
Jay Ashworth writes: This just in from Lauren Weinstein. This is, of course, today. Have people actually deployed changes to support this? Six Strikes is not a law; it's a private agreement. http://www.scribd.com/doc/91987640/CCI-MOU -- Seth David Schoen sch...@loyalty.org | No

Re: 10 Mbit/s problem in your network

2013-02-25 Thread Warren Bailey
I should probably know this, but doesn't N just spread better and have the ability to send receive on multiple polarizations? As an RF engineer I should probably know this, but I can't think of many people in my industry who really care about 802.11_. I really don't even use wireless in my

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Brian Reichert
On Mon, Feb 25, 2013 at 11:26:47AM -0500, Jay Ashworth wrote: The upshot (assuming I'm not totally off base here), is that other than getaddrinfo(), nothing is acting on the semantics of the supplied hostname (or IP address). They are 'just strings', and are (essentially) compared as such.

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Owen DeLong
On Feb 25, 2013, at 6:30 AM, Brian Reichert reich...@numachi.com wrote: On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: When I did my initial development with OpenSSL, I observed: - If I did not have the rooted domain name in the SAN, then any SSL client stack would fail the

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread David Miller
On 02/25/2013 11:47 AM, Owen DeLong wrote: On Feb 25, 2013, at 6:30 AM, Brian Reichert reich...@numachi.com wrote: On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: When I did my initial development with OpenSSL, I observed: - If I did not have the rooted domain name in the SAN,

Re: 10 Mbit/s problem in your network

2013-02-25 Thread Owen DeLong
N has a number of advantages… Better spread, the ability to take advantage of polarization, better use of MIMO, and IIRC, a better encoding scheme that allows denser constellation points (more bits per signaling element). N on 5Ghz takes advantage of the increased bandwidth of the 5Ghz channel

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Brian Reichert reich...@numachi.com Right. And I'm asserting that that's wrong: the client side libraries Really Ought To normalize that name before trying to compare it against the retrieved certificate to see if it matches, which would relieve you of

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Jay Ashworth
- Original Message - From: Owen DeLong o...@delong.com However, that's for the resolver library. In terms of matching the CN in a certificate, this should always be FQDN and the trailing dot should not be present. If OpenSSL (the command line tool) is passing foo.blah.com. to the SSL

Circuit Bandwidth Simulator applet etc

2013-02-25 Thread JoeSox
I would like a applet or program I can feed it nodes and a network topology, then just set hypothetical transmit speeds at child nodes then have the applet or program display the Parent node bandwidth. Is there any Visio applets or macros out there I wonder? Sorry another tool question but I

Re: Circuit Bandwidth Simulator applet etc

2013-02-25 Thread Michael Loftis
Try http://www.nsnam.org/ (AKA NS2/NS3) whichis GPL/OSS or Tetcos NetSim - http://tetcos.com/ I've never used NetSim FYI, just heard of it. And NS only rarely. On Mon, Feb 25, 2013 at 9:22 AM, JoeSox joe...@gmail.com wrote: I would like a applet or program I can feed it nodes and a network

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Owen DeLong
On Feb 25, 2013, at 9:18 AM, Jay Ashworth j...@baylink.com wrote: - Original Message - From: Owen DeLong o...@delong.com However, that's for the resolver library. In terms of matching the CN in a certificate, this should always be FQDN and the trailing dot should not be present.

Re: 10 Mbit/s problem in your network

2013-02-25 Thread Warren Bailey
If you want to see something pretty amazing, check this out.. http://www.popsci.com/science/article/2012-06/twisting-signals-vortex-researchers-beam-25-terabits-data-second These guys got close to 100 bits/hz using Orbital Angular Momentum in addition to the normal Spin Angular Momentum. There

Re: Circuit Bandwidth Simulator applet etc

2013-02-25 Thread Warren Bailey
We use IXChariot for traffic simulation. It's pretty nice, albeit expensive. On 2/25/13 9:22 AM, JoeSox joe...@gmail.com wrote: I would like a applet or program I can feed it nodes and a network topology, then just set hypothetical transmit speeds at child nodes then have the applet or program

Re: 10 Mbit/s problem in your network

2013-02-25 Thread joel jaeggli
On 2/25/13 8:42 AM, Warren Bailey wrote: I should probably know this, but doesn't N just spread better and have the ability to send receive on multiple polarizations? That would be a rather extreme over-simplifcation of spatial-division-multiplexing and space-time-coding. As an RF engineer

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Brian Reichert
On Mon, Feb 25, 2013 at 12:18:00PM -0500, Jay Ashworth wrote: If I understood Brian correctly, his problem is that people/programs are trying to retrieve things from, eg: https://my.host.name./this/is/a/path and the SSL library fails the certificate match if the cert doesn't contain the

Re: What are you doing about Six Strikes?

