maxmouchet

I've reused the LGL (Large Graph Layout) algorithm used by The Opte Project [1,2] with more recent and comprehensive (multipath) traceroutes in 2022 [3].

I've also played a bit with an interactive visualization of the graph by using map tiles [4].

[1] https://github.com/TheOpteProject/LGL

[2] https://github.com/maxmouchet/minilgl (cleaned-up version of the code)

[3] https://www.maxmouchet.com/internet-viz/

[4] https://github.com/maxmouchet/internet-visualization

You take a smaller H3 :-) The maximum area of a resolution 15 H3 is 1 square meter, so unlikely to split a house in two.

Ah right haha. Thanks for the heads up, I should have checked ^^

Oh this is nice, and a cool use of HTTP range requests!

Bogus announcements are probably filtered by your upstream(s) (see [1] for a common list of filters).

IP-to-ASN mappings are typically built from route collectors [2,3] that peer with various networks and receive their announcements. AFAIK route collectors don't filter anything and it's easy to find bogus announcements (e.g. private ASNs) in the data.

I can't find 4294967296 from a quick glance at the latest RouteViews data but I can find other private ASNs. For example AS7594 - AS2764 - AS4294901866 for 210.10.189.0/24 seen by the route-views.perth collector.

I don't know what kind of filtering iptoasn.com is doing but at work (ipinfo.io) we do filter bogus origins, as well as a bunch of other things like RPKI/IRR-invalid routes and hyper-specific prefixes (> /24 or /48) [4].

[1] https://bgpfilterguide.nlnog.net

[2] https://www.routeviews.org/routeviews/

[3] https://www.ripe.net/analyse/internet-measurements/routing-i...

[4] https://hyperspecifics.io

Another solution is to use an MMDB (“MaxMind DB”) file [1] which is essentially a binary tree + deduplicated values (same as idea 3.1).

There are several free ASN MMDBs [2,3] but you can also build your own MMDB files from any Prefix->Value mapping with the mmdbwriter library [4] or a CLI tool built on top of it like mmdbctl [5].

Assuming the ASN MMDB is fully loaded in memory, it would use around 60MB.

[1] https://maxmind.github.io/MaxMind-DB/

[2] https://dev.maxmind.com/geoip/docs/databases/asn/

[3] https://ipinfo.io/products/free-ip-data-downloads

[4] https://github.com/maxmind/mmdbwriter

[5] https://github.com/ipinfo/mmdbctl

(I work for IPinfo, but there are lots of other companies offering MMDB files).

I can't speak for AWS specifically, but in my PhD thesis [1] I found a bunch of such examples by using RIPE Atlas probes. Essentially looking for pairs of probes where the RTT between probe A and probe C is larger than probe A-B + B-C.

Now there are some issues with this methodology (all common issues with ICMP/RTT measurements + traffic was not really routed through the "relay" probe), but such pairs do exist.

[1] https://theses.hal.science/tel-03666771/document (see page 84 for an example; if you can read French :-))

https://news.ycombinator.com/item?id=8018818 and https://github.com/philipl/pifs :-)

Nice achievement but always a bit disappointing that those records are based on throwing more money at the problem, rather than new theoretical grounds, or software improvements (IIRC y-cruncher is not open source).

Additionally, I would not expect such “baseline” changes in the minimum RTT to be due to variation in CPU processing time.

These changes are more typical of a physical path change, as suggested by the author.

CPU/soft processing latency would look more like additive noise.

I give some examples of RTT patterns in this talk: https://ripe77.ripe.net/archives/video/2250/

Hosts with randomized addresses are likely to have auto-generated PTR records, or none at all, so for the purpose of rDNS resolution those are not a big issue.

And that’s a detail, but SLAAC as in RFC4842 is deterministic. The randomization is introduced by the privacy extensions in RFC4941.

> The kind of person who makes pornography has no business being in charge of a state educational institution.

Why so? What’s the link between the twos?

(Genuinely asking)

It works by querying a specific DNS resolver (dns.toys):

  dig +short TXT mumbai.weather @dns.google
  # NXDOMAIN
 
  dig +short TXT mumbai.weather @dns.toys  
  "Mumbai (IN)" "30.90C (87.62F)" "45.90% hu." "clearsky_day" "15:30, Sun"
  "Mumbai (IN)" "28.10C (82.58F)" "56.00% hu." "fair_day" "17:30, Sun"
  ...

The same way glasses in restaurants are washed and reused :-)

Another solution is to bring your own cup.

Rosetta is used to run the amd64 binaries, but not the (arm) kernel of the Docker VM.

Anectodally, Paris metro used to have two classes: https://www.messynessychic.com/2014/12/04/that-time-the-pari...

Same for the National Library of France:

https://gallica.bnf.fr/accueil/en/content/accueil-en

https://gallica-bnf-fr.translate.goog/blog/11122015/des-tira...

It's a bit disappointing that OrbStack is not open source, but it works really well.

In my experience (co)lima was already an improvement over Docker Desktop in terms of reliability and background resource usage, but OrbStack is even more lightweight. I also do a bit of low-level networking development and Docker Desktop was rewriting some fields of the IP packets (besides NAT translation) which was annoying. It works seamlessly here.

It still has the same VM memory usage issue as other tools (Linux page cache taking more and more memory over time and not releasing it to the host), but they claim it will work correctly once a bug in Virtualization.framework is fixed: https://twitter.com/OrbStack/status/1645782250116505600

That's interesting! Would it work to have a process on macOS/Windows monitoring memory usage and communicating with another process inside the VM to drop the page cache when free host memory is low?

K8s is not exactly lightweight :-) Try colima [1] instead. In my experience it uses much less memory and idle CPU than "Docker for Mac".

[1] https://github.com/abiosoft/colima

Wouldn't it be more likely that medianalysisd (which is present in macOS since many years) does something like object recognition [1] and connects to Apple servers for updating the model or telemetry or something similar?

[1] https://eclecticlight.co/2022/03/23/how-visual-look-up-works...

> The 9p code on Linux remains important for VirtFS and other purposes around sharing files with guest virtual machines.

They do but it's experimental and only for Linux guests: https://github.com/utmapp/UTM/releases/tag/v2.2.4

One downside of using tailscale cert, or LE for "private" records is that it writes the domain name in a public Certificate Transparency Log [1]. So make sure that the name doesn't contain any sensitive information.

An alternative is to issue wildcard certificates with LE, so that the subdomains names are kept private.

[1] https://crt.sh/

I am not familiar with pritunl, but it should not be necessary to keep the private key in a file. It is possible to configure wireguard directly with code [1] without calling the wg binary manually as pritunl seems to be doing [2].

[1] https://github.com/WireGuard/wgctrl-go [2] https://github.com/pritunl/pritunl/blob/f82528ff2b7250965faf...