3,972 reputation
2919
bio website
location Fort Lauderdale, FL
age 30
visits member for 3 years, 11 months
seen Dec 17 at 19:54

System architect & Linux admin for cloud.com (Citrix).


Dec
4
comment Haproxy: Slow responses for static content
The haproxy logs include a lot of useful information for tracking this type of stuff. I suggest providing a few specific examples.
Sep
28
comment Restricting the network access of Docker container
There are a couple pending feature requests that can help with this type of stuff. #6743 which would let you pre-create iptables rules on the host before the container is started, and #6982 which would let you add iptables rules when the container starts.
Aug
29
comment Why iperf still reports 1Gbps performance when using bonding over two 1Gbps adapters?
What mode do you have it in? Have you verified that both links are being utilized (even if not fully)?
Feb
28
comment How many IOPS do I need? My workload bottleneck is storage
@Totor If you want IOPS per second at a certain block size, then you don't want IOPS, you want bandwidth (eg bytes per second), a completely different measurement.
Oct
22
comment How to prevent MAC spoofing?
What marco said. Many embedded systems don't even have a MAC address at all. They have to spoof.
Aug
23
comment Would a PHP application benefit from being served from a RAM drive?
@Danack You're making the assumption that the system doesn't opportunistically utilize all ram for whatever it can. Most operating systems will also use available ram for filesystem caching, IO buffers, and other things. You end up steal memory from that. In any case, you're loading things into memory for no benefit. Wasting memory is never good for performance.
Aug
23
comment Would a PHP application benefit from being served from a RAM drive?
@Danack "when combined with better solutions such as a PHP accelerator". By storing files (which are large and uncompressed) in a ramdisk you're stealing memory from more legitimate uses, such as the accelerator. The accelerator already stores a bytecode version of the code, storing the original version serves no purpose.
Sep
6
comment sudo rejects password that is correct
Do you have a sudoers entry in /etc/nsswitch.conf? (it could be configured to look up the user incorrectly)
Sep
1
comment is there a way to run a command before puppet implements a change?
I thought about this, but would need the exec {} to only run when required. This means putting refreshonly on it. Will the refreshonly still trigger the exec through the require, or does refreshonly only work with notify and subscribe? I'll give it a shot in the next couple days when I have some time to go play around.
Aug
31
comment is there a way to run a command before puppet implements a change?
@quanta I don't see how a pre-commit hook would help (even if the commit is happening on a puppet run machine, it's only one box, all the others in the pool wont run the hook. Plus if I'm using a puppet master, the repo wont even be on all the puppet clients), but it did give me an idea. Instead of running the removal script only when puppet is going to make a change, run the removal script if the puppet manifests have been updated since the last puppet run. It's not as guaranteed as running it before puppet makes a change, but it could be acceptable.
Aug
31
comment is there a way to run a command before puppet implements a change?
The web server was just one scenario. I want this to be applied to any change to any box in a pooled environment.
Aug
26
comment What's going on with my server? High load, lots of idle CPU time, low disk utilization
You load is coming from the high %sys. %sys is time spent by the kernel. For some reason the kernel is using a TON of CPU time. Unfortunately there are are lot of causes for this, but the most common that I see is usually interrupts. I'd look at watch -n 1 cat /proc/interrupts and see if any of them are climbing at an insanely high rate (thousands per second). Edit: oh, this is an old question that just popped up on the front page, likely to be irrelevant now :-(
Aug
25
comment vmware unique cpu identifier
I think you mean 'host' or 'hypervisor', not 'CPU'. After all, the hypervisor could shift your guest VM to another CPU on the same host...
Aug
23
comment Intercepting https using proxy
While this is correct, it would help others understand if you elaborate on why.
Aug
22
comment Find and delete directories older than time?
The second command is VERY BAD. Modification time of directories does not change when the contents of a file in the directory is modified, only when files are added or removed from the directory. Thus your second command will end up wiping out directories that shouldn't be.
Aug
21
comment No SSH password prompt
We need more info. Can you connect with ssh -v and provide the output?
Aug
19
comment LDAP: unable to enter DIT LDIF: LDAP_NO_SUCH_OBJECT error
@Foezjie are you binding with the rootDN set for the dc=ulyssis,dc=org database? Binding with the rootDN for another DB (like cn=config) will not work unless the rootDN is set the same for both databases.
Aug
15
comment What service reads /etc/security/access.conf?
And to answer the other question 'do I need to restart anything after editing it?'; No, you do not. The file is read every time a session is opened (in your case, when a cron job runs).
Aug
13
comment Locked up virtual memory
Can you provide the output when you attempt to start these processes that fail to start? We can't do anything without an error message.
Aug
12
comment How do I get the exit code of a process that's piped to tee?
Why'd you ask the question if you know the answer?