Cisco CSS 11503 SSL and reverse DNS

2010-05-18 Thread Bobby Mac
Hi All: Will having correct reverse DNS mapping improve SSL performance on a 11503 during peak load? My guess is no but I don't want to pound my prod device to find out. -Bobby

Re: MX Record Theories

2009-05-28 Thread Bobby Mac
Not entirely on subject but I thought that allowing DNS queries to occur via TCP is mission critical for simple mail routing. We ran across this back in the day at @Home Network. Firewall rules were changed to not allow port 53 TCP. This severely affected sending mail to large distribution

Visio diag automations

2009-07-17 Thread Bobby Mac
Hi All: I have to create Visio diagrams for sales engagements for a webhosting provider. I use the same template based on our standard architecture but vary the number/model/detail of the servers. I am sick of the cut-n-paste approach and am wondering who has automated some of these processes.

Re: Conclusion: Smart hands in NYC area and new: Tokyo

2009-08-06 Thread Bobby Mac
Semi-on topic: In 2005 I was working with NTTcom on creating a new webhosting offering. NTT was going to move 16 FULL racks of net and server gear from the lab, to the next floor which was the actual datacenter. This required (due to weight and space issues) that every server/net device had to be

Re: Reliable Cloud host ?

2012-02-29 Thread Bobby Mac
HP has built an Openstack based cloud. I got a beta account and things are surprisingly stable. hpcloud dot com On Wed, Feb 29, 2012 at 1:12 PM, Tei oscar.vi...@gmail.com wrote: related to the topic: http://slashdot.org/story/12/02/29/153226/microsofts-azure-cloud-suffers-major-downtime --

Re: Dynamic IP log retention = 0?

2009-03-13 Thread Bobby Mac
Just wondering but the knowledge I have of DHCP is that an IP address is assigned to the same computer (or host) and will continue to do so until the pool of IP's is exhausted. Once that occurs, a new request is parsed by the DHCP server and the oldest non-renewed lease address is checked to see

SSH brute force China and Linux: best practices

2010-01-29 Thread Bobby Mac
Hola Nanog: So after many years of a hiatus from Linux, I recently dropped XP in favour of Fedora. Now that my happy windows blinders are off, I see alarming things. Ugly ssh brute force, DNS server IP spoofing with scans and typical script kiddie tactics. What are the new set of best

SNMP, Static NAT and management systems including servers midwear and applications

2010-03-02 Thread Bobby Mac
Hi All: I have been asked to extend the capabilities of my current monitoring and management system to another division of the company. All IP space is rfc1918 with no public routed space in the mix. Needless to say, and rightfully so, the network folks won't allow me to directly attach my