2013-02-25 Thread Joly MacFie
Who said it's a law? On Mon, Feb 25, 2013 at 11:37 AM, Seth David Schoen sch...@loyalty.org wrote: Jay Ashworth writes: This just in from Lauren Weinstein. This is, of course, today. Have people actually deployed changes to support this? Six Strikes is not a law; it's a private

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Doug Barton
On 02/25/2013 09:49 AM, Brian Reichert wrote: On Mon, Feb 25, 2013 at 12:18:00PM -0500, Jay Ashworth wrote: If I understood Brian correctly, his problem is that people/programs are trying to retrieve things from, eg: https://my.host.name./this/is/a/path and the SSL library fails the

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Jay Ashworth
- Original Message - From: Brian Reichert reich...@numachi.com On Mon, Feb 25, 2013 at 12:18:00PM -0500, Jay Ashworth wrote: If I understood Brian correctly, his problem is that people/programs are trying to retrieve things from, eg: https://my.host.name./this/is/a/path and

Re: What are you doing about Six Strikes?

2013-02-25 Thread Warren Bailey
The federal agents who get the list of offenders every week?? :P On 2/25/13 10:05 AM, Joly MacFie j...@punkcast.com wrote: Who said it's a law? On Mon, Feb 25, 2013 at 11:37 AM, Seth David Schoen sch...@loyalty.org wrote: Jay Ashworth writes: This just in from Lauren Weinstein. This is,

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Jay Ashworth j...@baylink.com Who should implement the normalization logic? Not the SSL library, certainly. That sounds like the bailiwick of the resolver library... No, in fact, I think this is layer... 3 or 4, not 2; this *should* be in the SSL

Re: Circuit Bandwidth Simulator applet etc

2013-02-25 Thread Tarko Tikan
hey, I would like a applet or program I can feed it nodes and a network topology, then just set hypothetical transmit speeds at child nodes then have the applet or program display the Parent node bandwidth. Is there any Visio applets or macros out there I wonder?

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Brian Reichert
On Mon, Feb 25, 2013 at 10:10:55AM -0800, Doug Barton wrote: Brian, This may be a silly question, but what's your goal here? Your OP was about terminology, but the thread has gone down several different off-topic ratholes. That was indeed by original goal, and there have been a couple of

Re: What are you doing about Six Strikes?

2013-02-25 Thread Valdis . Kletnieks
On Mon, 25 Feb 2013 13:05:48 -0500, Joly MacFie said: Who said it's a law? If it was in fact a law, it would be a lot easier for the victims to fight back in a court of law. pgpYuNrgemCzm.pgp Description: PGP signature

Re: Circuit Bandwidth Simulator applet etc

2013-02-25 Thread JoeSox
TOTEM looks like it might fit my needs but the download link appears offline. The others I am looking at also. -- Thanks, Joe On Mon, Feb 25, 2013 at 11:06 AM, Tarko Tikan ta...@lanparty.ee wrote: hey, I would like a applet or program I can feed it nodes and a network topology, then just

Re: What are you doing about Six Strikes?

2013-02-25 Thread Livingood, Jason
On 2/25/13 10:23 AM, Jay Ashworth j...@baylink.com wrote: Expected results: 1) Legit users are harassed due to IP address mix-ups, etc. Remember you must pay to file an appeal. Other than a few IP mix ups years ago, is this still really an issue? It seems ISPs have pretty reliable IP lease

Re: What are you doing about Six Strikes?

2013-02-25 Thread Gary E. Miller
Yo Jason! On Mon, 25 Feb 2013 20:07:43 + Livingood, Jason jason_living...@cable.comcast.com wrote: 1) Legit users are harassed due to IP address mix-ups, etc. Remember you must pay to file an appeal. Other than a few IP mix ups years ago, is this still really an issue? It has been for

Visio-fu

2013-02-25 Thread Warren Bailey
All, I have been searching our beloved internet endlessly for months on information regarding Visio technique. Does anyone have a good resource(s) for advanced visio drawings, or more to the point a good place for high quality connectors? There is some great quality work out there, this is

Re: What are you doing about Six Strikes?

