Reputation
3,459
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
7 18
Newest
 Yearling
Impact
~195k people reached

Jun
23
answered Multiple SSL on NGINX with shared settings?
Jun
23
comment Two DNS zones: one for internal, the other for DMZ servers, is it possible?
I recommended not having a nameserver in the DMZ at all. Since it is only one domain, let your registrar serve as the nameserver for that domain. That simplifies things tremendously. If you must operate a nameserver for that one domain, put it into the DMZ and set it as a non-recursive server. For your internal, you can have it forward requests to your ISPs DNS or to Google's. I recommend a forwarding system since all DNS requests will be sent to the forwarding servers vs. looking up directly. This permits for tighter firewall restriction.
Jun
23
answered Two DNS zones: one for internal, the other for DMZ servers, is it possible?
Feb
18
awarded  Yearling
Jan
22
comment Unusually high nfs_inode_cache
What versions of RHEL are you using? There was a known issue related to this awhile ago. access.redhat.com/solutions/481743
Jan
22
comment Haproxy using 10GB Memory and 100% CPU with 50k connections
You can reduce memory consumption by having fewer connections. What version of HAproxy are you using? Have you looked at brokenhaze.com/blog/2014/03/25/…
Jan
22
comment Email Sending over Distributed System?
On modern hardware, unless you have huge lists, the bottlenecks are often the recipients rate-limiting requests. Proper tuning of the system and completing the bulk mailing requests at problematic IPs can impact things significantly. Also you may want to read the docs as it specially addresses clustering. mailenable.com/support/MEEICG.pdf
Oct
28
answered How can I explicitly force SendMail to not use SSLv3 for STARTTLS connections?
Sep
30
awarded  Explainer
Jul
30
answered FcgidProcessLifeTime no effect
Jul
29
comment How to setup Apache 2.2.3 to send “last modified” etc
The term weak is simply semantics. The point is that using Last-Modified headers in the absence of other caching instructions leaves the cache period up to the HTTP client. If a resource has not been modified since the Last-Modified date, the resource should be considered fresh. In contrast, when using an Expires or Cache-Control header the origin can set an explicit freshness period.
Jul
21
comment ssl certificate - identity not verified with godaddy
Please update the ticket with the specific domain as there are many test tools that can quickly spot the issue.
Jul
18
awarded  Custodian
Jul
18
reviewed Edit “Add correct host key in known_hosts” / multiple ssh host keys per hostname?
Jul
18
revised “Add correct host key in known_hosts” / multiple ssh host keys per hostname?
edited for readability
Jul
18
reviewed Approve locking up a linux box on a foreign network
Jul
10
comment debug mysql crash
Please update this ticket with your mysql error log. What version of MySQL are you using? Please include any other specific errors.
Jul
4
awarded  Quorum
Jun
30
comment How many power circuits do I have in a rack?
I should have said 2x30A 110V. I think that's what we used to have. Don't forget room for a switch (if needed) and out of band tools. The last thing you want is a tripped circuit breaker. Also if you do run near peak, be sure to have your PDU enforce staggered power ups. Nearly any system can cause an amp spike on power-up.
Jun
30
comment When to increase AWS RDS MySQL Server instance to larger CPU/RAM?
What is the performance/capacity problem you are trying to resolve?