Reputation
49,070
Next tag badge:
99/100 score
31/20 answers
Badges
21 126 204
Impact
~3.4m people reached

Dec
3
comment Wisdom of switching from Windows to redundant linux boxes for DHCP servers?
Especially as Windows has really easy to configure DHCP fallback
Dec
3
comment HAProxy and Radius
Regarding the hostname part, someone else just asked the same thing: serverfault.com/q/740560/7709 - can't be done for most protocols. Yes haproxy can do TCP load balancing, but you're not using it for that, you're mostly just going to be using it for its ACLs. And you can't do http auth on anything except http itself, so you could just us a normal reverse proxy for the HTTP protocols. Something like nginx.
Dec
3
comment Looking at creating 400 GPO settings to STIG a server
Can you clarify what you mean by "to STIG a Windows Server image"? What is STIG? Well, I know that some say that he knows two facts about ducks and both of them are wrong, but in this context?
Dec
3
answered How to route requests through router based on domain names?
Dec
3
comment How to route requests through router based on domain names?
The correct way to achieve what you want is to assign different public IP addresses, because even though you have a router in your diagram, it's actually NATting, which isn't routing at all. So you need more IP addresses, and you can either route fully and put the public IPs on your three servers, OR, you can put the IP addresses on your router and do a 1:1 NAT (eww)
Dec
3
comment How to route requests through router based on domain names?
What you're asking for is pretty much impossible, because the vast, vast majority of L7 protocols have no concept of a hostname, and thus can't be proxied based on a hostname
Dec
3
comment HAProxy and Radius
haproxy is unlikely to be suitable for what you want. haproxy is a load balancer. The only way you can reliably stop people from accessing ports on a different network is with a firewall, and it sounds like that's what you need here.
Dec
3
revised HAProxy and Radius
deleted 2 characters in body
Dec
3
comment HAProxy and Radius
Are you talking about using authentication in a HAProxy ACL, or to log onto the HAProxy box itself? Not entirely sure how haproxy fits into your network here.
Dec
3
revised HAProxy and Radius
added 21 characters in body; edited title
Dec
2
comment NIC Team, Trunking, WS2012/HP2920
Does your switch show any LACP status messages? e.g. How many PDU's it's sent/received? That can sometimes be a giveaway about the issue.
Dec
2
answered Dell Precision T7600 OMSA Perc H710
Dec
2
answered Understanding the concept of highload application
Dec
2
answered Secure access to a site using SSL sertificate
Dec
2
revised It's OK to only have SMTP for server-to-server communication?
added 2 characters in body
Dec
2
comment Raid 10 implemented on server. Need to know about its performance when one of the disk fails
+1. When a single disk fails, you still have your RAID0 array, but one of your RAID1 arrays is degraded, so your performance is unchanged until rebuild time.
Dec
2
comment If both forwarders have answer, why does DNS server still timeout on request?
+1 for giving the commands to troubleshoot futher
Dec
1
awarded  Popular Question
Nov
30
awarded  Notable Question
Nov
25
comment How to get around Double NAT from the ISP?
@FlorinAsavoaie fair enough. I guess I just added them in case someone else sees this in the future and I wanted to make sure that they were aware of the implications.