2013-02-25 Thread Valdis . Kletnieks
On Mon, 25 Feb 2013 20:07:43 +, Livingood, Jason said: Other than a few IP mix ups years ago, is this still really an issue? It seems ISPs have pretty reliable IP lease histories for many years to support LEA requests and other needs... The fact that the ISP has a good record of what

Re: What are you doing about Six Strikes?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Valdis Kletnieks valdis.kletni...@vt.edu On Mon, 25 Feb 2013 20:07:43 +, Livingood, Jason said: Other than a few IP mix ups years ago, is this still really an issue? It seems ISPs have pretty reliable IP lease histories for many years to support

Re: Visio-fu

2013-02-25 Thread George Herbert
On Mon, Feb 25, 2013 at 12:20 PM, Warren Bailey wbai...@satelliteintelligencegroup.com wrote: All, I have been searching our beloved internet endlessly for months on information regarding Visio technique. Does anyone have a good resource(s) for advanced visio drawings, or more to the point

Re: SDN - Killer Apps

2013-02-25 Thread Peter Phaal
On Mon, Feb 25, 2013 at 2:10 AM, Saku Ytti s...@ytti.fi wrote: On (2013-02-25 13:53 +0530), Glen Kent wrote: I understand that this is just some bit of what we can do with SDN. The amount of what all can be done is limitless. So, a question to all out there - Is my understanding of what can

Re: SDN - Killer Apps

2013-02-25 Thread Valdis . Kletnieks
On Mon, 25 Feb 2013 13:53:13 +0530, Glen Kent said: Yahoo, Google, etc applications are running on one server and each application could be theoretically associated with a unique VXLAN tag. This way service providers will be able to provide QoS per application QoS is, when you get down to it,

Re: Visio-fu

2013-02-25 Thread George Herbert
On Mon, Feb 25, 2013 at 12:58 PM, George Herbert george.herb...@gmail.com wrote: [...] My company has a Visio whiz, who I'm going to ping for his opinion on that, but I am guessing it's a no. Our Visio guy's opinion concurred with mine; it's custom drawing, not off-the-shelf capability, and

Re: SDN - Killer Apps

2013-02-25 Thread Per Carlson
Hi Glen. Here's some thoughts how Networking can learn from SDN: http://forums.juniper.net/t5/The-New-Network/Decoding-SDN/ba-p/174651 /Pelle

Re: Visio-fu

2013-02-25 Thread Josh Baird
Check SmartDraw. On Mon, Feb 25, 2013 at 5:04 PM, George Herbert george.herb...@gmail.comwrote: On Mon, Feb 25, 2013 at 12:58 PM, George Herbert george.herb...@gmail.com wrote: [...] My company has a Visio whiz, who I'm going to ping for his opinion on that, but I am guessing it's a no.

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Mark Andrews
In message 15455394.7034.1361803759023.javamail.r...@benjamin.baylink.com, Ja y Ashworth writes: - Original Message - From: Brian Reichert reich...@numachi.com On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: [I believe this is Brian, then Mark: ] When I did my

Re: Visio-fu

2013-02-25 Thread Warren Bailey
I've seen smart draw. I wish these drawing software companies would port their application over to mac.. Every big design guy I know is a mac fanboy, Adobe has it figured out but smart draw and visio have no excuse. Omni is about the only thing out there, but it is hell to use in my opinion. :)

Re: Visio-fu

2013-02-25 Thread Michael Hallgren
Le 25/02/2013 23:06, Josh Baird a écrit : Check SmartDraw. pstricks, metapost, TikZ (pgf),... mh On Mon, Feb 25, 2013 at 5:04 PM, George Herbert george.herb...@gmail.comwrote: On Mon, Feb 25, 2013 at 12:58 PM, George Herbert george.herb...@gmail.com wrote: [...] My company has a Visio

Re: Visio-fu

2013-02-25 Thread Michael Hallgren
Le 25/02/2013 23:15, Warren Bailey a écrit : I've seen smart draw. I wish these drawing software companies would port their application over to mac.. Every big design guy I know is a mac fanboy, Adobe has it figured out but smart draw and visio have no excuse. Omni is about the only thing

