397 reputation
410
bio website florin.myip.org
location California
age
visits member for 5 years, 3 months
seen 2 days ago

I don't use primary optics which are not made by myself.


Nov
15
comment Security risks of PermitUserEnvironment in ssh
I filed a bug report with the OpenSSH project, asking them to add a few words to the sshd_config man page, clarifying this issue: bugzilla.mindrot.org/show_bug.cgi?id=2317
Nov
15
comment Security risks of PermitUserEnvironment in ssh
From your answer, I take it that I should not lose any sleep about security implications of enabling this option if all my ssh accounts provide full bash access (no sudo). Correct?
Nov
15
comment Can Bash Tell Me Which SSH Public Key Was Used To Authenticate?
Be aware that enabling PermitUserEnvironment has some security implications. Read man sshd
Aug
20
comment Monitoring / metric collection for system collectives that change a lot in time (a.k.a. cloud)
It may look too broad, but that's exactly the scenario I'm facing - doing things in a provider-independent fashion, as much as possible.
Aug
20
comment Monitoring / metric collection for system collectives that change a lot in time (a.k.a. cloud)
OS metrics, application metrics. Everything you would collect with Munin.
Aug
19
comment Monitoring / metric collection for system collectives that change a lot in time (a.k.a. cloud)
I made an edit to the question - no, I'm talking general case, any cloud provider, not just OpenStack.
Apr
10
comment store log files in the cloud, when servers are not in the cloud
That also sounds like a doable thing, thank you. I'm concerned about price. It's up to 2.5TB of compressed logs (for a 5 year interval). Just storing the zipped files in S3 is cheap - but then of course it's hard to search. I really need to figure out how much more expensive is it to keep data in large S3 volumes.
Apr
10
comment store log files in the cloud, when servers are not in the cloud
Thank you! We've talked about using Splunk before, so this combination might be acceptable (since it's sort-of in the same ballpark). Additionally, it sounds like it might also work and be useful after we've migrated the whole thing into the cloud. Question from someone not familiar with ES: in addition to indexes, I'd have to also store the actual data in S3, right? And that might introduce some overhead? Also, is the data stored in compressed form?
Feb
12
comment How to keep: daily backups for a week, weekly for a month, monthly for a year, and yearly after that
I actually don't have separate directories. It was written to dump files into an S3 bucket. Once everything is in one place, the total amount of logic that you need to implement is about the same, no matter how you go about it.
Feb
12
comment daily, weekly, yearly backup script
Take a look at my script: serverfault.com/questions/575163/…
Feb
12
comment How to logrotate daily backups?
Take a look at my script: serverfault.com/questions/575163/…
Aug
29
comment Nagios: parent host is not supressing recovery messages from child host services
@Keith - that's interesting and makes sense. Something else is messing with the logic then. I'll have to look into it. Thanks.
Nov
9
comment Is there such a thing as too many IP addresses?
@DLux I was assuming a routed network, not a flat topology. Look at the examples I gave, those are usually physically separated networks, with routing in between. If it's flat then you don't have to fragment it (but you still can if you choose so).