Comments for jg's Ramblings https://gettys.wordpress.com Jim Gettys' ramblings on random topics, and occasional rants. Thu, 15 Apr 2021 19:22:39 +0000 hourly 1 http://wordpress.com/ Comment on Bufferbloat in Action due to Covid-19 by Collin Anderson https://gettys.wordpress.com/2020/04/22/bufferbloat-in-action-due-to-covid-19/#comment-27607 Fri, 24 Apr 2020 20:31:17 +0000 http://gettys.wordpress.com/?p=1863#comment-27607 Thank you for the EvenRoute IQRouter recommendation! I just bought one. If it works I’m going to recommend it to everyone I know!

Thank you!

]]>
Comment on Mythology about security… by gettys https://gettys.wordpress.com/2018/04/09/mythology-about-security/#comment-18368 Tue, 10 Apr 2018 18:54:09 +0000 http://gettys.wordpress.com/?p=1840#comment-18368 In reply to Peter McNeeley.

What was our alternative? Stop our work entirely? Something even worse may have appeared (which arguably was Windows, though it has improved greatly over the last 10-20 years?). Note that commercial companies were also strongly discouraged from using any crypto for a long time: the license process for them was a PITA, enforcing very poor security (by the key length limitations).

There is also the law of unintended consequences as well. HTTP cookies, which have been a privacy nightmare, were implemented very quickly by Netscape to enable E-commerce, being much easier to use than the cumbersome methods used by OpenMarket before cookies were available. As HTTP editor, we had concerns about standardization of them, but it was a “done deal” by the time the IETF started work on the spec as it was in widespread use. The best we could do was to standardize their use with a decent spec, rather than try to design anything better.
I also guarantee we did not foresee the depth of the nightmare they became. in the face of advertisers and others. One’s crystal ball becomes very cloudy.

]]>
Comment on Mythology about security… by Peter McNeeley https://gettys.wordpress.com/2018/04/09/mythology-about-security/#comment-18366 Tue, 10 Apr 2018 16:48:13 +0000 http://gettys.wordpress.com/?p=1840#comment-18366 In reply to gettys.

“Don’t confuse the absence of something better for lack of vision by people” totally agree. I think many people are actually quite intelligent. I respect the giants of the shoulders we now stand upon.

However:
Given the current state of the internet.
(Context being extremely problematic security and privacy issues)

Do you think the choice of putting software Distribution over say security/privacy was the correct one?

If you could go back in time would you still make the same decision?

How much of this decision really rests on a political ideology forwarded by the likes of people like John Perry Barlow?

]]>
Comment on Mythology about security… by gettys https://gettys.wordpress.com/2018/04/09/mythology-about-security/#comment-18361 Tue, 10 Apr 2018 14:41:19 +0000 http://gettys.wordpress.com/?p=1840#comment-18361 In reply to Peter McNeeley.

RFC 114 (dating from 1971) predates the Internet as we know it (ARPA net days). Access control was at the IMP level then (you had to have an authorized account to use the ARPA net at that point). It was very much a “prototype”. The TCP/IP conversion occurred in 1982(?).

By the mid 1980’s, and the advent of BSD UNIX making connection to the Internet much, much easier, it was clearly growing up, and this is the era of Kerberos’ (and X’s) initial development.

So people did what they could: e.g. passwords were added to FTP. (note that RFC’s often occur much later than implementation).

Don’t confuse the absence of something better for lack of vision by people: export controls meant that you would be unable to freely distribute your software, and inhibited lots of software, not just X’s design and implementation.

