Tag Info

New answers tagged

0

I compared s3fs with riofs, and almost switched because of noticeably better performance. Problem is riofs is still not updated to v4 signatures, which means it won't work with Frankfurt or China s3 buckets. According to the owner, an update is on the way. If you don't use Frankfurt or China, riofs is a hands down better option.


1

AWS has a variety of different storage options. Off the top of my head these include: Local magnetic disks (ephemeral storage) Local SSD's EBS (essentially SAN/NAS) EBS with Provisioned IOPS AWS has a lot of different options for you, including the ability to pay them more for better IO performance. You can also get high IO performance using SSD's ...


1

You said: My sshd_config file has two changes from the default UsePAM was set to no and PasswordAuthentication was set to yes. I don't think that had anything to do with it. Actually that almost certainly is your problem. On a Linux system with PAM, attempting to login bypassing PAM is not guaranteed to work, and generally does not. Set UsePAM yes and ...


1

I would say there are two approaches: Use the AWS API to determine the IP of all group members and then do SSH. -- This itself is possible on different levels, ranging from a shell script using aws-cli (describe-auto-scaling-instances and describe-instances) to a more sophisticated setup e.g. with Python boto and Fabric. Have all instances register ...


0

I would take a capture on the client and one on a backend server at the same time. If you analyze the client capture and the delays seem to be server side, but you analyze the server side capture and the delays seem to be on the client side, then it's probably something in the middle introducing delay. To find delays in a pcap, check out a video I made that ...


0

I had this issue when I was trying to login from a NAT instance that I set up. The NAT instance is not something I can specify (to the best of knowledge) what OS to use, and I presume that it is using AWS CentOS. Anyways, I was always being asked for a passphrase when trying to connect to an instance on my private network. Here was how i resolved it, ...


0

It seems like this has been done on Win2008-R2, according to http://support.rightscale.com/09-Clouds/AWS/FAQs/How_do_I_shrink_an_EBS-backed_HVM_Windows_AMI%3F : Launch an instance directly from the image you want to resize, not using a Server Template. Be sure to associate an SSH key for which you have the private key material handy so you can log in. ...


0

To see what package contains a command, you can use sudo yum search unar. If you still can't find it, it may not be present in the repos you have enabled and you might need to enable additional repos or install that package manually or build it from source - just be sure any repos you add are trustworthy.


1

To be honest the cause could be dozens of different things, you really need to systematically profile each component and narrow down where latencies are being introduced, rather than trying to guess where the problem is. Having said that, here's two things that come to mind: ELB does not scale instantly If you're using ELB (which I'm assuming you are) you ...


1

Be sure to either add another user to sudoers first or set a password on the ubuntu account (I would advise the former). Failure to do that could lock you out of sudo on your instance! You may notice that the ubuntu user is not actually listed in /etc/sudoers Check /etc/sudoers.d/90-cloud-init-users Be sure to edit any sudoers file with visudo. e.g. ...


1

Three possibilities: Your VPC route table for the subnet is missing an entry pointing 0.0.0.0/0 to the IGW Your instance was launched into the default or wrong security group that is missing the incoming ssh rule You have a NACL on the subnet that is blocking the traffic


1

Can we mirror one EC2-Instance data to another? You can mirror data yourself using software like rsync. You could also take advantage of Amazon S3 or Amazon Elastic File System as a central location for your data. You have other options too, these are just a few examples. In the instance A I’ve created simple PHP file call “test.php”. This sounds ...


1

Can we upgrade versions in multiple EC2-Instance at the same time? Put simply, yes. You're responsible for everything at the Operating System level (including upgrades, software, config). You could use configuration management systems to manage a fleet of servers, or some form of orchestration to perform actions on your fleet at the same time. Here ...


0

Some instances come with more packages installed than others. It may be that whoever created this AMI they assumed people would want PHP pre-installed on it, or that some other package that they wanted to have preinstalled on it required PHP as a dependency.


0

I had to tweak the following knobs (in /etc/ansible/ec2.ini): # This is the normal destination variable to use. If you are running Ansible # from outside EC2, then 'public_dns_name' makes the most sense. If you are # running Ansible from within EC2, then perhaps you want to use the internal # address, and should set this to 'private_dns_name'. The key of an ...