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Mark Andrews ma...@isc.org From what little research I've done (only OpenSSL), the SSL client is relying on getaddrinfo(3) to do name resolution. In turn, I haven't found an implementation of getaddrinfo(3) that rejects rooted domain names as

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Brian Reichert
On Tue, Feb 26, 2013 at 09:07:24AM +1100, Mark Andrews wrote: In message 15455394.7034.1361803759023.javamail.r...@benjamin.baylink.com, Ja y Ashworth writes: More formally: is a host/domain name with a trailing dot *actually a legal host name? No. See RFC 952 In the case of URIs,

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Brian Reichert reich...@numachi.com More formally: is a host/domain name with a trailing dot *actually a legal host name? No. See RFC 952 In the case of URIs, RFC 2396 (circa 1998) seems to allow for it, if I read the ABNF for 'hostname' right in

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Mark Andrews
In message 32423329.7280.1361833741738.javamail.r...@benjamin.baylink.com, Ja y Ashworth writes: - Original Message - From: Mark Andrews ma...@isc.org From what little research I've done (only OpenSSL), the SSL client is relying on getaddrinfo(3) to do name resolution. In

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Mark Andrews
In message 32423329.7280.1361833741738.javamail.r...@benjamin.baylink.com, Ja y Ashworth writes: - Original Message - From: Mark Andrews ma...@isc.org From what little research I've done (only OpenSSL), the SSL client is relying on getaddrinfo(3) to do name resolution. In

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Mark Andrews ma...@isc.org No. See RFC 952 I think 952 is functionally obsolete, requireing a 24 char name length; I would have expected citations, perhaps, to 1535. Care to expand? Ok. RFC 952 as modified by RFC 1123. This covers all legal

Demarc in FTTH ?

2013-02-25 Thread Jean-Francois Mezei
What are you thoughts about whether FTTH GPON systems have a demarc or not ? Would it be the ONT ? (since beyond the ONT, the end user has no ability to test the line). or should FTTH be viewed more like DOCSIS systems where there is no official demarc ? In Canada, the telcos charge a DMC

Re: Visio-fu

2013-02-25 Thread Justin M. Streiner
On Mon, 25 Feb 2013, George Herbert wrote: Our Visio guy's opinion concurred with mine; it's custom drawing, not off-the-shelf capability, and would most likely have been in a graphics program (though he thinks it might have been possible with Visio, it would have been much easier in for

Re: Demarc in FTTH ?

2013-02-25 Thread Justin M. Streiner
On Mon, 25 Feb 2013, Jean-Francois Mezei wrote: Would it be the ONT ? (since beyond the ONT, the end user has no ability to test the line). I would tend to think the ONT is treated as the demarc point. Most carriers I've seen treat them as the optical equivalent of copper NIDs or

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Mark Andrews
In message 17812038.7306.1361835383974.javamail.r...@benjamin.baylink.com, Ja y Ashworth writes: - Original Message - From: Mark Andrews ma...@isc.org No. See RFC 952 I think 952 is functionally obsolete, requireing a 24 char name length; I would have expected

Re: Demarc in FTTH ?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Jean-Francois Mezei jfmezei_na...@vaxination.ca What are you thoughts about whether FTTH GPON systems have a demarc or not ? Would it be the ONT ? (since beyond the ONT, the end user has no ability to test the line). or should FTTH be viewed more like

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jimmy Hess
On 2/25/13, Jay Ashworth j...@baylink.com wrote: From: Brian Reichert reich...@numachi.com [snip] name it's looking up before doing the SSL interaction with the server side, a process with which I'm not familiar enough to know if the client actually send the host/domain name to the server end.

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - From: Jimmy Hess mysi...@gmail.com By the time the hostname is sent over HTTP, the SSL connection is already established, and all the SSL negotiation already happened.. Correct, and yes, I did already know that (though, this morning, before coffee, it would have

RE: 10 Mbit/s problem in your network

2013-02-25 Thread Frank Bulk (iname.com)
There's only 83.5 MHz to work with at 2.4 GHz, while in most countries you have at least two hundred MHz in the 5 GHz range (http://en.wikipedia.org/wiki/U-NII). So if you choose to have 40 MHz channels for increased throughput, you can have many more (non-overlapping ones) at 5 GHz than 2.4 GHz,