We've been experiencing a system wide drop in throughput with our RAP units connected over Comcast. The throughput will drop from 15 Mbps to 1 Mbps between the hours of 8 - 11p (PST). After doing extensive network testing -- i.e. it's not a scheduled process gobling up bandwidth -- our network engineers think that Comcast is blocking UDP traffic during this time. If this is the case, I doubt it's isolated and was wondering if anyone else in the community is experiencing the same?
Thank you for your feedback. I can't say I've heard this before from Comcast or any other provider. I have a couple of questions:
- Is Comcast the provider for the home user or do you have Comcast Business at your controller location?
- If this is Comcast on the user's end; during this time, do you have issues with users of other providers?
Our controller is on Verizon and our end-users are on Comcast Residential and Business. It seems like a long shot, since I was just told that it's affecting our AT&T users too.
After a couple weeks of network testing by our engineers and the guys at Comcast and AT&T, they say it's a "Peering Link" issue. The peering link is getting saturated during primetime hours (7p - 11p) with other traffic, like Netflix, that our Aruba RAP traffic is getting slowed down... hard to believe, but that's their story and they're sticking to it.
I'd imaging if it were a peering link issue, this problem would be more endemic. Dropping from 20 Mbps to 1 Mbps during these hours is painful!
This is a common and widely known issue with Comcast cable modem internet connections. We're also seeing it on Charter Residential. Comcast has admitted to the rate-limiting UDP traffic and told us they'll rate-limit when and where they decide it's in their best interests.
Aruba may intentionally be unaware of this because they haven't responded with an alternative VPN option. The solution most vendors have implemented is to be able to wrap the VPN tunnel in TCP 10000 or to just use IP protocol 50/51. The Aruba RAP will only allow you to use UDP port 4500 (NAT-T). More and more ISP's are starting to rate limit UDP traffic and we're having to look at other vendor solutions for our remote wireless location. It's a shame because the RAP works great and is a wonderful solution but having a 90% degradation because of the ISP rate-limiting is not acceptable to our users.
Our Aruba SE (who is one of the best SE's I've ever worked with) Xing Zhou has submitted a feature request for an option to wrap the IPSEC tunnel in TCP.
In the SF Bay Area, we're experiencing these slow downs/throttling with Comcast, Webpass, and a couple other ISPs. Interestingly, our performance improved greatly after the FCC ruling a few months ago, but we're starting to experience degredation again.
We had the exact same experience after the FCC ruling. It got our hopes up a bit and then ~ 2 weeks later the performance started degrading again.
Has anyone managed to get public key authentication working with Aruba Controller and OpenSSH? I saw the KB article and after mouthing "WTF? Seriously?" I managed to get OpenSSH's ssh-keygen to convert a RSA public key to a PEM. Sadly the controller is rejecting it as if it's not really a PEM or whatever internal reason it doesn't want to cough up.
I'm not interested in generating a CA and shouldn't have to. In my case it would weaken security as I myself have avoided running a proper CA setup. This is SSH not SSL. I guess I'm too busy being shocked that this thing doesn't support OpenSSH pub keys out of the box and it looks like PuTTY mainline lacks X509 support. Also I guess I can't have multiple SSH keys for user as in one for each client machine?
Thanks but that is pretty much the same as what is in the KB article and I frankly don't understand why any of it is necessary.
Is there no way to use the defacto standard OpenSSH public keys or even a PuTTY public key? I have existing keys that I want to use and I want to be able to use those keys with a wide range of devices. The Aruba controllers stand alone as the only thing I have access to that supports pubkey auth that doesn't directly handle these keys or offer a clear conversion path or tool (ala PuTTYgen).
I'm not even sure what certificate format it's expecting as I've used the OpenSSH ssh-keygen tool to generate a PEM but the controllers reject the resulting file with a non-helpful error.
Sorry if I come across as cranky but I'm honestly stupified at the process layed out in the KB article for something as simple as handling an SSH key...
I recommend you not try to use this feature. The reason it is there is for smart card users (the US military CAC to be specific), and the feature is optimized for someone who already has a certificate and needs to get it to work with SSH. Trying to go the other direction is just asking for pain, as you've seen.
I'll enter an enhancement request for allowing entry of SSH pubkeys directly. That should not be too complex to support. I'm actually a little surprised that in 9 years and over 2000 enhancement requests filed, nobody has asked for this before.
Nice one on the feature request.I use shh all the time with Linux ssh session authentication and I am testing this same feature on my lab and am experiencing similar headaches. I would welcome this feature also. Spot on blocke :-)
Ok, I bashed on this for an hour and finally managed to get this working. Not sure if its still relevant to anyone, but this is how you convert your openssh certs to a format that Aruba likes.
First this is mostly tested on Macs, since that's what we run here, if you run windows or Linux, you're kinda on your own:
Check OpenSSL version on your Mac by typing command "openssl version", mine is OpenSSL 0.9.8zc 15 Oct 2014. If you're at least this version, the instructions below should work.
