I’m going to put this as gently as I can: Wireless networks (802.11) suck. The 2.4GHz band (802.11b, g, and some n devices) is a festering pit of radio noise. Everything from baby monitors to microwave ovens pollute this section of the spectrum, and the wanton proliferation of wireless networks has it so congested that … Read more
Require SSL, keep SELinux turned on, monitor the logs, and use a current PostgreSQL version. Server side Require SSL In postgresql.conf set ssl=on and make sure you have your keyfile and certfile installed appropriately (see the docs and the comments in postgresql.conf). You might need to buy a certificate from a CA if you want … Read more
What you’re looking for is called “hairpin NAT”. Requests from the internal interface for an IP address assigned to the external interface should be NAT’ted as though they came in from the external-side interface. I don’t have any FreeBSD familiarity at all, but reading the “pf” manual for OpenBSD (http://www.openbsd.org/faq/pf/rdr.html) the proposed solutions of split-horizon … Read more
Speed of Light: You are not going beat the speed of light as an interesting academic point. This link works out Stanford to Boston at ~40ms best possible time. When this person did the calculation he decided the internet operates at about “within a factor of two of the speed of light”, so there is … Read more
(For those that are interested, I have finally written up my 2009 report on the wireless at PyCon). I have done the wireless for the PyCon conference most of the years since we moved from George Washington University into hotels, so I have some ideas about this, which have been proven in battle — though … Read more