1,152 reputation
28
bio website deployable.co
location
age
visits member for 2 years, 6 months
seen Dec 5 at 11:22

Sep
18
comment Linux: How to get average CPU utilization of a process over specified period of time?
and they'll need to restart the tomcat process at the beginning of the load test, or subtract the TIME and ELAPSED value from the beginning.
Sep
18
comment iptables: combine SNAT with network remapping for OpenVPN
hmm yeah... sorry faulty memory needs replacing. ip rule add from 10.1.1.0/24 table myfancytable
Sep
18
comment iptables: combine SNAT with network remapping for OpenVPN
or you can route on src address directly without iptables ip route add 10.1.1.0/24 dev eth1 src 10.2.1.1
Sep
18
comment iptables: combine SNAT with network remapping for OpenVPN
It's more that you create a routing table and send marked packets there instead of the default system table. ip rule add fwmark 1 table myfancytable
Sep
18
comment iptables: combine SNAT with network remapping for OpenVPN
The source address or interface can be used in routing decisions. Pretty much anything iptables can mark on can be used.
Sep
18
comment iptables: combine SNAT with network remapping for OpenVPN
Do you want to be able to directly address all machines on the VPN networks? I.E Client 10.0.77.1 on VPNA to 10.0.77.2 on VPNB and back again. Or are you just trying to gloss over the overlaps with MASQUERADING so, for example, servers on your main network can talk to both?
Sep
17
answered Apache: Allow only certain http requests, deny all else
Sep
17
comment Apache: Allow only certain http requests, deny all else
Do you have application logic hosted on your Apache httpd server that you want to allow access to or are you using httpd as a proxy?
Sep
17
comment Move large (100GB) file to EC2 instance from my colo data center
@Matt it's network based storage but doesn't share your vm's
Sep
16
answered Move large (100GB) file to EC2 instance from my colo data center
Sep
16
comment Move large (100GB) file to EC2 instance from my colo data center
Those refer to LAN network speeds which will generally be well in excess of net bandwidth. I can pull 6-10MB/s down to a t1.micro instance off the internet. See epamcloud.blogspot.co.uk/2013/03/…
Sep
16
comment Move large (100GB) file to EC2 instance from my colo data center
are you doing this over a windows file share?
Sep
16
comment Allow SFTP and process running but disallow ssh for a single user
You probably need two users to achieve this securely and easily. One user with the sftp access Henrique describes, A second with a authorized_key file that will run the the specific command="" on login in the link of Roberts
Sep
16
comment Allow SFTP and process running but disallow ssh for a single user
OP needs to execute a command as well. This config won't allow that for user1
Sep
16
comment Mysql-proxy randomly overloads the system until I kill it
MySQL Proxy is still considered an Alpha release. Report it as bug bugs.mysql.com
Sep
16
revised Chef 11 node attributes available and ordering
refined answer after update from op
Sep
13
revised ec2 linux instance root access
added some terminal detail
Sep
13
comment Scp fails in one direction for admin but is successful with root user
Ok. When you ssh to the box as adm do you get any output on your screen? is there anything custom that has been added to this output?
Sep
13
comment Chef 11 node attributes available and ordering
So the same error is thrown when you use that code? You might need a default attribute defined in the cookbook you are reloading for chef to load the node override. default[:appname] = 'default' or whatever suits your code. I never got into the gory detail of what the reload does because it just worked for me, but I tend to define everything in the attribute files.
Sep
13
comment How can I add an ephemeral disk to an existing EC2 instance?
Changing the instance type (m1, m3,c1, c3, m2, t1 etc) will generally move your instance to physically different hardware which is in a different location in Amazon's network/DC. Internal Amazon IP's are assigned by DHCP and will change. From what I've been led to believe their network subnetting is per rack or smaller, at least for the small instances. There are types you can swap between where you can be sure of a hardware move, e.g cg1