@MSgtRedFox@infosec.pub cover
@MSgtRedFox@infosec.pub avatar

MSgtRedFox

@[email protected]

Husband, Father, IT Pro, service.

If I ask a lot of questions, I might understand why.

This profile is from a federated server and may be incomplete. View on remote instance

Where to put reverse proxy?

I currently have my reverse proxy on my NAS. That means I forward all of my 443 HTTPS traffic to my NAS. I am using OpnSense for my router, and there are several options for reverse proxies on that. Everything works the way it is now, but I do wonder if it would be “better” if I moved all of the reverse proxy stuff to my...

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

Is this for internal clients?

If no, do you need unauthenticated public access to that?

Would you consider VPN instead?

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

For real. Once Google and others started killing DNS lookups in mobile devices, think about how many legacy networks had to get rebuilt.

Maybe we could all just make up our minds.

What do you use to track BMCs/KVMs/IPMI?

I manage hundreds of servers at work. They each have a BMC (remote power on/off, reset, KVM, etc) and we need to use those features frequently. I’ve been using a Google Docs spreadsheet to track their URLs, what each box is used for, specs, etc but it feels like a dynamic web app would be better for this purpose. Does anyone...

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

Did you ever use HP SIM? I guess it’s not one to one features, but newer. Curious if it’s worth the time.

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

Running personal active directory hybrid sync with azure, hybrid exchange, a separate red forest for management of vSphere infrastructure, using saltstack for Linux config management. ~50 VMs and containers.

Truenas failover server

Hi, I have two Dell T110 ii. One, with more ram and slightly faster CPU acts as main server. I have it running as NFS server, one VM with a couple of services and two apps (nextcloud and immich). Happy with the setup but worried about hardware of main server failing given age. So I have replication set up (pulls from slave to...

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

The answer to this is a little more dependent on what you have running on your primary. If it’s solely a file share, then yes. Rsync can be used to simply mirror your pool from one host to another, effectively making a mirror copy.

If you are running applications like jails, plugins, etc, then this answer can sometimes become more complex. Sometimes those applications, jails, whatever only need to have their files copied, which might mean you have to create the application on your backup and then restore the files.

Certain applications that are more complex are affected by a concept called crash consistency. If something uses a database or vm that’s reading and writing, when you copy the database it may not be consistent meaning there are things in the middle of being read and written. And that case you needed to have the application stop finish all of its operations and then copy the files. This is likely more complex for may not be applicable to your situation.

If you want to ask specific questions about restoring applications, jails, VMS on trunaz, I would suggest hitting up the trunez community forum after you read the manual a couple of times, they’ll eat your lunch if you ask a question that could be simply answered by reading the manual

MSgtRedFox OP ,
@MSgtRedFox@infosec.pub avatar

Well, partly when they were forming the VMware connection. I use VMware stuff in my lab and it’s one of my main focuses, so I figured I’d learn it.

I’ve also never used ansible or the other that escapes me now.

You’re not wrong though, I’m not a python or programmer guy, and all their documentation expects that you already know both their product and python, a lot.

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

Peotectli makes a small appliance.

Dell thin 1050 or 5010 extended has PCI slot.

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

No, not really. You’re going to want to read the TrueNas forum primers for ZFS and vdevs if you haven’t already. It’s critically important.

The data parity, error correction, and rebuild is within the zdev. If you lose a drive in the mirror, it’s rebuilt from the other drive in the mirror.

If you lost a disk in a z1 vdevs, it’s rebuilt from the other drives in the set.

A key concept of there is no parity and error correction during the period of a loss of a drive in a mirror or z1 until the resolver is complete. That’s why there’s z2/3/… Or you can create mirrors with more than two disks. Obviously some trades on capacity.

The rebuild speed is more about the drive size. Spinning drives can only write so fast, doesn’t matter how many other disks in the vdev. 4TB is long time, 12TB+ is eternity. SSD, much faster.

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

Short of, yes.

If you have two 8TB drives in mirror, oddly, ZFS doesn’t move the existing data when you add a second vdev of two drives. All newly written data will be stripped across both sets. If you want your existing data stripped, you have to move it back on.

As for rebuild(resilver), the data on the other device in the vdev and CPU power rebuilds the missing data.

If you have less data on each vdev, then only then could you consider it faster than if the vdev had more data on it. You are basically making the point that restoring less data is faster than more data.

People usually end up with more data as they expand a pool. This makes rebuild slower.

If you plan on lots of data, or want more protection, use z2. If you need performance like hosting VMs or databases, then use mirrors.

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

NUC is good choice. Cheaper is eBay Lenovo M900s. You would just have to buy more to max same memory and CPU.

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

I’m using an APC 3000 that I got with no batteries.

Your choice should depend on load and needed run time. Mine is around 1200 watts 😮‍💨, so I need higher VA rating.

I also took out the stock 12 amp hour batteries and I use much larger ones. Don’t consider that unless your unit is managed, actively cooled like having fans, and can do thermal shutdown.

People have tried this on the cheaper home use products and burnt their house down because the cheap products are designed for the battery to die before the unit gets so hot it fails and burns. Then some kid extends the run time way past that with car batteries. 🔥

MSgtRedFox OP ,
@MSgtRedFox@infosec.pub avatar

I just tried Jerboa for Lemmy on my phone. It immediately crashes, 😕. I read the part that says we’re busy working on all the other Lemmy stuff, so learn compose and fix it yourself 😳.

I developer, I am not.

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

I moved up to G8s a while back. 3 DL360G8 for ESXi hosts, and a DL380G8 for TrueNAS SAN host. Downgraded one of the old ESXi hosts (360G7) to backup server. With 5 servers running, it’s not quiet. One running isn’t that loud, but I wouldn’t want it on a common space still :)

MSgtRedFox ,
@MSgtRedFox@infosec.pub avatar

I did not change the systems in anyway other than any HP firmware updates I could get to most current.

360 is dual socket 1U. 380 is dual socket 2U. 580 is quad socket 4U

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • All magazines
    •