All Questions

11
votes
0answers
1k views

Enable VPC-native (alias IP) on an existing GKE cluster

Is there a way to enable Alias IP on existing GKE cluster (with disabled Alias IP)? (Besides using https://github.com/bowei/k8s-custom-iptables to create NATs on each node)
10
votes
0answers
2k views

Android to openswan/xl2tpd/pppd error: result_code_avp: avp is incorrect size. 8 < 10

I am trying to use a simple Android 4.4.4 VPN connection to openswan/xl2tpd/pppd combo. the IPSec SA works, but xl2tpd at one point terminates the pppd and this shows up in logs: xl2tpd[17990]: ...
9
votes
0answers
125 views

How much does FreeBSD accept_filter actually improve performance in a modern world?

I recently learned about FreeBSD's accept_filter socket option which can allow a worker process to avoid context switching by, for example, waiting until a full HTTP request is received with accf_http:...
9
votes
0answers
256 views

Can Asterisk's phoneprov module be used securely?

I'm using Asterisk 13.1.0 as packaged by Ubuntu Server 16.04 to run a pure-VoIP phone system. Asterisk has a module – phoneprov – that allows it to template out configuration files for ...
8
votes
0answers
6k views

When to use or not to use sendfile on/off in Nginx?

We have this setting in our nginx.conf for quite a while. sendfile on; When we have updated a file e.g. /js/main.js and access from browser https://test.com/js/main.js?newrandomtimestamp, it will ...
8
votes
0answers
183 views

Setting up IPv6 ACLs on 3com 5500g to block Router Advertisment messages

Is there a way to set up IPv6 ACLs on 3com 5500g switch to block RA traffic on access ports? I couldn't find settings for setting up any IPv6 ACL. Acording to guides, there should be ipv6 specific ...
8
votes
0answers
4k views

teaming with nmcli: bringing connection down and up again fails

On a centos 7 virtual box, I create a team like this: nmcli connection add type team con-name team0 ifname veteam0 nmcli connection modify team0 team.config roundrobin.conf [root@rhce1 ~]# cat ...
8
votes
0answers
157 views

Configure Juniper M320 as Ethernet/STM transparent converter

There is Juniper M320. We need to move ALL the traffic from one port to another. Everything that comes to one port goes to another and vice versa. No snooping or any other processing is required. One ...
8
votes
0answers
5k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
8
votes
0answers
2k views

How to investigate the cause of a 100% CPU event that lasted for hours?

Yesterday the CPU on my Xen-based VPS server went to 100% for two hours and then went back to normal, seemingly naturally. I have checked logs including syslog, auth.log and more and nothing seems ...
7
votes
0answers
4k views

Adding second network interface to Ubuntu 18.04 on AWS EC2

The provided 18.04 AMI comes with one interface, and I am adding a second one with its own IP (for stuntman-server). However the instance is only responding to one elastic IP or the other, not both (...
7
votes
0answers
142 views

How can one php-fpm 5.6 site cause an outage across all sites?

I have a real head scratcher with one site on a server affecting others in separate php-fpm pools. I thought the idea was that php-fpm pools gave isolation to stop (reduce) this from happening. We ...
7
votes
0answers
123 views

Sunsetting Microsoft Identity Management for Unix the right way

I'd like to make sure that we don't have any connections to our AD controllers before sunsetting, but some run Microsoft Identity Management for Unix / Server for NIS. I'm having a dog of a time ...
7
votes
0answers
1k views

CentOS 6 local update repository and security updates

I know that official CentOS 6 (even 7) update repositories does not provide security information. The consequence is thatyum-plugin-security plugin and yum check-update --security command does not ...
7
votes
0answers
582 views

RAID60 w. LSI 9361-8i: Consistency Check repetitively finds inconsistent parity

I'm maintaining a pre-configured storage system for a project team. The storage consists of 36 x 8 TB HGST Disks (~240 TB net) in RAID60 (2x18 disks in RAID6), Controller is a MegaRAID SAS 9361-8i, OS=...
7
votes
0answers
2k views

haproxy CD flags with browser, not with curl

Issuing the same url request, from the same workstation to the same haproxy server: with a browser (tried Chrome and Firefox): haproxy log shows CD flags with curl: haproxy log shows -- Both ...
7
votes
0answers
688 views

How to re-compile iconv on Linux (Ubuntu 14.04 LTS) with pseudo-charset UTF8-MAC?

