@pmoncho said in Opinions: Ansible vs. SaltStack:

@scottalanmiller

What would be the sense of purchasing a solid open source project like SaltStack?
Being OS, VMware can add their own developers to the project and still integrate it with their products without the cost of purchasing the company.

I think they're just trying to stay relevant. Like with Harbor, Tanzu, etc.

@travisdh1 said in Windows Servers Archived onto Linux, suggestions/help pls:

@siringo said in Windows Servers Archived onto Linux, suggestions/help pls:

@travisdh1 said in Windows Servers Archived onto Linux, suggestions/help pls:

zpool status -l

Thanks for the help everyone, just become very busy.

I get this:

a219e156-04f1-4f8e-8250-975dd9386f01-image.png

What does that tell us?

That you went with the default setting, so are only using a single drive.

Oh, great. Thanks travisdh1, we got there in the end. Now I know I can add the extra disks.

@Pete-S said in How to use firewall-cmd to verify that tcp 80 & 443 is open?:

One thing that would be nice to have, something that I've used on hardware firewalls, is a command that will simulate packets through the firewall rules to see if they will pass or not.
I've not seen something like that for iptables/netfilter.

Not sure about simulating, but you can always send packets at it and use iptables -v to see the counters.

Still down.

https://status.vultr.com

@Dashrender said in Fanvil x5u - Firmware upgrade via server download:

https://www.fanvil.com/Uploads/Temp/download/20191218/5df9dd9ce42f0.pdf

The general configuration file is helpful in automatic configuration deployment of a large number of terminals. For example, only a general configuration file F0V00X600000.cfg carrying firmware parameters needs to be placed on the automatic configuration server to automatically deploy firmware for 1000 X6 terminals.

@Dashrender thanks I had totally missed that section of the pdf. Adding the Auto Image Url option, to the F0V0X5U00000.cfg did get the phone to properly upgrade the firmware automatically.

F0V0X5U00000.cfg contents for the test.

<<VOIP CONFIG FILE>>Version:2.0000000000 <AUTOUPDATE CONFIG MODULE> Auto Image Url :https://URL/x5u-6906-P0.18.23.21-2.2.10-3421T2020-09-27-16.44.21.z <<END OF FILE>>

Here are the logs of the process, phones starts with firmware 1.0.0 and properly upgrades to 2.2.10

[15/Oct/2020:09:20:42 -0500] "GET /F0V0X5U00000.cfg HTTP/1.1" 200 209 "-" "Fanvil X5U 1.0.0" [15/Oct/2020:09:20:43 -0500] "GET /MACADDRESS.cfg HTTP/1.1" 200 93621 "-" "Fanvil X5U 1.0.0" [15/Oct/2020:09:20:53 -0500] "GET /x5u-6906-P0.18.23.21-2.2.10-3421T2020-09-27-16.44.21.z HTTP/1.1" 200 40789888 "-" "Fanvil X5U 1.0.0" [15/Oct/2020:09:21:44 -0500] "GET /F0V0X5U00000.cfg HTTP/1.1" 200 209 "-" "Fanvil X5U 1.0.0" [15/Oct/2020:09:21:45 -0500] "GET /MACADDRESS.cfg HTTP/1.1" 200 93621 "-" "Fanvil X5U 1.0.0" [15/Oct/2020:09:23:02 -0500] "GET /F0V0X5U00000.cfg HTTP/1.1" 200 209 "-" "Fanvil X5U 2.2.10" [15/Oct/2020:09:23:02 -0500] "GET /MACADDRESS.cfg HTTP/1.1" 200 93621 "-" "Fanvil X5U 2.2.10" [15/Oct/2020:09:23:23 -0500] "GET /F0V0X5U00000.cfg HTTP/1.1" 200 209 "-" "Fanvil X5U 2.2.10" [15/Oct/2020:09:23:23 -0500] "GET /MACADDRESS.cfg HTTP/1.1" 200 93621 "-" "Fanvil X5U 2.2.10" [15/Oct/2020:09:32:53 -0500] "GET /fanvil_x5u_hwv1_0.txt HTTP/1.1" 200 115 "-" "Fanvil X5U 2.2.10"

@Pete-S said in Would you put a MS SQL VM and a MS Exchange VM on the same host?:

@scottalanmiller said in Would you put a MS SQL VM and a MS Exchange VM on the same host?:

Vertical scaling is so much more efficient in so many ways, it's nearly unbeatable (for cost and performance.)

Not when you have many workloads and there are lots of things that proves this. But I know you're the master of relentless posting so I'm just respectfully going to bow out 🙂

How does "many workloads" even factor in? Nothing you've mentioned gives a reason for your position. There's no logical reason and nothing in the real world supports that horizontal scaling somehow saves money. This goes against all industry knowledge, common sense and observation. Even your own examples, you pointed out that the factors you were using were wrong and didn't show what you were using them to show. Just posting unsupported random misinformation and "bowing out" before we ask for some explanation just makes it seem like you were just saying those things to say them and don't believe them yourself.

In your last "example", the more workloads you have, the more horizontal scaling wastes money. Vertical scaling specifically crushes horizontal in cost/performance the more numerous and disparate the workloads are. Vertical scaling is where you get the huge cost/performance benefits of shared hardware. And, of course, people trying to make shared hardware look bad with underspec it or misconfigure it and try to say that that makes it bad, but you can underspec or misconfigure anything. Mathematically, vertical scaling works better. It's plain physics, you can't just state that physics aren't real and act like you have special insider knowledge of the universe that no one else has and cannot be demonstrated with real computers.

