2,223 reputation
314
bio website
location
age
visits member for 1 year, 3 months
seen 2 days ago

2d
comment Docker on osx - How would it help me?
Hi, this is more of an SO q., as you're using it for dev or test environments. The main advantage of docker is rapid setup/teardown in a config-file defined, isolated environment consuming only as much ram as the application uses (a benefit you don't receive because you've already dedicated the memory via vbox). It also does not need a big, dedicated disk file (VMDK or VDI) as it shares the local FS with the host by default, jailed (again lost because of vbox). The config style is probably conceptually like what you're used to with Puppet, but doesn't require other apps nor network access.
2d
comment Conditions for “mds cluster is degraded”
Generically (not ceph-specific), "cluster is degraded" usually means one of your peer-servers is slow to respond, not responding at all, or inconsistent and cannot be synchronized. What do your /var/log/ceph/*mds* logfiles have to say about it?
Dec
19
comment OpenVPN server cannot ping client (routing/iptables issue?)
Try turning the windows 7 firewall off or windows 8. Remember to turn it back on after you've re-run your server-to-client connectivity tests.
Dec
19
comment Share /home between datacenters
Mounting the same block device & filesystem, even RO on a different system is bad juju unless the filesystem driver understands the backing block device can change arbitrarily at any time. The block device could change and completely invalidate the inode cache and the VFS would happily read data that is no longer where you thought. Shared-disk aware filesystems like GFS2 and veritas can do that on DRBD or any SAN-like disk. I can't say for sure your small file performance will be acceptable though.
Dec
18
revised Use OpenVPN tun device for specific request
replace irrelevant node.js with policy-routing.
Dec
18
answered Configuring IPTables without connection tracking module
Dec
6
awarded  Nice Answer
Dec
2
comment IPv6 Stateless Autoconfiguration route advertisements
you don't turn radv off on the cisco router, just default route advertisement. The cisco should still advertise its link-local prefixes normally.
Dec
2
answered IPv6 Stateless Autoconfiguration route advertisements
Dec
2
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
For the interested, the bsd equivalent is chflags schg
Dec
2
comment Performance-wise, is a DNS Slave better to have than two duplicate Masters?
I didn't vote down (yet), but there are some basic questions you have not answered. What do you use the DNS for? Does it do dynamic updates? Are you doing a failover? For the most part, there is no reason not to set up a DNS slave for static DNS serving operations.
Dec
2
comment Sniffing packets coming out of “tap interface” when bridge connects to vlan tagged interface
It'd be on the switch.
Dec
2
comment Can't route back down ipsec tunnel from VPS
What does the system log say about ipsec status? Why is right= not set to the WAN IP of your router? Is this a point-to-point connection or do you intend to route other traffic over it because you're in transport mode and you might need to be in tunnel if you intend to use internal IPs.
Dec
2
answered Is there a netstat -s equivalent for windows?
Dec
2
comment Is there a way to connect a remote folder with local cache on OSX or Windows workstation?
Is there a WAN anywhere between a developer and the server? When two developers are working, do they reference the same files where one is reading file X and writing Y and the other is writing file X? If so, your opportunistic caching scenario becomes somewhat more difficult...
Dec
2
comment Sniffing packets coming out of “tap interface” when bridge connects to vlan tagged interface
It should appear on the tagged interface if your ICMP reply came back tagged. Have you verified your vlan routing?
Dec
2
answered Nginx config static files cache headers
Dec
2
comment Block EXE in a machine
use group policy to specify a program whitelist
Dec
2
comment iptables IP address (source and destination IP address) mangling
listen on 0.0.0.0 and it should grab all interfaces, all IPs. Then you can use the firewall to filter by allowed destination IPs. You could use NAT for this, but that tends to cause more problems than it solves unless you get it exactly right.
Dec
1
comment Dell Poweredge 2970 - Cheap subsitute/compatible RAM for lab env?
It's PC2-5300R ECC. Registered + ECC is important. Actual bus speed doesn't matter too much if it is lower than the RAM spec.