Hey @fabian yeah maybe I messed something up while copy ' n pasting. If that's the case sorry for that. Now it seems to work, CDN now returns de3. Thank you
Then I would definitively put a VPN before the port 8006. If your customers are annoyed remind them, that you don't want to risk another incident and that it's in their best interest to make life harder for ransomware gangs.
We chose the quickest route of restoring to the EOL version from backup first, because the cluster was barely holding quorum and the ceph osds hanging on a thread. And it was in fact unrealistic for us to do in between upgrades without a fully...
With the right tools, you can automate such environments quite easily. For example, use Ansible to spin up the VMs and tear them down again after the training.
With some additional work around that, you can make sure that each instance gets a...
slabtop -osc | head -n60
Active / Total Objects (% used) : 4583972 / 4964347 (92.3%)
Active / Total Slabs (% used) : 94068 / 94068 (100.0%)
Active / Total Caches (% used) : 369 / 465 (79.4%)
Active / Total Size (% used) ...
Thanks for the writeup. One thing I'm missing: Did you you recreate the cluster with a non-EOL version (PVE9) or did you resetup them up with an EOL version? If you did the latter I would reconsider since although you might have closed this...
Thank you both very much for the bug references @longer @shanreich I have subscribed to them.
Wow - that IPv6 scoped addresses bug is a doozy! IPv6 support is fundamentally borked, right at the core address-parsing libraries used.
It gets...
We chose the quickest route of restoring to the EOL version from backup first, because the cluster was barely holding quorum and the ceph osds hanging on a thread. And it was in fact unrealistic for us to do in between upgrades without a fully...
We were compromised through CVE-2023-54391 on 1–2 September and rebuilt 22 nodes from backup. A few of the post-exploitation findings cost us real time, so probably worth sharing here.
Getting the obvious out of the way first: we were on 7.4...
81.7% of data requests are for metadata. I assume ZFS can do with less memory to maintain a high hit rate?
Pfsense workloads don't perform heavy write IO like databases/webservers etc..
Below numbers are for a full host. We will not add...
Thanks for the writeup. One thing I'm missing: Did you you recreate the cluster with a non-EOL version (PVE9) or did you resetup them up with an EOL version? If you did the latter I would reconsider since although you might have closed this...
Oh that is good to know and unfortunate. With current SSD prices this was all I was willing to pay. But doing the FIO test the performance was in line with the Proxmox benchmark around 15K IOPS
The 200GB version of the DC S3610 has much lower performance ratings compared to the larger capacity models.
But I think the IO pressure stall and IO delay is to be expected to some degree whenever running disk-intensive operations. I can...
With the removal of native support from QEMU, the feasibility of keeping the plugin is gone. It is time for users to focus on the migration as soon as possible.
https://github.com/proxmox/pve-qemu/commit/fa71af3c796c51f68679fa835eeeff2e7094e5e5
Another comment: The file coming from the ::249 node seems to be okay. The file coming from the ::167 node is corrupted:
/tmp$ dpkg -x ceph-mgr_19.2.6-pve4_amd64.deb ddd/
dpkg-deb: Fehler: »ceph-mgr_19.2.6-pve4_amd64.deb« ist kein Archiv im...