@travisdh1 said in How Many HCI Nodes for the SMB:

@Pete-S said in How Many HCI Nodes for the SMB:

@travisdh1 said in How Many HCI Nodes for the SMB:

@scottalanmiller said in How Many HCI Nodes for the SMB:

This is to not convolute the other thread about HCI for @Jimmy9008 ...

In that thread he's asking about three node HCI setups. I often point out that two nodes is nearly always better. I wanted to kick off asking... for an SMB, does he really need to be looking at so many nodes?

Depends on if management forces them to use Microsoft products. The per core licensing model means the most efficient setup is only 16 cores per server, which is really nothing today. Could easily need 3-4 of these.

Get off the windows platform and you can scale so large in a single server there is no need for more than 1, at least at the size of an SMB. Thanks to AMD Epyc it's even a reasonable price point today.

Besides Microsoft there are a bunch of other software that is licensed per core or CPU of the hypervisor.

Sure there are, I've even worked with some of them. Every single one I'd question what an SMB business needs said software for. They should be so few and far between that they're the exception that proves the rule.

In the SMB, you don't need more than 16 cores either. So then those restrictions do not matter.

@NashBrydges said in Remote VoIP Phone Unifi Network:

I've port forwarded 5060 to the FreePBX server limiting access to the remote public IP

You have to port forward the RTP range also. It is UDP 10000-20000 by default.

@scottalanmiller said in Do you add CAA records to your DNS records?:

@Pete-S said in Do you add CAA records to your DNS records?:

Do you add CAA (Certification Authority Authorization) records to your DNS records?

Is it important for FQDNs that have Let's Encrypt certificates?

Yes, but it is automatic with CloudFlare, not something that we have to think about.

Automatic? No it is not. Cloudflare is a real company and they do not randomly add records to your DNS. If you want CAA records, you have to add them.

@marcinozga said in Do you add CAA records to your DNS records?:

Yes, but word of caution. If you get certs from multiple different providers, don't forget to add records for all of them. Otherwise getting certs will fail, and it's almost impossible to troubleshoot.

Yes, like this.

As one would expect,

-q,--quiet 
Quiet. Produces output suitable for logging, omitting progress indicators. More q's will produce more quiet up to a maximum of two. You can also use -q=# to set the quiet level, overriding the configuration file. Note that quiet level 2 implies -y, you should never use -qq without a no-action modifier such as -d, --print-uris or -s as APT may decided to do something you did not expect. 

ALso, you really need to learn to use the internet....
https://linux.die.net/man/8/apt-get

@gjacobse said in Linux CMD: apt-get:

Each one of the links I searched did not mention the -q

And I don't assume or expect

But thanks for the pointer.

Again, learn to use the internet. All Linux commands are documented in man pages.. You clearly didn't search for the man page document.

@ranahashem said in linphone: remove/hide “default identity”:

@JaredBusch
I am still a student. I cannot use the TLS protocol because it is neeeded to a license .. do you think that there is a possibility that there is a problem in the issuance of the asterisk ..

I do not think so because all kinds of free soft phones have successfully registered with the system .. Do I download it again

(l https://technologyrss.com/how-to-install-freepbx-14-and-asterisk-14-on-centos-7/)

I think you have no idea what you are talking about Student or not. Asterisk has zero licensing.

If you are going to use FreePBX, then you use the distribution, which includes the OS. You don't install it piecemeal.

If you are going to install only Asterisk, then you start by building the OS and dependencies required to compile it yourself.

I think mostly this would be similar to the difference between using any large carrier versus a small one. Skipp the hosted PBX bit and just look at general big versus small marketing.

Flexibility is commonly referenced.
Personalized Care.

etc.

@Dashrender said in linphone: remove/hide “default identity”:

@scottalanmiller said in linphone: remove/hide “default identity”:

@Dashrender said in linphone: remove/hide “default identity”:

@scottalanmiller said in linphone: remove/hide “default identity”:

Most enterprise PBXs, and FreePBX is no exception, give you the ENTIRE system. It's an "appliance." You don't download it as software and install on top of an OS as if it were an office suite or note taking application (although that's possible.)

At least not any more, and not for several years... but there was a time, not THAT long ago that you did.

Pretty long ago. Like mid-2000s I'd say. That's more than a generation in IT terms.

That doesn't seem right - I recall building my first FreePBX and that was only like 5-7 years max and you had to install from scripts - they didn't have a DL ISO for install.