]]>
Comment on Mythology about security… by Peter McNeeley https://gettys.wordpress.com/2018/04/09/mythology-about-security/#comment-18359 Tue, 10 Apr 2018 14:09:08 +0000 http://gettys.wordpress.com/?p=1840#comment-18359 What about how FTP was not password protected in original RFC but is in a later version.

https://tools.ietf.org/html/rfc114

https://tools.ietf.org/html/rfc959

]]>
Comment on Home products that fix/mitigate bufferbloat… by gettys https://gettys.wordpress.com/2017/02/02/home-products-that-fixmitigate-bufferbloat/#comment-18352 Tue, 10 Apr 2018 01:34:26 +0000 http://gettys.wordpress.com/?p=1376#comment-18352 In reply to Charles.

I would probably get a little PC x86 box, and use a Ubiquiti Mesh router for the WiFi. A bit pricier, but would work.

]]>
Comment on Home products that fix/mitigate bufferbloat… by Charles https://gettys.wordpress.com/2017/02/02/home-products-that-fixmitigate-bufferbloat/#comment-17662 Thu, 01 Mar 2018 00:48:04 +0000 http://gettys.wordpress.com/?p=1376#comment-17662 Are there any recommendations for a router suitable for fibre to the home, 1Gbs symmetric? I contacted EvenRoute, they responded that the CPU in the IQrouter was not fast enough to shape that capacity. When I read the Ubiquity EdgeRouterX documentation, I found similar limitations.
This 1Gbs home service is common in parts of East Asia and in Singapore is quite affordable, at approx US$30 per month on a 2 year contract. The delivered capacity does not quite match the advertised capacity but I do see up to 600Mbs/400Mbs on some local connections. But I still see issues that I guess are bufferbloat related. As this kind of service gets more common around the world, I imagine that there will be demand for better routers.

]]>
Comment on Home products that fix/mitigate bufferbloat… by Jim Alles https://gettys.wordpress.com/2017/02/02/home-products-that-fixmitigate-bufferbloat/#comment-14405 Wed, 03 May 2017 14:18:17 +0000 http://gettys.wordpress.com/?p=1376#comment-14405 Thanks for all of the effort towards improving awareness on BB!

There is crossover router software (commercial UTM / home-friendly) that just released v13.0 and is available for free download, no constraints (industrial-strength applications are paid subscriptions) with a very affordable home subscription available.
https://www.untangle.com/untangle-ng-firewall/untangle-at-home/

Untangle Next-Gen FireWall (NGFW) can now configure fq-codel, in the 3.16 kernel.

Release announcement:
https://forums.untangle.com/announcements/38401-untangle-v13-0-0-available.html
bug-track: https://jira.untangle.com/browse/NGFW-6258
nice description: https://wiki.untangle.com/index.php/Bufferbloat

UT NGFW is also available as firmware for a few home router kits.

Jim Alles’ disclaimer: I am not a shill, I am a user who enthusiastically provides support on the UT forums, and have learned much more there in return!

]]>
Comment on Home products that fix/mitigate bufferbloat… by Aneurin Price https://gettys.wordpress.com/2017/02/02/home-products-that-fixmitigate-bufferbloat/#comment-14095 Wed, 08 Mar 2017 15:15:38 +0000 http://gettys.wordpress.com/?p=1376#comment-14095 “I wish the Ubiquiti had a “make me into a home router” wizard that would make it immediately usable for most people, as its price is low enough for some home users to be interested in it.”

The USG is internally the same hardware as an EdgeRouter (I believe there are a couple of USG variants that correspond to different EdgeRouter variants) but with a UI more oriented to home use, so in a sense this already exists except it’s in “spend more money” form. Consequently, your wish seems unlikely to be granted.

]]>
Comment on Mitigations and Solutions of Bufferbloat in Home Routers and Operating Systems by gettys https://gettys.wordpress.com/2010/12/13/mitigations-and-solutions-of-bufferbloat-in-home-routers-and-operating-systems/#comment-13880 Fri, 03 Feb 2017 02:24:34 +0000 http://gettys.wordpress.com/?p=360#comment-13880 In reply to Marc Herbert.

This was five years ago; I have no clue if the technical note is still present, or applies to Windows 7 or 10.

]]>