Topics created by Pete.S

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/logical_volume_manager_administration/lvm_cache_volume_creation LVM has some of that stuff, too.

using ssh to tunnel rdp is quite handy as well.

@black3dynamite said in Where can I learn more about SSL certs?: This is 5-part article about setting up your CA is pretty good. https://devcentral.f5.com/s/articles/building-an-openssl-certificate-authority-introduction-and-design-considerations-for-elliptical-curves-27720 Blog posts on Altaro. https://www.altaro.com/hyper-v/public-key-infrastructure/ https://www.altaro.com/hyper-v/wsl-offline-root-certificate-authority-windows-pki/ https://www.altaro.com/hyper-v/windows-ssl-certificate-templates/ https://www.altaro.com/hyper-v/request-ssl-windows-certificate-server/ https://www.altaro.com/hyper-v/view-revoke-manually-approve-certificates/ Thanks! I've started to read the info.

@JaredBusch said in Was mangolassi down earlier today?: @Pete-S said in Was mangolassi down earlier today?: @scottalanmiller said in Was mangolassi down earlier today?: ML costs about $80/mo to run on Linode or Vultr So that would that be something like 16GB RAM, 6 vCPUs? I believe it is multiple instances. The database server is a separate incidents from the web server It's all in one, reduces latency. We are able to get enough threads in a single instance so works out well.

@bnrstnr said in XCP-ng 8.0 is available: The xe-guest-utilities package in Fedora, CentOS, RHEL official repo isn't enabled by default. If you update and lose PV, just run systemctl enable --now xe-linux-distribution Will do.

This version 4 feels snappy, like you are running on a "real" computer. But storage speed is more like an old harddrive compared to a modern server with SSD drives. To bad they didn't put a SATA or something on it. Serving up some pages on apache or nginx is no problem. Ansible installs fine. Packages in Raspbian seems to be just about the entire Debian repository for whatever odd thing you want. It's for sure the best Raspberry Pi so far. Can be used for a lot more things than the old version 3.

Anyway, I will go with bridging for now. I don't think bridging will cause any problems in this case. Traffic is intermittent and low speed so even if there are more broadcast traffic sent over the VPN links, compared to a routing solution, I don't think it will have any impact. But I'll probably set up some kind of test to make sure before deploying.

@Pete-S said in MSP: How do you connect to customer equipment?: @scottalanmiller said in MSP: How do you connect to customer equipment?: @JaredBusch said in MSP: How do you connect to customer equipment?: For Linux systems, ssh via a jumpbox Us too, as the one exception to the above "direct" piece. It's a highly secured jump box in a data center. And the customer systems are tied solely to it, not open in general. So equipment that is not a PC (for instance switches, network appliances, printers) are managed through the computers on-site or through the jump box? Or perhaps not managed at all? Either through tooling (e.g. not directly), or via an on site machine (local jump station.) In lots of cases for us, Ubiquiti gear can be managed through its own centralized consoles.

@EddieJennings said in Suggestion for books on MSP and others?: @Pete-S said in Suggestion for books on MSP and others?: @EddieJennings said in Suggestion for books on MSP and others?: @Pete-S I bought the digital version a while ago, but never got around to reading it. Well, I just plowed through it. I like to do that to quickly get up to speed and then I'll go back later. I'm not sure how useful the book is going to be for someone already doing MSP work. But on the other hand, seeing it from another persons perspective is always useful. I'd be curious to see if there's information that could apply to a one-man operation / side job kind of thing. Someone needs to write a Dummies Guide to... kind of book.

@notverypunny said in BitTorrent/P2P technology for distributed file transfer of large files?: I would add the caveat to test first... That always goes without saying, it's part of the development process. I take it testing things first is a new concept for you?

@Dashrender I just checked a couple of clients and Time To Live where set to 3600 at most and counting down. @Obsolesce If it's default then one hour it is.

@Dashrender said in 16TB spinning rust is here: Many systems today can use JBOD, the system itself takes care of any reliability needs. Exchange added that back in 2013. Everything uses JBOD at some level.

I actually like the case on a mac for once! Still doesnt justify $6k lol

@Pete-S said in Service provider - monitoring questions: Thanks guys for your replies! I had a feeling that monitoring was "underutilized" compared to what is technically possible. But as always, it's the business needs and the effort (cost) that determines the service level. totally underutilized compared to what is possible. you are 100% spot on with that.

There are awesome amount of information on YouTube from SaltStack https://www.youtube.com/user/SaltStack/

@scottalanmiller said in Transparent compression on folders in EXT4/XFS etc?: @dafyre said in Transparent compression on folders in EXT4/XFS etc?: @scottalanmiller said in Transparent compression on folders in EXT4/XFS etc?: @dafyre said in Transparent compression on folders in EXT4/XFS etc?: @scottalanmiller said in Transparent compression on folders in EXT4/XFS etc?: @dafyre said in Transparent compression on folders in EXT4/XFS etc?: Edit: I'm going to put my Zabbix instance on it later and see how it does. Databases should not be compressed! Details as to why databases should not be compressed? Basically because they are always open and written to incrementally. They aren't loaded and rewriteen like most files are. And they tend to be very large, so a very intensive usage pattern. True. But this compression is being done on the Host OS, not inside the Zabbix VM. I wonder what kind of strangeness this can cause. I don't have a lot of traffic on this particular server. That doesn't affect anything. Compression is compression. I'll find out what kind of performance hits I take with it on ZFS. So far, I'm seeing some nice space savings and no problems with anything else.

