@dave247 Thanks Dave, looks like a good solution.
I don't have any switches yet so any recommendations on what to get?
Regarding the firewall, I'm leaning toward software based firewalls, like pfsense (freebsd) or vyos (linux) - mainly for performance reasons (openpvn) and flexibility.
Cyber security is just like physical security. Nothing is 100% secure if it's usable.
Isn't the point of security to delay the attacker long enough so he can be detected? That's why we need layers and some kind of intrusion detection.
Don't know anything about it but ZT sounds like one layer of security. Does it at have 2FA?
Is this how you connect switches when you want to have redundant switches?
Let's put it another way.
How would you go about finding skilled people that can take do short projects that take a a couple of days and where location doesn't matter?
So there are no sites where you can find skilled professionals doing freelance work? Not for bottom dollar but for reasonable pay.
As many other I feel there is not enough time to do what I need to get done.
I don't know if it's a good idea or not, but are there any site where I can find freelancers that will do work in areas such as sysadmin, development, security etc? Mostly linux based and often shorter, limited projects like a day or a week. Work will be done remotely of course.
If anyone have done this and have experience with it in whatever capacity, please feel free to share.
Alright, I took another approach at this.
Looking directly at the source for different kernels over at kernel.org I can see that the NVMe driver has SR-IOV support from kernel version 4.8.
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/drivers/nvme/host/pci.c?h=v4.8#n2015
It's very interesting for virtualized workloads because SR-IOV means you can assign the NVMe disk to different VMs directly and bypass the hypervisor. This is the same for NICs at 10/25/40/100 gigabit. There will be a significant performance drop if you don't use SR-IOV.
This is somewhat ridiculous. The entire premise of Microsoft's offering is vendor lock-in.
Of course you are hostage to Microsoft. Of course they will keep integrating their services until it's impossible for you to change providers. And when they raise their prices you will pay. It doesn't make sense to fool yourself into thinking something else.
If you want separate discrete services you have to stop using O365 because it's already a bundle of services - even without email.
@tonyshowoff said in Kernel version question:
Well the tag is for:
https://github.com/torvalds/linux/releases/tag/v4.19-rc4That's in the latest release candidate, so there is no stable with this yet.
If you're daring, you can pull the driver out of this release and compile it with the 4.18 release.
But it also says:
keithbusch authored and axboe committed on Jun 20, 2016
That's more than two years ago. If the change was made that long ago it cannot be just in the latest non-released kernel, can it?
This is probably a child's play for some of you guys!
I'm looking to find out from what stable release of the kernel these changes are in the source:
https://github.com/torvalds/linux/commit/13880f5b57adf34d050cf7e229a6326da45a7347
I'm not familiar with github so I just don't understand how or where I can find this info.
It's for SR-IOV support for NVMe drives.
Also, the database is just a version of SQL Express so you should be able to install SQL Server Management Studio and connect to the WID. Perhaps you can find out what the database is actually doing that is slow and that way find the problem.
@scottalanmiller
What else is installed on the RDS server? There might be other applications using windows internal database.
@mroth911 said in Average Rate for Emergency Service:
I was just trying to help my family out. thats all. I know I am f'in crazy. But He just got the job and I felt that something like this they would like to fire him cause he was setup to fail.
That's very kind of you. It also puts things in a different light.
Does the customer know that you did any work on this? If that's the case I would just put the cards on the table. Give them a very good discount on your regular fee. Basically, aim low and get paid, instead of potentially getting nothing and perhaps also getting your brother in law fired. And the rest of the money you can in your mind write off as pro bono for your brother in law.
@black3dynamite said in Small colo infrastructure for SaaS:
What are you using to create those diagrams?
Microsoft Visio Pro.
This is how @dustinb3403 suggested replicating VMs between hosts:
This is how @scottalanmiller suggested HA in the database layer.
Webserver files themselves are static and the data in the database is what is changing.
@dustinb3403 said in Small colo infrastructure for SaaS:
I would recommend an approach like Host A - Master, Host B slave - NLS backup target
Host A performs continuous replications to Host B, as well as Host A backs up to the NLS host on a different schedule.
Should Host A go down, everything is on Host B with a quick startup and you're off to the races.
You'd still have your separate backups to recover from should something even worse occur.
I like this solution too but I don't like to have one host just in standby because we get better performance if half the VMs are on Host 1 and they can share CPU and storage resources there and the other half on Host 2.
For the VMs that need replication, we might just as well have replication going in both directions between the hosts, instead of just one direction. Don't you agree?
BTW, can you setup continuous replication without XO, just using xencenter or with xen itself?