1

Second option is to replace a lost key pair on an EC2 instance as long as it's an EBS backed instance. The following link may help: replace-lost-keypair


0

Amazon EC2 does not have automated mirroring of EBS volumes. So when you modify data on EBS volume A, you need to repeat it on EBS volume B. There are some ways to use network drives to share data between EC2 instances. In these cases, you have an external server hosting a network drive that each of your EC2 instances connects to. NFS is one example, Amazon ...


0

You need to be sure that cloud-init is not running during this time. Otherwise you need to delete it again. This is especially true if you try to delete /var/lib/cloud/ inside user-data. In this case you should use something like: echo "rm -rf /var/lib/cloud/*" | at now + 1 min at the end of user-data script.


0

What exactly do you expect to happen? EC2 instances are separate VMs with their own filesystems. To synchronize data across multiple EC2 instances you have the same options as with any other server/VM solution: create custom boot device (AMI) with you application, use a deployment process that copies to all instances, or use some shared file system (setup ...


0

You can create A/B with a custom user-data: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html Either that, or create a new AMI. http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami-ebs.html


2

I suspect you may be running too high load for a t2 instance type. These instances are given cpu time based on a credit system, and t2.micros are have the least overall cpu capability in the instance class. These credits are accumulated at a rate of 6 per hour on a t2.micro, which gives you the ability to burst to 100% of the cpu core for 6 minutes. All ...


3

You can absolutely launch an EC2 instance without an ELB in front of it, but I would also do the following: Associate an Elastic IP (EIP) so that you have a static public address OS-based security/firewalling software since this instance will be directly accessible from the internet. I have to ask, though, how cost-averse your customer really is. If ...


5

Your certificate is using the outdated SHA-1 algorithm, which because of security risks Google Chrome now warns about. http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know https://shaaaaaaaaaaaaa.com/check/aws.hatchlings.com ...


3

ELB is a load balancer. It's only worth using if you have multiple back ends, or if your back ends are in an ASG. Neither of which apply to your situation. Your backend server is perfectly capable of terminating connections directly. That said, if your client is cost-averse, AWS is not the solution you should be using. Instead, consider using VPSes from ...


0

ttportal.co.uk is currently delegated to a set of four name servers (the below according to nsd.nic.uk which is one of the servers authoritative for uk as well as co.uk): ;; AUTHORITY SECTION: ttportal.co.uk. 172800 IN NS ns-2015.awsdns-59.co.uk. ttportal.co.uk. 172800 IN NS ns-1407.awsdns-47.org. ttportal.co.uk. ...


0

AWS announced Elastic File System so this is now possible.


0

Just to clarify: once you've ssh'd into your bastion host, you need to ssh into the NAT host as user ec2-user. This trumped me up a bit, since normally the ubuntu user is ubuntu on AWS. So I did: laptop> ssh -A ubuntu@ssh_bastion ssh_bastion> ssh ec2-user@nat_private_dns_or_private_ip Also, remember that your ssh_bastion should have an outbound ...


1

You can also consider seting up Cross-Region Replication, which allows you to both copy and keep in sync data between regions https://aws.amazon.com/blogs/aws/new-cross-region-replication-for-amazon-s3/


0

Why not just use Apache + mod_proxy on the linux box? Should make this task quite easy if you setup separate rules per IP


0

Alternatively, if, like me, you aren't even using ssl, you will still get this error message because using ssl is turned on by default. In that case, turn it off! Here's an excerpt from config.d/ssl.conf: # SSL Engine Switch: # Enable/Disable SSL for this virtual host. #SSLEngine on SSLEngine off


0

I was in the same boat after aborting a yum update that was working on glibc. Dennis Kaarsemaker pointed me in the right direction. The OP didn't mark any of the answers as accepted. Just to corfirm which parts worked in my case: The package-cleanup --cleandupes wouldn't comply and complained about packages that were protected. The rpm --rebuilddb ...


0

As I tested, there were some bootstrap data in /var/lib/cloud directory. After I cleared that directory, User Data script worked normally. rm -rf /var/lib/cloud/*


1

You cannot rename a security group but you can copy it into a new one. On the AWS console go to EC2 -> Security Groups -> Select the SG -> Click actions -> Copy to new. Give it a name and description that suits your taste. After that you can associate this security group with your instances (making it redundant with the old one). Finally, dissociate the old ...


