Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
Slashdot Deals: Prep for the CompTIA A+ certification exam. Save 95% on the CompTIA IT Certification Bundle ×

Comment Re:Betteridge (Score 2) 248

This is not technically the explanation for the 2x ratio difference, at least on the Cisco platform under the microscope here. It is slightly more nuanced than that.

The TCAM entries are divided up into two bucket sizes: 72 bit buckets and 144 bit buckets.
An IPv4 address is 32 bits
An IPv6 address is 128 bits

An IPv4 FIB entry is 32-bits plus any additional bits it stores like interface and next-hop info
An IPv6 FIB entry is 128-bits plus any additional bits it stores like interface and next-hop info

128 bits do not fit into a 72-bit bucket so it gets stored in the larger 144-bit bucket.
There are multicast entries, MPLS entries, etc that all fit into one or the other of the two TCAM buckets.

The bucket sizes are 2x difference, not the amount of stored info from the address family sizes.

Comment Re:Level the playing field (Score 1) 715

I did not care for this article because it seems pretty New Jersey centric and therefore not representative of the whole of charter schools. Minnesota does not allow its charter schools to discriminate on the admissions. In general if you live in Minnesota and are of the appropriate age for your grade level then you pretty much are accepted in the school. If there are more applicants than available spots then it goes to a lottery system. There are few minor exceptions here and there (eg sibling preference) but mostly it's open and fair.

Maybe Minnesota is unique in this regard I don't know but I live in Minnesota and am interested in charter schools as I have school age kids and I just witnessed a new approval for a charter school today (quite by chance on the same day of this /. article).

Comment Re:Just plain wrong to use Linux in a weapon. (Score 1) 272

BSD has no problems with this kind of use.

To quote the founder of OpenBSD:
But software which OpenBSD uses and redistributes must be free to all (be they people or companies), for any purpose they wish to use it, including modification, use, peeing on, or even integration into baby mulching machines or atomic bombs to be dropped on Australia.

Comment Re:Provider slowness. (Score 1) 158

Even for a couple of servers that do not have an external firewall filtering packets for my IPv6, there is basically zero packets besides those going to applications hosted on my servers, and they have published DNS records for web and DNS. Some basic PCs I have online see zero packets from random internet hosts on IPv6.

The IPv6 address space is literally too large to crawl within any useful amount of time. If you figure an average LAN will have 18,446,744,073,709,551,616 addresses (a /64 block). Let's say you scanned 1000 IP addresses per second (very optimistic for a single PC) it would take you 584,942,417 years to complete scanning just a single LAN. Then are so many /64 LAN blocks that it is very likely you're scanning an network block that does not have any hosts to begin with.

There will have to be other means to gather active/in-use IP address such as looking at server logs that clients connect to, email headers, DNS records, soliciting traffic from the client machines via some application/trojan/virus, network traffic sniffing, etc. All of these means already exist for IPv4 so there is nothing new there.

Comment Re:I blame the ISPs (Score 1) 179

The public facing resources of the government agencies need to be IPv6 enabled, not the internal and external workings of the networks within the various organizations. This simply means in most cases, inbound email servers and web servers need to be hosted on machines somewhere in the world that have full IPv6 access, then the respective DNS records need to be in place for said services, which translates to add "AAAA" records. I bet Akamai is loving this mandate because they are a popular choice for government agencies to turn to for IPv6 enabled hosting but Akamai is not the only company that will do IPv6 hosting.

Comment Re:Methinks people don't appreciate the scales her (Score 1) 299

Don't be such a dick. Not everything in the various space programs is strictly for the various space programs.

"This important effort helps advance the knowledge and technologies required to explore space, all while generating the necessary tools that enhance our quality of life on earth."

You're falling into one of the pitfalls of religion/faith: it is not possible for us to comprehend/achieve such lofty goals, therefore don't attempt to. New technologies and science breakthroughs will not only enlighten our lives on Earth but also have potential to greatly expand our travel potential if ideas like quantum entanglement can prove fruitful.

But you're right... its snake oil... fuck all scientists and the human spirit of curiosity and breaking barriers... except Tang, that shit is good.

Comment Re:Don't bet on it. (Score 1) 1226

The beauty of our society, to disagree completely with reality and yet still benefit from the works of others who do accept the reality and produce advancements in technology and science that can benefit everyone. We allow room for even those that choose to close their eyes and cover their ears.

Comment Re:Cricket Liu on DNSSEC (Score 1) 34

PoEoV has been held up in the IETF draft process. The stupid skanks at the ITU-T won't back me until I get a major vendor like Cisco or Juniper involved. But Cisco won't talk to me unless I am willing to sell them my idea so they can name it CiscoVoice-E and Juniper wants to put it in their MX series but have an 18 month screening process before they will even beta it but wont formally adopt it without industry standardization (chicken-or-egg problem, hello!!) Perhaps The Onion will give me some good publicity and get some people interested, they are the ones who introduced me to my current religion after all: Fictionology. Nah nah nah nah nah nah nah nah, BATMAN...

Comment Re:Cricket Liu on DNSSEC (Score 1) 34

Yes in Minneapolis. The food was good but as a vegetarian the "meat" dish was something I passed on and then I was left hungry at the end. Not complaining though, free food and the presentation very efficiently articulated the overall situation. I wish I had asked a couple more questions that came to mind after I had already left: statusopinion of other non-DNSSEC enhancement technologies like DNSCURVE and secondly Cricket's opinion on DNSSEC proxy tools in general with one example being phreebird by Dan Kaminsky.

Comment Re:240/4 subnets (Score 1) 312

Isn't it a bit idiotic to hard code refusal to route addresses reserved for "future use"?

The firmware developers should have expected the "future" would come eventually right?

How should developers have designed the use of that address space? Unicast? Multicast? Anycast? Some-as-yet-unknown-cast? Kind of hard to program that in and for what benefit? Zero return really and one might argue for a net loss as some vendors may have designed its use one way and others may have done something altogether different and incompatible with the first. Then what? Not it's totally screwed up. Not to mention if it's not used but enabled for years and years I bet there would be bugs galore since it would be basically never used by any sizable amount of people. This would only marginally extend the exhaustion time in any case. Would have been better to go with IPv6 as soon as it became official.

Help me, I'm a prisoner in a Fortune cookie file!

Working...