Reputation
10,694
Top tag
Next privilege 15,000 Rep.
Protect questions
Badges
1 22 49
Newest
 Necromancer
Impact
~1.1m people reached

Apr
14
comment Server Requirement for Android Application
Start with a small VM. Monitor it. Grow when you have more traffic.
Apr
1
comment saslauthd running in segfault after some time
In worst case you need to restart only the process you need to debug.
Apr
1
comment saslauthd running in segfault after some time
In recent distributions you can use prlimit to change the limit for a running process. In some older ones you could write into /proc/<pid>/limits. Otherwise you can use ulimit command, or edit /etc/security/limits.conf. you need to change the core size to unlimited .
Mar
22
comment saslauthd running in segfault after some time
Which OS, distribution and version are you using?
Feb
21
comment Forward differing hostnames to different internal IPs through NAT router
Pound is designed to be a reverse proxy. It is optimized only for this use. I did not used it as the apache performance was acceptable for our traffic.
Feb
17
comment Passphrase-less ssh keys on a puppet master?
You should read about asymmetric encryption to be able to understand.
Feb
17
comment Passphrase-less ssh keys on a puppet master?
Private keys should not leave the host where they were generated. They must not be added to a git repository, public site or shared with someone.
Feb
16
comment Passphrase-less ssh keys on a puppet master?
You can sign any file with GPG. Why not SSH keys? You sign them so that you know no one changed them and that you are trusting them.
Jan
11
comment Can't connect to WebServer inside (Vagrant) Virtualbox
Yes, if you disable NAT. But then to give access to Internet for the VM, you need to add a static route on your router and you need to enable routing on your host machine. Another solution would be to put the VM in the same network as your host and enable bridging between VM and the hosts NIC.
Jan
11
comment Can't connect to WebServer inside (Vagrant) Virtualbox
Check also the Windows firewall inside VM.
Jan
11
comment Can't connect to WebServer inside (Vagrant) Virtualbox
Because you have NAT for that private network. Any incoming packets are allowed only for existing connections. You need to punch holes in that NAT to allow incoming traffic for VM.
Dec
10
comment Why is server FIN'ing after starting TLS session?
Use Wireshark. It has a protocol dissector for TLS. If it doesn't recognize the stream as SSL/TLS, you can change this with: "Decode As..." from the context menu of a SSL/TLS packet.
Dec
8
comment How to prevent a symlink from being removed?
When you delete a symlink, is the same as you delete a normal file. The only permission checked are on the folder. You can limit access to the folder with a SELinux policy, or other mechanisms. But the main question is what is the real problem you are trying to solve?
Nov
11
comment OpenVPN-server disappointing performance
Encryption is done in CPU or, sometimes, offloaded in specialized co-processors (ASICs). It could be that only one CPU is saturated and that could be your bottleneck, even if the overall CPU average is low. When looking for performance problems you have to monitor both the guest and the host.
Nov
8
comment OpenVPN-server disappointing performance
It is interesting to see how the latency is degrading when you do a network test over VPN. It is important to see the if the degradation is only inside the OpenVPN link or also outside. If the degradation is only in OpenVPN, then you should focus on OpenVPN performance.
Nov
8
comment OpenVPN-server disappointing performance
How is the CPU usage on both OpenVPN endpoints (client and server) during the speed test? How much is the latency between endpoints? Test the latency when the link is saturated and when it is not saturated. 4 test in total.
Oct
12
comment ProLiant DL360p Gen8 and ProLiant DL360p Gen9 and ProLiant DL360p Gen7 servers vulnerability of ILO
Rebooting the server will not reboot the ILO. You need to find the reboot option in ILO interface. Also rebooting the ILO has no impact on the main server. Think of ILO like another computer inside the same case. It has its own OS and a different HW platform than your server.
Oct
9
comment ProLiant DL360p Gen8 and ProLiant DL360p Gen9 and ProLiant DL360p Gen7 servers vulnerability of ILO
I do not know how is for HP, but for other servers you need to reboot the out of band management system. ILO is actually another small computer located on the server motherboard.
Oct
9
comment ProLiant DL360p Gen8 and ProLiant DL360p Gen9 and ProLiant DL360p Gen7 servers vulnerability of ILO
You should also contact HP may be they can help in securing the IMPI service.
Oct
9
comment ProLiant DL360p Gen8 and ProLiant DL360p Gen9 and ProLiant DL360p Gen7 servers vulnerability of ILO
You can either disable IPMI and lose remote access to the console. Or you can put the IPMI interface in a separate VLAN that is secured by a firewall and that the access is provided via a VPN server or a secure jump-point server.