You can accept the default for every prompt it asks you after. None of it is really relevant. If you don't put the flag of -days 1500 (5 years), the default period will be 30 days.
Upload resulting pem into Aruba via GUI. There's no CLI method that I can find. Make sure you select format of pem and public certificate for type.
Add the user that'll use this cert. You can CLI for this. Format is: "mgmt-user ssh-pubkey client-cert <your uploaded pub key> <user name> <role>"
Lastly, enable public key certs by going to the GUI and selecting the "Client Public Key" option under SSH Auth method. You can cli as well, but if you do this, your backup controller will not have the option propogated over. this is obviously a bug, and this is the workaround for it so far.
That's it, now you need to do it for your backup controllers and then you can finally turn off your RADIUS or TACACS server to the controllers. I'd still recommend having username/password for the admin account just in case your keys get borked or your laptop dies.
This worked great for me also. One note. If you have a lot of private ssh keys on your host you might have to edit your .ssh/config to present just the correct key or you can not login with just a password.
Try to move the access points that keep rebooting to a different switch. No reboot reason normally means that the power was removed from them.
Did you ever find the solution to this? I'm having the same problem and I know it's not a cabling or switch problem. Seems more likely in the AP-105s than any others..
I have been wanting to just eat a sandwich or SOMETHING, but apparently I’m not allowed because of listeria or something to that effect.
You can absolutely have deli meats, without heating them up. Bagged salad has listeria risk, as do many other things sold. I wouldn't worry.
I eat lunch meat all the time. My midwife said it’s fine as long as it’s been safely refrigerated and hasn’t been sitting out for hours lol.
I hear mine up for 30 seconds (I have to due to the fact that I’m a surrogate and it’s in my contract).
its just with my first pregnancy, I was eating it at first and then I had no interest whatsoever, like ham made me want to barf so it wasn’t an issue. Now I’m like...is it ok?
Lol I have been craving a Jimmy Johns sandwich sooooooooo bad! My OB put deli meat on the list of things not to eat, and since I have a high risk pregnancy I'm going to listen. I know sushi is also on the "do not eat list" as a lot of other things are but ALOT of women eat these things and their babies are born beautiful and perfect! Quite honestly I have never heard of a baby born with problems because the mother ate sushi, deli meat etc while pregnant 🤷🏻‍♀️ I'd say go for it unless your OB specifically told you not to... then again, it's still up to you lol.
The first thing I ate when I delivered my DD (dear daughter) was jimmy johns and I plan on doing that again when I deliver my DS (dear son) next year lol!
My Dr says heat for 30 seconds in the microwave, so you should be golden if you get it toasted (I know some women don't worry about deli meats, but it is up to you and how much risk you want to take)
Spicy tuna roll sushi is my favorite so I have banned it from my diet, even before becoming pregnant. My last time was Father’s Day 😢
FTM (first time mom) here. I’m 20w 3d and starting to think about baby registries! When is a good time to start a registry? Also, what websites are good to register for? What kind of items did you find most useful from previous pregnancies? Sorry for all the questions, just want to make sure I ask for useful things so the baby is set I have a bunch of family on both sides that want to throw me a baby shower.
... people who I always thought were crazy for not testing until days after AF (Aunt Flo - menstruation/period) was late
Hubby and I were trying for a few months but decided to stop due to me needing an MRI. So the last two cycles we went back to pull out method and had sex infrequently because I was sick.
Logically I know I shouldn’t be pregnant but I’m two days late and trying not to get my hopes up. I know I need to test but I kept telling myself “ AF (Aunt Flo - menstruation/period) will start today” but it hasn’t and now I’m going crazy.
But I’m also afraid to test. I’m afraid of the disappointment of it being negative. It’s easier to cope when AF (Aunt Flo - menstruation/period) shows up on time because I know for sure I’m not pregnant and I prepare to start another cycle.
I was the same way. I was always so upset when the test came up negative. But I waited 4 days to test. And I was shocked it came back positive. My df (dear fiancee) and I had sex one time. Lol
I was the same way. I was always so upset when the test came up negative. But I waited 4 days to test. And I was shocked it came back positive. My df and I had sex one time. Lol
Congrats! I hope this is us. I didn’t track when we had sex this past month of course 🤦🏻‍♀️ I have tracked it every time since my October 16 LO (little one) and of course this cycle I decide to skip it. So I don’t even know If we had sex when I was fertile
Congrats! I hope this is us. I didn’t track when we had sex this past month of course 🤦🏻‍♀️ I have tracked it every time since my October 16 LO and of course this cycle I decide to skip it. So I don’t even know If we had sex when I was fertile
Honestly we didn’t either. We decided to take a break and bam pregnant. And I’m praying for you guys and hoping! 🤞
So I can't decide between the two prams. The Cruz I would have in the off white colour. It's super lightweight. Fits in any boot. Has a massive basket and can carry more weight.
The egg I would get in prosecco. It is very appealing to the eye but quite heavy to push and more expensive (by about £300)
I am not keen on the small wheels on the Uppababy but it does still look lovely. I think I am going to be practical and go for that as it does look lovely in off white.
