Recent content by obrith

  1. O

    Ceph Storage with OpenNebula or OpenStack

    We're running a production CEPH + OpenNebula (KVM) cluster - nothing mission critical yet though. All SuperMicro, compute and storage are separate machines. We're very happy with CEPH. We've made a couple pretty silly mistakes as we learned how to manage it, we've abused the crap out of it as...
  2. O

    EonNas and High availability with ZFS

    To avoid repeating myself, here are a few of my posts about Infortrend (note; not the same product line you're requesting but the most egregious issues were with how the company handled our issues):
  3. O

    Build a 100 TB Enterprice Class SAN for $50k?

    I hope you guys suggesting/using Infortrend are talking about their basic EonStor stuff - it's totally fine. Run away as fast as you can from their ESVA equipment and/or anything you expect good support on from them. We bought an "HA" ESVA (not cheap, btw) and it was the worst POS unit and...
  4. O


    We use Vipre on hundreds of workstations. It's MEH (which I sadly think is about the best you can expect). It has so-so detection rates (it catches the common stuff), OK management (with some awesome bugs where you eat 2, 3, 4, ++ licenses with one system sometimes - though they aren't...
  5. O

    Cable Internet (Is a local area network really private)

    On our Comcast Fiber 'Business Ethernet' DIA circuit the firewall blocks massive numbers of local IP addresses headed to our public NTP pool servers. I called them out on NANOG and half a dozen engineers talked to me about it for couple weeks or so, starting off with "FU, NO WAY!", fading to...
  6. O

    question about accesslist

    Your printer absolutely can be an attack surface (even just printing to it - many accept new firmware via a print job!). Make sure it's firmware is up-to-date.
  7. O

    How does bitdefender know if a password is weak?

    Passwords less than 15 characters are trivial to crack the hash on (IE instant) - it might as well be plain text on the machine. It's been a gaping hole in Windows security for a long time and no one seems to notice/care.
  8. O

    Anyone use ownCloud?

    We use it rather successfully as an FTP replacement at work. Relatively easy GUI, we set it to auto-expire share links after a week, wrote scripts to email managers what files in their employee's user accounts to make sure users don't put sensitive files there, and can allow anonymous/auth free...
  9. O

    Advice needed: server for 48 SSDs (professional project)

    So whatever is feeding the initial data to the drives is apparently SAS connected? That's a lot better than what I was envisioning... there are products that you plug bare SSDs into (and sometimes use outdoors) that record lots of data to them and then you're expected to take that bare SSD and...
  10. O

    Advice needed: server for 48 SSDs (professional project)

    This sounds like an awkward workflow. Do they screw in the drives to the hot-swap trays and then load them, copy, remove them, and repeat? I'm guessing the device they're getting their initial data from isn't using the same hot swap bays as any server solution like the SuperMicro. SATA...
  11. O

    Quick question: Can pfSense be booted & ran off of a USB memory stick?

    If you use good SSDs you can run a full installation with heavy logging just fine. I've had Intel 320 SSDs in a very large HA setup (~200mbps flowing through it during business hours protecting several networks including a public /24) that have been alive for a couple years no issue. That said...
  12. O

    ZFS cluster: anyone tried RSF-1?

    We have a license with our Nexenta. It works well in testing - we haven't had to rely on it in a failure (yet).
  13. O

    Supermicro - what's your experience?

    I find them more reliable than our HP servers and the VAR we buy from is far more reliable, kind, and reasonable with warranties - if I tell them a part is bad they ship me the part overnight immediately without hours of diagnostics or disagreements we often get from HP. They cost about half...
  14. O

    VMware license question...

    So we just got our renewal quotes from VMware... Not much change in pricing except they're telling us that our 2x VMware Essentials Plus clusters will now require us to also pay 2x support contracts for VSA to go with them - something we've never used, don't require, and don't want. It doubles...
  15. O

    ZFS ZIL Question

    I haven't tested the S3700 but (massively) "short stroking" the Intel 320's provided nearly double the I/Os when I set a few systems up a few years ago.