@Dragon3303 said in Zoom meeting access::

Sounds good. It seems like a nice, easy, free way to go about conducting meetings that one would maybe otherwise have to use a paid service for and there's always going to be some people who get nervous that they don't know the company, you don't have to have an account with a username/password, etc.

You can require passwords for the individual meetings if you like. Usernames are useful for management, but not security. Don't get me wrong, easy management encourages security. But in a case like this, it actually makes it more secure, not less. If you use u/p then you encourage a system where once hacked, people can record you. Jitsi does a non-repeating double password mechanism that's all but unbreakable unless someone shares it, and that's a risk either way.

e0defcac-7cf0-4601-8e04-178a60ea74ed-image.png

@Dashrender said in Unifi Controller - Reinstall and adopt APs:

@DustinB3403 said in Unifi Controller - Reinstall and adopt APs:

@travisdh1 Yeah I'm thinking what happened is someone setup a Unifi Controller on windows at some point, then they engaged us and said yeah we don't have access to the AP's but its all still working. So they were sold a physical cloud key, and still the AP's weren't adopted.

Assuming you're at an MSP now, do you host a controller that you could just build a new site for and adopt the APs too?

This is what @Bundy-Associates and @NTG do.

That is the plan, but for now this is just janitorial work.

@Pete-S said in Formatting text instructions into html?:

@stacksofplates said in Formatting text instructions into html?:

I prefer asciidoc to markdown. Asciidoc has actual standards for things. Antora will build a pretty nice site with your projects written in Asciidoc as well.

Ifyou just want a single page, Asciidoctor will build a site as well.

I had a look at asciidoc and it looks very nice, especially for larger documentation projects.

I have a couple projects in an Antora site. We had a ton more at work, but I can't show it on here. You can include multiple projects and have them appear at the bottom left, each with versions. We used it so that teams could create documentation for tools (or really whatever they wanted) and then that documentation could be scraped and included in the central site. I just have a few projects included in my site, but Antora makes that pretty easy.

Here's my very bad/basic example.

https://docs.hooks.technology

I just confirmed, this system is only using the Intel controller, and not SS.

@scottalanmiller this is the ONLY way I make any money Scott, WTH calling me out on my BS?!

@Dashrender said in PRI over IP:

no, then it's likely good enough.

This sums it up. That's like "it goes down from time to time, but not enough for people to complain". "Good enough" is a way of saying "noticeably not as good, but not so bad as to not be considered."

In IT, good enough is normally what we say when we know something's wrong - when we know something isn't good, it's just not quite so bad as to be bad. And like IT, in real life, no one truly wants food that only edible, they actually prefer what is good. And a company that only provides "good enough" consistently, starts to be sensed as a failure.

Think about yourself as an employee.... are you proud of where you work and the decisions that they make? If so, do you ever feel that way when you also say that the decisions are "good enough?" Of course not, it's what we say when no one's truly happy with it.

@Pete-S said in Changing Public PGP Key:

Don't know if this helps in your application but if you have old files you can just decrypt them with the old key. If it's important to store them in an encrypted state you can encrypt them again with the new key. After that you can revoke the old key.

Yeah I could do that, it just seems unnecessary when you can sign the new key with the old key and decrypt both. Turns out it actually chooses the right key so there is no problem

@Dashrender said in Defining the Hobby Business vs a True Business:

@Carnival-Boy said in Defining the Hobby Business vs a True Business:

My uncle ran a successful hardware distribution business employing dozens of people for over 30 years. His motivation was to generate work, security, and happiness, for owner and employees. He could have been more profitable, but chose not to.

I'll have to tell him he spent his life devoted to a hobby 🙂

But then he was a socialist. Maybe we just think about business differently in Europe? Scott likes to label things, but I'm not sure it makes any difference.

It does, to the point Scott as trying to make, though the posts were long so perhaps you missed it. IT is a Business Tool, as such when in a "business" as Scott would call it - it's pretty easy to know what to do - IT does what it takes to make the business the money money. When you're running a "something else business" (really hate the hobby term, it's pretty demeaning), IT doesn't actually have a cut a dry clear goal... now it has to fall to the whim of those in charge.

So the real question becomes.... why would anyone find the term "hobby" demeaning? Hobbies are what we love to do. Hobbies are the important things in our lives. Hobby is not demeaning or negative. It's just honest. It's only demeaning if the hobby itself is embarrassing.

LOL - yeah I read it like Laksh wants to knock it off...

NONE STUCK IN THE QUEUE!

Thanks for the help @JaredBusch, @dbeato @Dashrender

@hobbit666 said in Firewall for small Windows network:

@scottalanmiller said in Firewall for small Windows network:

We do too, but for customers who want US to do that for them, we charge. But of course, they are free to do it themselves as well.

It's just that we host the controller for free.

But just above you stated that your customers get Unifi for free?

We do not charge for the use of the Unifi platform since it is a pre-existing cost that is already covered and their portion of it would be less than the cost of the overhead to charge them.

Right, he said they don't charge just to have the equipment in their Unifi Controller. After that the customer has to decide between 3 options, manage themselves, enable auto updates or pay NTG to do updates after testing new firmware.

@Dashrender said in Pre-Planning new domain and environment:

It's the whole ZT/DNS

@Dashrender said in Pre-Planning new domain and environment:

and when I tested ZT in the past,

It is just DNS. You have to have it on EVERYTHING if you go that route.

Or, you make the ZT network the same subnet and not different.

Just take your 10.0.0.0/24 and make it a 10.0.0.0/23 instead.
have the local DHCP server hand out 10.0.0.101-254
have ZT DHCP hand out 10.0.1.101-254

or use ZT Bridging
Lots of ways to skin the cat.