Yeri Tiete

Category: Networking

  • blog over ssl

    Starting a SSL test on this domain as of today. Free cert by StartSSL. SSL is clearly the new hype, and this time I won’t be last to join it! 😉 Just going to check how much (if any) SSL slows down my site. Every http requests gets automatically rewritten to https.

  • Squid MRTG stats

    I talked about MRTG stats for Squid in the past but apparently forgot to include the .mib file. So, here it is. Download this file and put it in /usr/share/squid/mib.txt. I don’t quite remember where I found that mib file. Probably included with Squid on Gentoo or the world wide web… But I couldn’t find…

  • MRTG and network interfaces

    I tend to restart OpenVPN a lot due to config changes. As a result, this brings quite some issues to MRTG (or more precisely, SNMP), due to the fact tun devices change of ID. A while back, I found a quick fix for this; rename the interface targets from their respective ID to their name:…

  • Theme, blog, and stuff

    As you noticed… Or perhaps didn’t notice, I’ve started using a new, simplistic theme a couple of days ago. Kinda thought it might be too simplistic (I’ve hidden the sidebar, there’s no search or archive, etc), but I started to, you know, get attached to it. So it’s here to stay, for a year or…

  • iRail slashdot effect

    Only because stats are pretty awesome. The effects of my media attention a few days ago. I’ll give some more info than what can be seen here. And pretty happy I set up my nginx caching up a few weeks ago. MRTG traffic stats on vm1, my nginx caching server, of the first 2 days…

  • nginx reverse proxy with caching

    Playing around and searching the web I enabled some decent caching now. Here are some stats: image+html and php. Note that the php on apache (recompiled each request, about 1.5-2sec between every request) versus the cached output has a huge difference. Difference between images and static text files aren’t that huge. Also note that nginx…

  • nginx reverse proxy IP

    The issue with the wrong IP address being shown when using nginx as reverse proxy can easily be solved with mod_rpaf. cache.blog.tuinslak.org 85.234.196.237 – – [22/May/2010:16:33:46 +0200] “GET /2010/05/nginx-reverse-proxy/ HTTP/1.0” 200 6184 “-” “Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.53 Safari/533.4” 1766 6503 vs cache.blog.tuinslak.org 85.12.6.171 – –…

  • nginx reverse proxy

    I’ve been playing around a bit with nginx and its reverse proxy module. The “real” website is accessible here, whereas the cached version is here. I’m deliberately making a difference between cache.* and live.* as blog.tuinslak.* might move to the cached version lateron. The question, is it useful to reverse proxy this blog? No, probably…

  • OpenVPN packet drops

    I recently started to notice following error messages on my openVPN server. ovpn-server[6306]: vpn.rootspirit.com/85.234.x.y:62068 MULTI: packet dropped due to output saturation (multi_process_incoming_tun) This basically means that the TUN or TAP interface is making more packets than the real (TCP) interface can handle. As I need to run OpenVPN using the TCP protocol (instead of the…