Traffic management and road closures can be hard work, we've had to wait over a year before for a road closure as it would affect multiple bus routes. (And as an aside, lockdown was extremely productive for network build like this!)

In fact, anyone approved can use BTs own ducts and poles via their PIA product[1], which has created a resurgent and incredibly active market of "alternative" network providers ("alt nets"). London for example is now well served for broadband by Community Fibre, g.network, Hyperoptic and others alongside the incumbents.

[1] https://www.openreach.co.uk/cpportal/products/passive-produc...

Comments URL: https://news.ycombinator.com/item?id=32848579

Points: 2

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=28692775

Points: 1

# Comments: 0

Specifically, their editor is a separate component: https://github.com/outline/rich-markdown-editor

I assumed this was a clever marketing product from the outline team, but it seems to be entirely separate.

This works well most of the time but every so often we might rush a config, miss a step or put the wrong value in for field - the best case is that the issue is noticed and we can fix remotely. The worst case is that the job fails. We also found that sometimes engineers would build up their own custom flavours of base configs and snippets on their own devices.

We wanted something better. We looked at using a templating language but we didn't love the work required to install the correct toolchain and after some testing, found that providing the values through the CLI to be a little restrictive and the process of building a template more daunting than we wanted.

So we built something ourselves, and we're now releasing Configaro: https://configaro.com

It's an entirely online, you build the template and specify what variables it needs and place them in the right place. Then later you input your variables and it spits out your config. There's currently one "advanced" variable: IP Address with Subnet, if you create one of these it automatically provides you some derived values such as the host address, subnet mask, mask length, wildcard address, first usable, last usable which helps remove a big source of error.

We've been using it for the last few months and it's working really well, engineers prefer using it as it's quicker and we've found it good for sharing little snippets.

I'd really love to know what you guys think about it, any ideas or feedback would be awesome!

https://configaro.com

Comments URL: https://news.ycombinator.com/item?id=22374910

Points: 2

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=18896384

Points: 1

# Comments: 0

Network address is only really used for directly attached networks, non directly attached networks will route to any address in the block correctly.

Same for broadcast address, they're also relative to whatever block you're talking about at the time, so whilst 3.255.255.255 is the broadcast for 3.0.0.0/8 subnet it's just another "usable" address in the 3.0.0.0/5 subnet and when you send a packet then you, and probably your router, don't know what subnets in use on the other side :) (unless it's directly attached)

If we provide a dedicated IP for a connection where we provide the LAN we just put a single /32 on the loopback and NAT onto this which is obviously much more economic with addresses.

For the rest we provide a static IP address, so we'll allocate a /30 (block of 4), and they get a single usable address which they will assign to their own manged router/firewall.

For the majority of our customers "networking" is either handled as overflow for their in/out IT resource or often by someone remotely savvy with tech.

For most of these people networking ranges from an infrequent concern to a vague mystery that can be sorted with a bit of googling.

For most, deploying and testing IPv6 has absolutely no upside and quite a bit of potential downside, that's because "everything works" on IPv4 and configuring IPv6 is just another potential source of error.

In addition, most people who opt for this setup do so in order to expose some internal service to the internet (port forward), again there is usually zero incentive to also deploy IPv6 as they can't be sure their client device will be using v6 when they come to connect, but they know it will support v4, everything does.

And so herin lies the issue, it's chicken and egg, they know they need v4, not every server they access or client who accesses their forwards supports v6, so they _have_ to implement v4. As such they see no reason to "faff" about with IPv6, and I don't really blame them.

We're considering charging more for dedicated v4 and possibly offering a free translation service (another point of failure :() but honestly, most would just pay the extra and then just resent us a little more. Our competitors continue to acquire v4 space as we do, this is what our customers want.

Until there is v6 only content (but who is incentivised to do this?) then I can't see any incentive for these users.

In essence, yes economic incentive is the basis for much of today's human corporation, but with growing AI/robotics, the same economic incentive will make much current human input unnecessary.

Then, for example, would counties see so many humans as a big cost? How do they solve that if they no longer need them to work?

Scary stuff.

We were already using traefik as a proxy for our docker/swarm clusters and this is a single container drop in to add authentication to every traefik request.

It's still missing a few key features but it can get you started, we're testing the use of a single auth domain (so you don't have to add every internal service domain as a refirect_uri in Google - looks similar to how sso works) internally and we expect to release this shortly once finished.

Additionally, if you want an even lighter weight option, we also use, with great success, cloudflare's lua script on a few services we don't run with docker/traefik: https://github.com/cloudflare/nginx-google-oauth

Comments URL: https://news.ycombinator.com/item?id=17675744

Points: 4

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=15809239

Points: 3

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=15580478

Points: 5

# Comments: 1

Comments URL: https://news.ycombinator.com/item?id=15364896

Points: 327

# Comments: 132

Comments URL: https://news.ycombinator.com/item?id=15324546

Points: 2

# Comments: 0