I was googling around for hours to find a solution for my problem and I couldn't get it to work: I have to rsync a file structure on an ext4 formatted drive to a hfs+ formatted drive. Folders and ...
7
votes
0answers
955 views

Signout with ADFS3 with SAML

I have implemented SSO using ADFS3. I have a logout button for sign out and it’s working fine with my ws-federation passive endpoints. On logout I redirect user to logout.aspx page and there I have ...
7
votes
0answers
2k views

How can I prevent Outlook 2007 and 2010 from disabling particular add-ins automatically?

Right now, we've got a business critical application that installs an Outlook add-in. It is a bit slow to load, which makes Outlook 2013 kill it after a few runs, but I've mitigated the issue of ...
7
votes
0answers
2k views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
7
votes
0answers
3k views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
7
votes
0answers
438 views

What ZFS file structure to use for zfs-root linux system?

In ZFS, you can build your filesystem hiearchy to include different fs-attributes per filesystem. For insance, compression in one area, no-exec/suid in others, noatime. For example, a HOWTO for ...
7
votes
0answers
4k views

Apache/SSL: (70014)End of file found: SSL input filter read failed

Figured upgrading on a long weekend was a smart move... Now I'm stuck. The server is spitting out this error (loglevel info): "(70014)End of file found: SSL input filter read failed" when using the ...
6
votes
0answers
131 views

What caused a huge amount network traffic via SSH?

I have a virtual server running Ubuntu 18.04 from a well known hosting company. This morning our Fortigate Firewall logs shows that my Win10 computer transferred 3.5TB to and 6.5TB from my virtual ...
6
votes
0answers
307 views

Is there a TCP Maximum Segment Size (MSS) Minimum?

I have there a OpenVPN VPN network connection, where the MSS size 60 gets send out for some reason (don't know why yet). EDIT: Reason: OpenVPN mssfix was mistakenly set to 1 36 92.064383 10.102.0....
6
votes
0answers
5k views

Scheduled Task in Windows Server 2016, run by non-admin Users

In earlier windows server versions (prior to 2016) it was possible to grant non-admin users the permission to run a scheduled task by doing following steps: Scheduled Task: run under system, execute ...
6
votes
0answers
3k views

nginx and https: nginx: [emerg] host not found in upstream

First of all excuse me if this problem is simple. I have a server with Ubuntu and nginx on it. Always works while http used, but after I added certificates and tried to enable https I received this ...
6
votes
0answers
672 views

Tailing logs with GCE and stackdriver

I have a running Kubernetes cluster that aggregates it's logfiles in stackdriver and would like to tail the aggregated logs on the command line. But so far I am only able to view the json stream float ...
6
votes
0answers
831 views

Why multicast UDP can be slower than unicast UDP?

I have two machines (with Centos 7.3 on both) connected via 1G switch. When I measure UDP thoughput between macines with iperf it gives about 850 Mbit/s. However when I measure multicast UDP thoughput ...
6
votes
0answers
121 views

Write arbitrary attribute into ENV from LDAP upon successful PAM authentication

Is it possible during the authentication phase of pam_ldap to map an arbitrary LDAP attribute of the user's record into the resulting user's environment? The specifics of my situation, in case you ...
6
votes
0answers
1k views

ZFS cannot import : I/O error

I experienced an error in my ZFS machine. This may have happend after I lost power to my server, but I can not tell for sure. My ZFS Pool Gewuerzglas with RAIDZ-1 is no longer willing to import. I ...
6
votes
0answers
1k views

DHCP interface never transitions to configured state in systemd

I have a server running CoreOS, and my main network interface that gets configured via DHCP gains a carrier and is routable, but never leaves the configuring state. This causes systemd-networkd-wait-...
6
votes
0answers
5k views

Create user in gitlab without e-mail?

I'm testing out omnibus gitlab on a local VM. After disabling anonymous signup, I tried adding a new user via the /admin/users/new page. It requires I associate an e-mail with the new user account, ...
6
votes
0answers
881 views

Is it possible to authenticate to Sonatype Nexus via ssh keys

Is it possible to authenticate to Sonatype Nexus via ssh keys or any other method that does not require user password in maven settings.xml? I know there are user generated tokens in Sonatype Nexus ...
6
votes
0answers
5k views

DHCP Server Not Offering to PXE Client

DHCP Server Not Offering to PXE Client BACKGROUND: I'm in the process of adding PXE services to an existing SCCM 2007 server. The SCCM server is separate from the DHCP server (Server 2008 x86) and ...
6
votes
0answers
6k views

Access to message queuing system is denied MSMQ?