I have the egg and my friend has an uppa baby. She has the vista and I am not sure how they differ but the basket is amazing. I always end up having to off load stuff onto her as I never have enough space. That’s the only negative about the egg though as I love it.
I’m getting the egg in the black edition I love it I had the peach last time An just fancy a change x
I have an egg and love it. I have it in espresso black. I was put off the prosecco as I didn't want to stress about keeping it clean
I have just purchased the egg today in black shadow!! Originally we liked the icandy but completely changed our minds. Love it!! Xxx
I prefer the vista but it's so wide?? I don't see how it will fit in any car boot unless a massive car? Xx
I have an uppababy vista and a Toyota yaris. I had a corsa before that so both small cars but the pram fits in the boot fine x
I am working on a web app using ArcGISDynamicMapServiceLayers, which use UniqueValueRenderers to draw points based on attributes. In many cases, the attribute value is 0, in which cases I would not want to display anything. If I do not assign some symbol to these values, the service draws the default symbol in those locations. I tried assigning a symbol with 0 opacity (transparent), but when I use an InfoWindow in the web app, a click will still [pick up these invisible symbols.
The user will choose which attribute to use for rendering the symbols. So that value may be 0 in some cases and nonzero in others.
Your sample really helped. I did not know you where using the IdentifyTask and not just a simple InfoTemplate or PopupTemplate.
Can I do that after loading the map services? In other words, can I set the layer definition expression dynamically in runtime?
I will if and when I can get this to work..so far it is not; the definition is applied to the layer, but I can still click on the 'removed' points, and an infoWindow appears with 0 value. I will keep investigating.
update - I confirmed that the layer definitions are being applied; I added a filter to the 'all points' set, and only the points that met the condition are visibly shown. But, I can still click on points that are not visible but are part of the 'all' set, and an InfoWindow appears.
If you are still getting the popup when clicking on a point that is filtered out using the defention query then are you adding the layer using a ArcGISDynamicMapServiceLayer or a FeatureLayer?
ArcGISDynamicMapServiceLayer, i mention 'dynamic map services' in my original question and tags...Ill edit for clarity.
Strange. Here is a sample where all states but Kansas are remove using the definition query and when I click on any other state a popup is NOT displayed.
I saw a similar example in ArcGIS's JS sample page...for one, this sample is adding the parameters before the service is added to the map. Also (and more significantly, I think), I am rendering the symbols on the fly by changing the attribute used to define the symbology, as I said in my question. I assign the renderer to a LayerDrawingOptions object, then pass those options to the layer with setLayerDrawingOptions.
I can see the effect of the layer definition visually, but the points are still there, just not visible.
Since your workflow is not a standard workflow and you have yet to share any relevant code I am not sure I can help you.
my code is based on these examples from ArcGIS: this and this. My code base is rather large and hard to give a sample that will encompass everything , but I can try. The basic workflow is:
3) unique symbols based on attribute value are passed to UniqueValueRenderer, which is then assigned as renderer property to a LayerDrawingOptions object
for the dynamic map services to be able to render symbols, 'allow modification ...' checkbox in ArcGIS Server Manager is enabled for those layers.
thanks--so far, adding this code has resulted only in 'No information Available' return for clicking on any point, for any of the chosen attributes. Did you add any other edits?
yes. i tried a few variations (removing the other lines in the identify parameters, for instance) but not effect. Here is the updated live demo..Here I only added your two new lines to the existing Identify Parameters:
you added those lines, but in the wrong place. Notice I show the function you should add those line to.
ah yes you're right, works now, thanks! I will have to add more so as to get the current layer and attribute value in my actual code but I can do that without too much trouble I think.
ps- I am still curious why the Image Parameters setting do not seem to remove the point from the layer (although it is invisible)...ideas?
Because you are using the IdentifyTask with the IdentifyParameter option LAYER_OPTION_ALL and it is not looking for what is visible on the map.
I can comment out that line and get the same results..My understanding was that the Image parameters setting should remove any zero value points from the layer entirely. (this is more for my own understanding)
You understanding is correct for the layer in the map. But the IdentifyTask is going back to the server to do the identify operation and is not aware of the definition you applied to the layer in your map unless you specify it in the IdentifyParameters. If you were not using the IdentifyTask and just using a standard popup for the layer then it would work as you are expecting.
1) click on a point and see the info window, which will show the chosen attribute field and its value
2) remember where the current points are located, then, choose a different attribute from the dropdown window
3) now click on the same spot where a point no longer appears where it appeared earlier..you will see the current value of '0' in the info window
I have published a large number of layers ( > 200) from a project in ArcGIS Pro into the Data Store in Portal for ArcGIS but want to see if there is a way to update the project in a quick and easy way so the project now points to the layers in Portal for ArcGIS?
I know I can change the source one by one by right clicking on the item but this will be very time consuming for 200 layers.
my variation on this question is to change data sources in an MXD from AGOL layers to same layers from our internal Portal. I'm thinking there should be a way to include services in the list of sources shown in the 'update data source' option in Catalog.