This write up sums it up well. It's a "it depends." It depends because it impacts you potentially and generally isn't very important. So therefore, there is no hard and fast guideline. https://serverfault.com/questions/588217/how-often-should-i-scrub-my-raid

@Pete-S said in What would you do...: If there was an "upvote all posts"-button under topic tools I'd use it! It would only be like 60 clicks. . . .

@stacksofplates said in Experience with Rackspace Email?: @Dashrender said in Experience with Rackspace Email?: I had a client on RS through NTG - it was great for years.. but then they started killing off features, like - couldn't add ActiveSync to specific mailboxes anymore. Plus I think the price was increasing... So they moved to Zoho - and they hate it. But Scott will be quick to point out they hate it because they are using the wrong tools for the job. On the phone - phone built in email app, not the Zoho mobile App On the desktop - They use Outlook 2016 in IMAP - there is a constant sync issue between the outlook client/webclient and phone client. other desktops - Zoho webmail - this interface looks like crap IMO. I personally like OWA, others like Gmail, etc.. so this is generally a personal thing. whatev's... I really like their interface. Shows how people are different. I especially like the docs. Zoho? They have my favourite, too.

@Pete-S said in RHEL 8 is out!: If you missed it Red Hat Enterprise Linux 8 was released a couple of days ago. https://www.redhat.com/en/enterprise-linux-8 Hopefully CentOS 8 will be soon to follow. They have a timeline on their site.

@Pete-S said in Hybrid SaaS?: @dafyre said in Hybrid SaaS?: @Pete-S said in Hybrid SaaS?: Yes, the Startech device is an industrial embedded server. I am checking to make sure of the model of the ones that are in use now. But basically the devices that I am thinking of, all they do is take whatever comes in over the serial port and send it to the server ip and port you set it for. If your program is a special program that requires using a COM port, it can be set up for that too. (for instance, if your scale has to communicate over COM3 in Windows). I understand what you are saying. It's a fact though that every device that does this is a linux/bsd computer of some kind. It doesn't take much processing power but you need a complete tcp/ip stack inside. There are a bunch of manufacturers for these devices. Also if we talk about scales that you would normally use in some kind of production or quality control, nowadays they commonly have an ethernet port either as standard or as an option. Still any real-time processing will be on-prem. Results might be sent to the cloud though for presentation and final storage. That's what I'm seeing... can't imagine when we'd want a server "somewhere" storing a bunch of random scale data.

If you want to do web browser kiosk. https://porteus-kiosk.org/

@DustinB3403 said in Do you live near a meth lab?: Apparently there aren't many meth labs in my neck of the woods that have been caught. ftfy

@scottalanmiller said in HPE Supermicro?: @StorageNinja said in HPE Supermicro?: @scottalanmiller said in HPE Supermicro?: Basically all appliance makers use SuperMicro. SM is the appliance chassis provider to the world. Quanta has a decent run rate also. SuperMicro offers more form factors than anyone. Their T41/42 platforms were used for VxRAIL prior to Dell buying EMC. In this case, I think Apollo and their hyper scaler stuff came from SGI who might have OEM'd SM. Oh yeah, SM offers pretty much as many chassis as the rest of the industry combined! And they make great stuff, too. Regarding OEM I saw just the other day that Oracle uses Supermicro in their hardware as well. And Citrix did too in their Netscaler, Wanscaler etc products. They also have small IoT devices, so the whole range from low power embedded to hyper scale.

@Dashrender said in NIC in promiscuous mode - what traffic can it see?: You can get a switch to give you all traffic on a mirrored port on the switch. This would allow you to see all the traffic on that other port. normally you would mirror the uplink port. Yepp. That's typically where you'd put your IDS if you didn't have requirements that it be an in-line.

Is this an onboard controller or an external? A typical external RAID controller (and some internal) have a BIOS that loads on POST which may show you whether it's active or not. Otherwise, most BIOS post messages display the IRQ info of onboard components during boot so you should technically see a SATA/SAS/RAID controller there. I'd suspect the drive or corrupt boot loader first. What OS is this?

It depends if you are using an agent or just rsyslog. Rsyslog can do tls and compression but not sure if you can cache until the remote server is back up, you would have to be sending over tcp for it to be able to verify. It can do tcp but I don't know if it has built in mechanisms to cache until the remote returns. The best way to handle it with just rsyslog is to have multiple syslog servers (Graylog) to send to and then they store in their backend (Elasticsearch in the case of Graylog).

@Pete-S said in DNS woes: If I understand correctly, DNS propagates everywhere anyway so what difference does it make? Or are the DNS records not cached/replicated? It does, and they do. Propagation, caching, etc. all happens with DNS. But that doesn't mean that you don't still want your master DNS to be screaming fast, globally distributed, highly available, etc. If your DNS goes down, most DNS providers (Google, etc.) will known almost immediately and see your infrastructure as offline as part of their security system.

@travisdh1 said in How well does webdav work on windows clients?: @dbeato said in How well does webdav work on windows clients?: @travisdh1 said in How well does webdav work on windows clients?: @dbeato said in How well does webdav work on windows clients?: Sometimes you can find slowness and some other issues with WebDav in Windows. If the WebDav Server is in Linux like NextCLoud it works well. There is a big difference in how the speed feels between Windows 7 and Windows 10. Windows 7 had some bugs that made it dog slow at times. SharePoint I think I found the issue ;-P Microsoft all around

We use ghost adapters to allow EDID hi res with no head attached, I wonder if there is one that forces 640x480? I'll search around...