Sysadmin

reddig33 , in ICANN proposes creating .INTERNAL domain

.local already exists. More idiocy from ICANN.

pupbiru ,
@pupbiru@aussie.zone avatar

.local exists for a very specific reason and it’s not meant to be used by regular DNS… people use it for alternate things, but it’s reserved for mDNS

if .internal were to be added, we could start using that instead of overloading!

LordCrom ,

.local is a bad choice especially if you have any MAC hosts on the network.

There is an RFC about that, but I’m too sleepy to goook it up

theit8514 , in ICANN proposes creating .INTERNAL domain

If only they had done this with .local ages ago. Still, it’s a nice change, but I doubt my company will adopt.

breadsmasher ,
@breadsmasher@lemmy.world avatar

Just out of curiosity, does your company use a different TLD or something more arbitrary/just an IP?

mozz ,
@mozz@mbin.grits.dev avatar

We broke .local, pls give another chance, we promise we'll be responsible with .internal tho

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

For real. Once Google and others started killing DNS lookups in mobile devices, think about how many legacy networks had to get rebuilt.

Maybe we could all just make up our minds.

mozz ,
@mozz@mbin.grits.dev avatar

Honestly the whole fabric of the internet, how email/SMTP and DNS and things work, is just a relic of an earlier time. I honestly think the money-men have their hands deep enough into the workings at this point that you wouldn't be able to create something like those things today and have them go anywhere. I'm surprised that it all still works as well as it does.

c0mbatbag3l ,
@c0mbatbag3l@lemmy.world avatar

You mean the OSI and TCP/IP models? Or just specifically TCP/UDP ports?

mozz ,
@mozz@mbin.grits.dev avatar

No, I was talking about the shared infrastructure. SMTP, DNS, ICANN, things like that require a level of cooperation and shared investment in the whole thing working well, not really because anyone's going to "win" the business game by running it to their particular advantage. That's a very alien way of thinking on the modern internet. The equivalent today would be something like massive publicly available caching web proxies that anyone could use as a big reverse-CDN to speed up their web access that were just kind of provided to everyone, government-funded, just sitting out there as a public resource. You know, like communism.

I've heard network engineers say they had a lot of trouble talking to their bosses about "peering" (setting up routes between two ISPs that happen to have operations close to each other, so they can hand traffic off to each other if it'd be more efficient to use the other guy's routes and both networks get more efficient to operate). They said they had a lot of trouble explaining the concept to the business people. They pay us for service? Fine. We pay them for service? Fine. We provide service to each other and both of us benefit without any money being involved? Plt... bzzt... I give up, I don't get it. Who gets paid? Why do we do this?

They've lost sight of the idea that it's a good thing to set up the world in a nice well working way (for everyone, including yourself), and just focused on how they can make their check bigger even if there's no point, or even if everything gets worse as a result.

MSgtRedFox , in What crazy or unusual things are you guys working on?
@MSgtRedFox@infosec.pub avatar

Running personal active directory hybrid sync with azure, hybrid exchange, a separate red forest for management of vSphere infrastructure, using saltstack for Linux config management. ~50 VMs and containers.

MNByChoice , in What do you use to track BMCs/KVMs/IPMI?

There are inventory programs, many of them, that will handle keeping system information updated.

I am posting to say that I tend to set the IPs to match with a known offset.
For example:
192.168.5.12 is the host.
192.168.105.12 is the BMC.

A wiki is the great for documentation of use, links, and files.

d00phy , in What do you use to track BMCs/KVMs/IPMI?

This seems like a good use case for a cluster manager. I’ve used xCAT in the past and recently Lenovo has an interesting project called Confluent that includes a web interface. A paid option would be Bright. These are made to manage hundreds to thousands of nodes.

nightrunner , in What do you use to track BMCs/KVMs/IPMI?
@nightrunner@lemmy.world avatar

Look into getting a CMDB and keep track of all of your hardware. That can store the hostname / IPs of your KVM / OS or virtualization layer, vkernels, storage adapter IPs, your vCenters and so on and so forth. If your data is getting so big that spreadsheets are getting tough to manage, then you probable need a more enterprise method of storing it.

nightrunner ,
@nightrunner@lemmy.world avatar

Examples: ServiceNow, Connectwise, Jira Service Desk

geekworking , in What do you use to track BMCs/KVMs/IPMI?

Check out NetBox. It is a free open source datacenter inventory management and IP address management tool. It will let you catalog all of your physical assets along with the network assignments.

MystikIncarnate ,

+1 for netbox.