If I had to guess, you did PBX in a Flash from Nerdvittles.

That was a scripted install on top of CentOS. But it was still nothing more manual than a single script.

@scottalanmiller said in linphone: remove/hide “default identity”:

@JaredBusch said in linphone: remove/hide “default identity”:

@Dashrender said in linphone: remove/hide “default identity”:

@scottalanmiller said in linphone: remove/hide “default identity”:

@Dashrender said in linphone: remove/hide “default identity”:

@scottalanmiller said in linphone: remove/hide “default identity”:

Most enterprise PBXs, and FreePBX is no exception, give you the ENTIRE system. It's an "appliance." You don't download it as software and install on top of an OS as if it were an office suite or note taking application (although that's possible.)

At least not any more, and not for several years... but there was a time, not THAT long ago that you did.

Pretty long ago. Like mid-2000s I'd say. That's more than a generation in IT terms.

That doesn't seem right - I recall building my first FreePBX and that was only like 5-7 years max and you had to install from scripts - they didn't have a DL ISO for install.

If I had to guess, you did PBX in a Flash from Nerdvittles.

That was a scripted install on top of CentOS. But it was still nothing more manual than a single script.

I remember that. "In a Flash", haha.

Compared to the manual processes that existed before then, it was good.

In the end I had issues with the crap that the system pre-setup. It was all at the novice or hobbyist. Not business.

@Dashrender said in Migrating site from UNMS CK to UNMS:

@JaredBusch said in Migrating site from UNMS CK to UNMS:

@scottalanmiller said in Migrating site from UNMS CK to UNMS:

Unifi gear has a simple import/export option on a site by site basis.

And if you do that process under control with all things online, it tells the devices how to find the new UniFi controller as part of it.

It is a very good process.

can you expand upon that?

There is a migration step you can do beyond simply backup and restore.

It updates the devices, telling them how to find the new controller.

Obviously, if you are backing up and restoring to the same IP/FQDN you don’t need to worry about it.

@Mario-Jakovina said in Vultr Firewall added Cloudflare:

@JaredBusch Thank you.
I will read a little about Cloudflare and its services... I am not familiar with that.

Even my personal domain, with like no content or traffic was protected from random drive by attacks. For free.

I've heard of Clickatell but not SMS-Magic.

I've not researched them at all.

@DustinB3403 said in Reconsidering ProxMox:

So can I get my Hyper-V VHDX to run on proxmox through an embedded Hyper-V hypervisor? Cause that would be great to do as I have a few systems that need to remain on Hyper-V for reasons I can't dig into atm.

WTF

Once you have NodeBB up and running, you will likely want to set it up to start on boot.

The best way to handle this is to create a systemd service in order to manage it just like any other service on the system.

The documentation pretty much nails it.
https://docs.nodebb.org/configuring/running/#systemd

This file matches this guide.

sudo tee /etc/systemd/system/nodebb.service > /dev/null << EOF
[Unit]
Description=NodeBB
Documentation=https://docs.nodebb.org
After=system.slice multi-user.target postgresql

[Service]
Type=forking
User=nodebb

StandardOutput=syslog
StandardError=syslog
SyslogIdentifier=nodebb

WorkingDirectory=/opt/nodebb
ExecStart=/usr/bin/env node loader.js
Restart=always

[Install]
WantedBy=multi-user.target
EOF

Now you can control things with normal systemd commands.

First if you manually started NodeBB, stop it.

sudo -u nodebb /opt/nodebb/nodebb stop

Now control it with normal systemctl commands

sudo systemctl start nodebb
sudo systemctl stop nodebb
sudo systemctl enable nodebb
sudo systemctl status nodebb

Most likely there is a drive speed limitation on the write.

@Dragon3303 said in Switch to fiber or stay with coax?:

but I'm not sure how much of a difference that will make overall going from 12 mb to 30 mb

It will not make any real difference since you said you are not having any issues now at 12mbps up.

But 30 mbps down is a huge change from 200 mbps down.

A simple example: 5GB Windows 10 ISO file would take
30mbps = 24 minutes
200mbps = 4 minutes.

@DustinB3403 said in Trying to get metrics comparing two APs Cisco and Ubiquiti:

@JaredBusch Any input on the technical research for a comparison of the equipment vendors?

No. I'm busy pretending to work and arguing about USB on monitors.

I never care about matching exactly. Not brand, only speed and size.

The best way to geo block is with ipset tool

https://linoxide.com/linux-how-to/block-ips-country-ipset/