706 reputation
313
bio website
location
age
visits member for 2 years, 1 month
seen Apr 11 at 15:10

Aug
20
comment Risks of Network Partitioning When a Split Brain Creates a Security Flaw
For the availability layer above, one can do double internet connection and redundant servers, and this does the job most often, when the data is flowing upstream, but distributed I really think this is just an headache, I prefer to make it a tree, however this is not easy
Aug
18
comment Risks of Network Partitioning When a Split Brain Creates a Security Flaw
Like MySQL replication would work like this, but when you query MySQL in US and Japan, you need to lock the record in every location, and re-synchronise after shutdown.
Aug
18
comment What's so wrong with the ML350 G5?
There is no difference except the performance. Also check if this G5 will handle SATA III drives > 2TB with firmware upgrade.
Aug
18
comment Risks of Network Partitioning When a Split Brain Creates a Security Flaw
It is possible when one client does it from US and another from Japan. Two nodes can be geographically displaced and fully addressable in this case. When doing such money transaction, the easiest is to use central memory - SQL with transactions, and if it's unreachable, then it's failed.
Aug
18
revised Risks of Network Partitioning When a Split Brain Creates a Security Flaw
added 249 characters in body
Aug
18
comment /proc/loadavg shows incorrect huge values
This is Cloud Linux kernel for Centos 5, you could report it there, as well what hardware are you using.
Aug
18
revised Risks of Network Partitioning When a Split Brain Creates a Security Flaw
added 92 characters in body
Aug
18
answered Risks of Network Partitioning When a Split Brain Creates a Security Flaw
Aug
17
comment can Snort be installed on VPS?
ModSecurity with IPTABLES would be better solution, as you are not passing any high bandwidth traffic snort is designed for (tap mode).
Aug
17
comment Why is ACL not working correctly with this setup?
Are you using extends? lsattr /srv/http the "e" should show you this. Or, you have it as ext3 or you are missing extended attributes.
Aug
17
comment Unbelievable issue : a single apache process takes 4 GB of memory
No way, can you double check it with ps? Seriously, there is only mod_php can do this, and memory limit in php.ini below 3GB should resolve it.
Aug
16
comment How to tune Linux kernel to withstand DDoS? (HAProxy)
ps. 5.000 connections per sec is only 15mbps. I want to make it working on high load of 500MBps which network card can handle.
Aug
16
revised How to tune Linux kernel to withstand DDoS? (HAProxy)
added 380 characters in body
Aug
16
accepted HP is scanning my vulnerabilities, is this OK?
Aug
16
comment How to tune Linux kernel to withstand DDoS? (HAProxy)
No, I am not missing the point. I dont want to modify HAProxy. I dont want to move target of DDoS. I am not chasing vaporware. I want to do it on Linux and not on switch. I have to do it on both. It's simple solution - cut the network connections to HAProxy at some limit.
Aug
16
revised HP is scanning my vulnerabilities, is this OK?
added 70 characters in body
Aug
16
comment HP is scanning my vulnerabilities, is this OK?
Well I can opt-out by blocking it.
Aug
16
asked HP is scanning my vulnerabilities, is this OK?
Aug
16
comment How to tune Linux kernel to withstand DDoS? (HAProxy)
Placing it at various locations with different infrastructure requires coherent and working resilience in the server OS. If you run just a single cluster in same kind of infrastructure this is not problem.
Aug
16
comment Using nginx / varnish for SSL and Non-SSL pages
And what kind of application stack and database are you using? Do you have application cache?