thomseddon
Traffic management and road closures can be hard work, we've had to wait over a year before for a road closure as it would affect multiple bus routes. (And as an aside, lockdown was extremely productive for network build like this!)
In fact, anyone approved can use BTs own ducts and poles via their PIA product[1], which has created a resurgent and incredibly active market of "alternative" network providers ("alt nets"). London for example is now well served for broadband by Community Fibre, g.network, Hyperoptic and others alongside the incumbents.
[1] https://www.openreach.co.uk/cpportal/products/passive-produc...
UK Gov. - Her Majesty the Queen's Lying-in-State – Queue Tracker
Impact Assessment: risk of disruption to the UK fuel supply [2017] [pdf]
Specifically, their editor is a separate component: https://github.com/outline/rich-markdown-editor
I assumed this was a clever marketing product from the outline team, but it seems to be entirely separate.
Show HN: Configaro – A tool for creating config templates for network devices
I work for a internet/managed service provider and we generate a lot of configs. Over time we've built a variety of techniques for doing this, the most common, similar to many others, is for us to maintain "base configs" and snippets for various scenarios (statically routed, dynamically routed with failover etc etc.) and then we have internal docs with step-by-step instructions on how to create...
European capital cobbled with Jewish gravestones
Network address is only really used for directly attached networks, non directly attached networks will route to any address in the block correctly.
Same for broadcast address, they're also relative to whatever block you're talking about at the time, so whilst 3.255.255.255 is the broadcast for 3.0.0.0/8 subnet it's just another "usable" address in the 3.0.0.0/5 subnet and when you send a packet then you, and probably your router, don't know what subnets in use on the other side :) (unless it's directly attached)
If we provide a dedicated IP for a connection where we provide the LAN we just put a single /32 on the loopback and NAT onto this which is obviously much more economic with addresses.
For the rest we provide a static IP address, so we'll allocate a /30 (block of 4), and they get a single usable address which they will assign to their own manged router/firewall.
For the majority of our customers "networking" is either handled as overflow for their in/out IT resource or often by someone remotely savvy with tech.
For most of these people networking ranges from an infrequent concern to a vague mystery that can be sorted with a bit of googling.
For most, deploying and testing IPv6 has absolutely no upside and quite a bit of potential downside, that's because "everything works" on IPv4 and configuring IPv6 is just another potential source of error.
In addition, most people who opt for this setup do so in order to expose some internal service to the internet (port forward), again there is usually zero incentive to also deploy IPv6 as they can't be sure their client device will be using v6 when they come to connect, but they know it will support v4, everything does.
And so herin lies the issue, it's chicken and egg, they know they need v4, not every server they access or client who accesses their forwards supports v6, so they _have_ to implement v4. As such they see no reason to "faff" about with IPv6, and I don't really blame them.
We're considering charging more for dedicated v4 and possibly offering a free translation service (another point of failure :() but honestly, most would just pay the extra and then just resent us a little more. Our competitors continue to acquire v4 space as we do, this is what our customers want.
Until there is v6 only content (but who is incentivised to do this?) then I can't see any incentive for these users.
In essence, yes economic incentive is the basis for much of today's human corporation, but with growing AI/robotics, the same economic incentive will make much current human input unnecessary.
Then, for example, would counties see so many humans as a big cost? How do they solve that if they no longer need them to work?
Scary stuff.
We were already using traefik as a proxy for our docker/swarm clusters and this is a single container drop in to add authentication to every traefik request.
It's still missing a few key features but it can get you started, we're testing the use of a single auth domain (so you don't have to add every internal service domain as a refirect_uri in Google - looks similar to how sso works) internally and we expect to release this shortly once finished.
Additionally, if you want an even lighter weight option, we also use, with great success, cloudflare's lua script on a few services we don't run with docker/traefik: https://github.com/cloudflare/nginx-google-oauth
Apple is first public company worth $1 trillion
Amazon Aurora Serverless - On-demand, auto-scaling database
How a failed deployment made a $400m company bankrupt in 45-minutes
Cloudflare Workers: Run JavaScript Service Workers at the Edge
Microsoft, Facebook, Complete Undersea Cable from US to Spain
Google Drive Is Down
They know how to do tech, ever heard of the magic band? https://www.wired.com/2015/03/disney-magicband/
Bribing an ISP with Macaroni Cheese
Wikileaks: Chelsea Manning to be freed from prison decades early
Introducing Zapier for Teams
Only today I was joking about how absurd it is that I was struggling with such a fundamental feature.
On the distance, there are other specs that support 100Gb up to 20km on there!
Although you'd pay at least 10-20x that if it had a big vendor name on the top.
Good luck, I look forward to keeping up with how things are going your side of the Atlantic.