What I maintain personally, are 2 powerful AMD EPYC nodes that run the infrastructure. The 3rd server is far less powerful in terms of CPU and memory and is using cheaper but quite a bit larger SSDs to be used as PBS for that 2-node cluster and...
This!
That may be a good choice for some situations - however I can't imagine it is a good idea to drop all ZFS goodies. ((You all know what I mean; for interested new-to-ZFS-users...
https://docs.ceph.com/docs/master/rados/operations/pools/
says that
min_size:
Sets the minimum number of replicas required for I/O.
so no, this is actually the number of replicas where it can still write (so 3/2 can tolerate a replica of 2...
I think the OP might be aware of the padding issue since they mentioned 3x disk RAIDZ1 and 6x disk RAIDZ2. Not 100% sure.
However, any parity-based RAID is going to perform poorly for the type of I/O that PBS generates (lots of small...
Update: issue reproduced again, twice in the same packet capture
I captured another series of four ISCSI_ERR_NOP_TIMEDOUT events on Sep 7. Two of them are fully covered by the packet capture, and both reproduce essentially the same packet-level...
Solange keine Portfreigabe drauf zeigt, bleiben die anderen CTs und VMs geschützt, die hängen im LAN und von außen kommt da nix an. Das Problem ist, wenn du einen Port aufmachst. Den Container würd ich dann in ein eigenes Netz hängen (eigene...
mTLS ist ein guter Punkt, nutz ich für ein paar interne Sachen auch. Bei PVE selbst würd ich aufpassen: die Web-UI hinter einen Reverse Proxy zu hängen macht wegen der WebSockets (noVNC, xterm.js) und dem API-Traffic gern Ärger, und wenn der...
Bei mir läuft 8006 ausschließlich übers VPN, kein Proxy davor. PVE-Firewall auf Datacenter-Ebene mit Default DROP und eine Regel, die 8006 und SSH nur aus dem VPN-Subnetz erlaubt, das wars. Wenn von außen eh nichts ankommt, brauchst du da keinen...
But it is :)
A Hardware RAID5 with 4 drives will give you exactly 75% storage efficiency.
A ZFS RAIDZ1 with 4 drives will give you between 50% and 75%, depending on padding and pool geometry. Which in return depends on your zvol and dataset...
Solange keine Portfreigabe drauf zeigt, bleiben die anderen CTs und VMs geschützt, die hängen im LAN und von außen kommt da nix an. Das Problem ist, wenn du einen Port aufmachst. Den Container würd ich dann in ein eigenes Netz hängen (eigene...
Thanks again, everyone.
What would be some symptoms in real world use (not a deliberate SYN flood or other deliberate test) that might suggest I need to look at enabling MQ?
I'm assuming that a problem would be indicated if I saw, for instance...
It's mainly when you have a lot of (small) packets per second incoming. (If I remember, qemu is around 2millions pps with 1 core)
try an iperf3 with 64bytes packets (to simulate a syn flood for example)
Ich bin noch in der Planung Phase. Ich habe einen test lxc aufgesetzt. Vermutlich werde ich die neuste Ubuntu Version nehmen. Allerdings mache ich mir Sorgen. Über die anderen lxc und VMs die sind quasi ungeschützt. Im lockalen lan macht das...
I have filled my PBS servers with ZFS to 100% many times and did not see any performance difference, most likely due to PBS operations generating a lot of very small reads & writes, as opposed to large, continuous writes. Fragmentation of free...
It's been a year since Op's last post and presence, but based on the incident description (Dell/EMC backing ESXi) - it was likely iSCSI with VMFS.
Blockbridge : Ultra low latency all-NVME shared storage for Proxmox -...
You can, but shouldn't for multiple reasons. keep your OS on local disks.
ceph is designed to provide the same storage services as your SAN. It will reduce your usable capacity, obviously be substantially slower than the native storage, and is...