1

NO, ephemeral storage (mnt) is not charged but ephemeral storage will not store data permanent i.e. when you will reboot/stop your instance, ephemeral storage will be deleted, So only use ephemeral storage for temporary data.checkout this for more detail https://skeddly.desk.com/customer/portal/articles/1346918-ebs-backed-versus-instance-store


-2

Are there any performance benefits for creating a MySQL cluster. Not if it is a Master/Slave configuration. If you do a Master/Master or multi-master configuration, the performance benefit will be similar to load balancing web servers, but you'll have to account for replication network traffic if you want to maintain the integrity of your data. This is ...


1

the way i manage this scenario is to use the UpdatePolicy feature of the AWS::AutoScaling::AutoScalingGroup object in cloud formation. when the cloud formation stack is updated it will manage the cycling of the instances. some references. http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-as-group.html ...


1

This playbook is not idempotent, the shell task is going to run every time the playbook is run, you need to supply a creates argument to that task. In the current version of PM2: var scriptFile = '/etc/init.d/pm2-init.sh', script = cst.UBUNTU_STARTUP_SCRIPT; Also, the use of sudo is redundant, as it is already specified globally above, and the default ...


1

You cannot share an EBS volume between two active instances. You can certainly create an architecture that shares a datastore using any number of solutions, including fileshares, CM platforms, AWS S3, etc.


2

This really needs to be asked of Amazon support, but yes, there would be an effect. Machines in the same VPC do share infrastructure, namely IGWs, which could get overloaded during a DDoS. This could lead to poor performance for other non-related sites hosted out of the same VPC.


1

If it's not attached to a running instance, yes, something like 0.5-1c/hour depending on the region. See http://aws.amazon.com/ec2/pricing/


2

You can load any kernel module you want on HVM instances. By default, most newly created instances are HVM, and on the free tier, only HVM instances can be used. But you may have trouble on PV instances, as these require a special Xen-aware kernel which is sometimes booted from an AKI outside the instance. This is especially true of very old instances ...


1

Yes. The Linux kernel in a cloud virtualisation environment is still just a kernel.


0

Check if your original instance supported para-virtualization or HVM. This value can be found on your original EC2 instance's description section as 'Virtualization' and also on the AMI's description section as 'Virtualization type'. When making AMI using the EBS instead of the EC2 instance, this value could be set incorrectly (the values must match so ...


-1

in order to access your AMI's after you created and image of it, it is created and stored in your AMI'S you will find this when you are launching a new instance to the left side of your page , you can see options like community AMI, market place..etc. over there you must find a column "MY AMI's" and there you will find your AMI which you created.


3

In general, I would never make a domain controller internet-accessible. If it was me, I would create a site-to-AWS VPN. AWS supports VPN connectivity to most industry standard stuff (Juniper, Cisco, many others). In the VPC dashboard: Create an AWS virtual private gateway Define your customer (on-site) gateway Create a VPN connection to associate the ...


0

The current EBS Snapshot capabilities for Windows Instances are explained here: http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ebs-creating-snapshot.html In order to get a consistent snapshot, you have to pause writes to the volume long enough for the snapshot to complete. Typically, this means you that you have to unmount the volume. The AWS doc ...


2

It's not possible to launch a new EC2 instance with an existing EBS volume attached. Instead, attach your existing EBS volume after the new EC2 instance has launched. You have two options: Attach your existing EBS volume during the initial boot sequence of your instance. Using cloud init, you have an initial script run that attaches the volume. ...


2

Turns out jessie removed docker.io today and not all repos had updated when I did these experiments. To make things extra confusing, http.docker.net is really a broker service that sends you to other mirrors so EC2 was seeing one, up to date, mirror while my local box was seeing a mirror that still had docker.io available. Package history: ...


4

To do this, you'll need to configure an ELB that balances TCP, not HTTPS. If you do this, it will not ask you for a certificate.


0

Try using "ec2-user" instead of root. ec2-user@192.123.x.x And pem file is both public and private key. So, try saving it as a public key using puttygen.



Top 50 recent answers are included