Latest activity

  • Maximiliano
    Out of curiosity, what are the features you are looking for that are not available without cephadm?
  • J
    Johannes S reacted to aaron's post in the thread 2 Node HA Cluster with Like Like.
    What I maintain personally, are 2 powerful AMD EPYC nodes that run the infrastructure. The 3rd server is far less powerful in terms of CPU and memory and is using cheaper but quite a bit larger SSDs to be used as PBS for that 2-node cluster and...
  • R
    Looks like the patch will make it's way to PBS, do you know if it will be in next version or when to expect it?
  • UdoB
    UdoB replied to the thread PBS ZFS disk speed thoughts option.
    This! That may be a good choice for some situations - however I can't imagine it is a good idea to drop all ZFS goodies. ((You all know what I mean; for interested new-to-ZFS-users...
  • J
    https://docs.ceph.com/docs/master/rados/operations/pools/ says that min_size: Sets the minimum number of replicas required for I/O. so no, this is actually the number of replicas where it can still write (so 3/2 can tolerate a replica of 2...
  • J
    J-Rod replied to the thread PBS ZFS disk speed thoughts option.
    I think the OP might be aware of the padding issue since they mentioned 3x disk RAIDZ1 and 6x disk RAIDZ2. Not 100% sure. However, any parity-based RAID is going to perform poorly for the type of I/O that PBS generates (lots of small...
  • H
    Update: issue reproduced again, twice in the same packet capture I captured another series of four ISCSI_ERR_NOP_TIMEDOUT events on Sep 7. Two of them are fully covered by the packet capture, and both reproduce essentially the same packet-level...
  • I
    IsThisThingOn reacted to Bu66as's post in the thread Proxmox Richtig absichern with Like Like.
    Solange keine Portfreigabe drauf zeigt, bleiben die anderen CTs und VMs geschützt, die hängen im LAN und von außen kommt da nix an. Das Problem ist, wenn du einen Port aufmachst. Den Container würd ich dann in ein eigenes Netz hängen (eigene...
  • I
    IsThisThingOn reacted to Bu66as's post in the thread Proxmox Richtig absichern with Like Like.
    mTLS ist ein guter Punkt, nutz ich für ein paar interne Sachen auch. Bei PVE selbst würd ich aufpassen: die Web-UI hinter einen Reverse Proxy zu hängen macht wegen der WebSockets (noVNC, xterm.js) und dem API-Traffic gern Ärger, und wenn der...
  • I
    IsThisThingOn reacted to Bu66as's post in the thread Proxmox Richtig absichern with Like Like.
    Bei mir läuft 8006 ausschließlich übers VPN, kein Proxy davor. PVE-Firewall auf Datacenter-Ebene mit Default DROP und eine Regel, die 8006 und SSH nur aus dem VPN-Subnetz erlaubt, das wars. Wenn von außen eh nichts ankommt, brauchst du da keinen...
  • I
    But it is :) A Hardware RAID5 with 4 drives will give you exactly 75% storage efficiency. A ZFS RAIDZ1 with 4 drives will give you between 50% and 75%, depending on padding and pool geometry. Which in return depends on your zvol and dataset...
  • B
    Bu66as replied to the thread Proxmox Richtig absichern.
    Solange keine Portfreigabe drauf zeigt, bleiben die anderen CTs und VMs geschützt, die hängen im LAN und von außen kommt da nix an. Das Problem ist, wenn du einen Port aufmachst. Den Container würd ich dann in ein eigenes Netz hängen (eigene...
  • SInisterPisces
    Thanks again, everyone. What would be some symptoms in real world use (not a deliberate SYN flood or other deliberate test) that might suggest I need to look at enabling MQ? I'm assuming that a problem would be indicated if I saw, for instance...
  • SInisterPisces
    It's mainly when you have a lot of (small) packets per second incoming. (If I remember, qemu is around 2millions pps with 1 core) try an iperf3 with 64bytes packets (to simulate a syn flood for example)
  • G
    Gui_ replied to the thread Proxmox Richtig absichern.
    Von 1/2 von Funktionen die ihr vor scheitert habe ich noch nie was gehört da müßte ich erst in der docu schauen.
  • G
    Gui_ replied to the thread Proxmox Richtig absichern.
    Ich bin noch in der Planung Phase. Ich habe einen test lxc aufgesetzt. Vermutlich werde ich die neuste Ubuntu Version nehmen. Allerdings mache ich mir Sorgen. Über die anderen lxc und VMs die sind quasi ungeschützt. Im lockalen lan macht das...
  • J
    No, if you can't set up things correctly, then go find another hobby. This is the reason why these attacks are still so popular and lucrative.
  • J
    J-Rod replied to the thread PBS ZFS disk speed thoughts option.
    I have filled my PBS servers with ZFS to 100% many times and did not see any performance difference, most likely due to PBS operations generating a lot of very small reads & writes, as opposed to large, continuous writes. Fragmentation of free...
  • J
    It's been a year since Op's last post and presence, but based on the incident description (Dell/EMC backing ESXi) - it was likely iSCSI with VMFS. Blockbridge : Ultra low latency all-NVME shared storage for Proxmox -...
  • J
    You can, but shouldn't for multiple reasons. keep your OS on local disks. ceph is designed to provide the same storage services as your SAN. It will reduce your usable capacity, obviously be substantially slower than the native storage, and is...