Administrating a bunch of network devices and/or servers, etc… Netbox is the way.

haywire7 , in What do you use to track BMCs/KVMs/IPMI?
@haywire7@lemmy.world avatar

Thinking out loud but wouldn’t chrome bookmarks for the URLs backed up to a file/account work better than a sheet of it’s just for access?

As we have mostly Windows based machines we look after everything is in Pulseway or TeamViewer. Routers and misc tend to be on specific ports on their connections IP and we have a shared Keeper repository for passwords and notes.

The company I work for has been buying other companies and customers like is silly season in the last year so we are digesting all the extra crud that came with it and trying to streamline half a dozen CRM, RM and Monitoring systems at the moment.

UID_Zero , in What do you use to track BMCs/KVMs/IPMI?
@UID_Zero@infosec.pub avatar

We use a separate subdomain. For example, all our hosts are joined to the ad.example.com domain, so remote management would be the same hostname on ilo.example.com.

We also have all HP hardware (at least for servers), so we have everything in OneView. Other devices (NetScaler SDX appliances, other stuff with management interfaces) just have their interface in that subdomain and it works out great.

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

Did you ever use HP SIM? I guess it’s not one to one features, but newer. Curious if it’s worth the time.

UID_Zero ,
@UID_Zero@infosec.pub avatar

I have not. I don’t handle our hardware much, so I’m not entirely sure what we’re using.

Chefdano3 , in What do you use to track BMCs/KVMs/IPMI?
@Chefdano3@lemm.ee avatar

At my company, we just have a standardized remote management suffix that we just throw at the end of the hostname, so we don’t actually track the urls. For example the server is named frosty, the url would be frostysuffix.

Then we track our servers with either an outdated access database that nobody updates, my locally saved personal Excel sheet, or by logging into one of the 4 different health checking applications that each monitor a piece of the infrastructure. (This part actually really sucks and I hate it.)

Arcayne , in What crazy or unusual things are you guys working on?

Idk if it counts as crazy or unusual, per se... but, another OpenStack deployment.

kylian0087 , in What crazy or unusual things are you guys working on?

Properly setting up a full AD domain coupled with rhel IDM and SSO. Getting them all to play nice together is a bit of work to say the least.

slazer2au , in What crazy or unusual things are you guys working on?

Containerise oxidised and syslog-ng because I am annoyed that we have no automated way to update the config of those with our current automation.

comador , (edited ) in VMWare FUD. Anyone moving away from it professionally?
@comador@lemmy.world avatar

I manage 30 Esxi hosts with around 800 VMs currently on vSphere Enterprise licensing. Our company is preparing for the worst case by employing a 3yr plan involving:

  • Upgrading all perpetual lics still under contract to vsphere 8

(So we can run on unsupported vsphere 8 for up to 3yrs. if needed or until a resolution is found)

  • Assigning members from QC, Cyber security and Systems as an exploratory solutions planning group who report to the CIO and CTO.

(So we can explore different hybrid solutions, assign them for evaluation and give feedback based on those findings annually)

  • Hiring a Reseller partner of ours to do an audit plus an impact analysis in moving our environment from VMware to one of the exploratory solutions planning group recommendations.

(My company fancies getting ‘non-biased’ opinions from external sources, so we tolerate it)

  • Building active-active, multi -master, active-passive and active-failover hybrid solutions including those with SaaS vendors for our highest value systems.

(While expensive to do, this option gives us a clear nuclear level fuck you to VMware should pricing become too outrageous and we decide to pull out of renewal)

In the end, we will probably give VMware a 3yr probation period, regardless of cost and have a clear migratory path before that time should we decide that VMware’s TCO is no longer viable.

Mautobu OP ,

Definitely the best thought out plan I’ve seen yet. Solid.

phanto , in What crazy or unusual things are you guys working on?

I was trying to get yacy working in a tiny container, but the dang thing kept crashing after indexing about 500,000 sites. Yacy is like a peer to peer web crawler. Too busy to dig into it and figure out why.

possiblylinux127 OP ,
@possiblylinux127@lemmy.zip avatar

You did this for work?

phanto ,

Nope, just for fun.

possiblylinux127 OP ,
@possiblylinux127@lemmy.zip avatar

That makes more sense. I think self hosted search engines are a interesting idea but they are hard to make work usually

e_t_ Admin ,

I've tried getting yacy to work on two separate occasions. I've thrown generous resources at it but never had a satisfying experience.

phanto ,

So it’s not just me. I watched its memory use rock slowly up until it ran out, then it died.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • [email protected]
  • All magazines