My problem is a little confusing. I have 2 servers (Windows Server 2008 R2) with MSMQ installed and I want to use Server B to consume a MessageQueue on Server A. When I try to Receive it always ...
6
votes
0answers
5k views

PERC MegaRAID S.M.A.R.T. Status is not matching smartctl's - looking for clues what's wrong with the HDD

I'm getting strange SMART error from MegaCli on Dell R720xd and PERC H710P with five 4Tb SATA drives in RAID5 /opt/MegaRAID/MegaCli/MegaCli64 -PDList -aALL gives me some "Failure Seq Event Number" ...
6
votes
0answers
3k views

Use perfmon to monitor a specific ASP.NET webapp across worker process restarts, IIS restarts, etc.?

I have a few perfmon performance counters that I'd like to track for a specific ASP.NET application over an extended period of time, say a week or a month. The trouble is that perfmon counters are ...
6
votes
0answers
2k views

What is the Task Scheduler syntax for returning the “ComponentStatus” contents in a Windows Server Backup Event

I have created a Task Scheduler event that emails me on EventID 14 in the Microsoft-Windows-Backup event log (note this is a new , style (Vista and up) log. I exported this and after some grubbing ...
5
votes
0answers
346 views

Smart card error from Remote Desktop app

On Windows 10 there are two apps to remotely connect to another computer. One is old Remote Desktop Connection (mstsc.exe) and the other is modern Remote Desktop (RdClient.Windows.exe hidden somewhere ...
5
votes
0answers
582 views

Apache HTTPd 2.2 is ignoring LocationMatch regex

I am trying to create a Reverse Proxy that match every URL except one in Apache 2.2. It works on Apache 2.4 (Centos 7), but not in Apache 2.2 (Centos 6.6) ... # Do not modify this <LocationMatch "^...
5
votes
0answers
95 views

What could cause a LAMP server to perform poorer than my laptop?

I'm running a WEB application (PHP + MariaDB) for my company, developing on my laptop and running the production version on a dedicated server. Recently, I've started to measure performance and ...
5
votes
0answers
4k views

Spark Error: Failed to Send RPC to Datanode

We have quite few issues with our Spark Thrift server. It is a new Ambari cluster and no Spark jobs are running now. From the log we can see an error message: Failed to send RPC 9053901149358924945 ...
5
votes
0answers
437 views

Disable NIC Receive Side Scaling hashing

On a benchmark lab system running Fedora Core 27 I've got Intel X710 10GE cards and 12-core Xeon processors, configured with 12 NIC queues and RX Flow Hashing based on both IP addresses and port ...
5
votes
0answers
559 views

WSUS Error 8000FFFF

Two issues with our WSUS Some of our Servers (2008r2/2012r2) and Win 7 got error 8000FFFF when installing security updates from WSUS. For most of servers and desktops are just working fine. From ...
5
votes
0answers
4k views

IIS Application Pools do not start due to WAS not starting

I have been dealing with an issue with the IIS service. Every now and then, it stops working for me and it is always the same issue: IIS service and App Pools won't start due to WAS service not ...
5
votes
0answers
432 views

How to limit bandwidth per VPN connection?

I have a StrongSwan (IKEv2) server setup and would like to limit each VPN connection to 512kb/s. After researching I came across tc in Ubuntu. I don't quite understand it and am fighting through the ...
5
votes
0answers
3k views

Best Way to Backup ClickHouse Data

We recently started using Yandex ClickHouse for our data backend, and I'm working on figuring out how best to backup our data. There seem to be two ways of doing this. ALTER TABLE ... FREEZE ...
5
votes
0answers
3k views

cups: HTTP_STATE_WAITING Closing for error 32 (Broken pipe)

On a debian stable I've a network printer connected and shared (epson hp1536dnf): socket://ip:9100 from linux clients I've: ipp://ip/printers/printer1 The logs of server are: D [01/Sep/2017:18:21:...
5
votes
0answers
2k views

Configure BIND to prefer IPv4 without disabling IPv6

Our office network is internally dual-stack, but the connection to the rest of the Internet is IPv4-only. I've got BIND 9.9 set up on a Linux box to handle DNS resolution. Is there a way to ...

15 30 50 per page