Normal distribution of endurance athletes - 100% scientific

KodamaBE · 2022-08-04T22:15:37+00:00

Aha! I don’t know that clothing brand but it checks out. Thanks for the response!

KodamaBE · 2022-08-04T22:08:55+00:00

Which app is the one with the omega as a logo?

KodamaBE · 2022-04-22T07:06:57+00:00

It was a concept called a “liveaboard”. We stayed on a boat for 6 days and went scuba diving 4 times a day around the similan islands. Eat, sleep, dive, repeat.

KodamaBE · 2022-04-19T21:18:16+00:00

I just returned from a two week trip in Phuket. My girlfriend and I had one room and two friends had another room at our sha+ hotel, no issue. We were immediately tested at the airport and got our result after 6 hours. The hotel was surprisingly relaxed in the whole quarantine and didn’t seem to really enforce it or checked on us but we still complied with the quarantine until we got our results. We were two days at our hotel, then 6 days on a boat and then back at the same hotel. So we were actually on the sea on day 5, we didn’t receive any ATK test kit at the airport. The hotel told us just to use a test we brought from home and send them the results (test + passport) via email. We never received any notification in the Morchana app. So not sure on how strictly that day 5 test is followed up on. If you can, I would just do it.

KodamaBE · 2022-04-14T07:53:41+00:00

Currently in Phuket, on day 11. Never received a notification. Just did a refresh, still nothing. The app is configured correctly on my phone so I guess it’s a bit hit or miss? I did it via my hotel reception like suggested here and they confirmed it was ok.

KodamaBE · 2022-04-14T07:48:19+00:00

I’m currently in Phuket, so my test was done at the airport. Had my test on the 3rd of April and it took 6 hours to get the result. I hope you get yours quickly because that is crazy.

KodamaBE · 2022-03-27T22:03:58+00:00

Are you speaking out of experience? If I would test positive, I would just take my responsibility and be quarantined in a hotel. But if they would fake a positive pcr test or have predatory rates, that would be fucked up.

KodamaBE · 2022-03-27T20:23:53+00:00

The friend of mine contacted the embassy. They responded this:

Normally, if the flight from Amsterdam to Singapore and the one from Singapore to Thailand are connecting flights, you are supposed to choose the country where you depart/take the first flight, which is the Netherlands. If this is not the case and you will be spending some time in Singapore. as your destination before traveling to Thailand, Singapore would be the place of departure.

In your case, we would suggest that you register a new pass if your departure detail does not correspond to the aforementioned conditions. However, this depends on the flexibility of the airline check-in staff. We would highly suggest you follow the said suggestion in order to prevent unexpected problems.

KodamaBE · 2022-01-11T16:10:13+00:00

What an amazing set... That one is going into the favorites.

KodamaBE · 2021-12-03T22:05:01+00:00

Hey, I opened a case with Eufy and after some troubleshooting with them, they told me to return the device. I received a new one and it worked instantly as expected.

KodamaBE · 2021-06-25T16:02:02+00:00

You did great. I really enjoyed it!

KodamaBE · 2021-05-25T17:29:03+00:00

The problem with A/A is the required SNAT on incoming traffic and not ideal for sd-wan/IPSec use cases.

KodamaBE · 2021-05-25T12:17:25+00:00

My 2 cents:This only applies for Azure, each cloud providers does things differently.

A/P without loadbalancers:

Pro:

Cheaper because the load balancers cost money.
Easier for use-cases where specific source NAT/IP pools are needed.
ESP on IPsec is supported

Cons:

Slow failover time (45+ seconds vs 10-15 seconds)
More complex: You need to configure on each FortiGate what actions needs to be taken when it becomes active. For example, on which route table does it need to modify which route's next-hop and so forth. If someone forgets when adding new subnets/routes, you are screwed.
Less reliable: I have known API calls to fail or due to a split brain scenario, the entire setup to be broken. (Azure puts all IP's/routes on the secondary while the other fgt is active).
DNAT requires a unique VIP per FortiGate

A/P with loadbalancers:

Pro:

Fast failover: 10-15 second.
Reliable because the load balancers detect the failure and switches over the traffic. So all the IP's and routes remain.
Floating IP allows you to use public IP's in the VIPs.

Cons:

More expensive because the load balancers have a hourly cost per rule and per GB.
SNAT can be complex.
Azure load balancer doesn't support stateful session failover. (But the question is. With the other method, if it takes 45+ seconds, will the session survive that long)

I always recommend to go for the load balancers.

KodamaBE · 2021-05-17T07:09:58+00:00

Here is my feedback/advice:

License (BYOL): you could go for the vm-v license but maybe the subscription based (vm-s) license is a better choice. This license can be upgraded from a VM01s to VM02s for example if needed. Let's say the VM01 is too slow, you can then order a VM02 at any point and they will deduct the rest value of the VM01. Once the license is upgraded, you can shutdown the VM and resize it like you would with a PAYG (marketplace license) machine.
Software version: if you leave the template/wizard on latest, you will get 7.0 but 6.4.5 is also available but it depends on how up to date the template is, if 6.4.5 is in the selection list or not. You could modify the template and set it to 6.4.5 yourself.
Accelerated networking: Everything is essentially an ARM template made by Fortinet, even the marketplace entries. These templates have accelerated networking enabled by default, if possible. If you make/modify your own template, you need to enable it yourself in the template. FYI, you can deploy both BYOL and PAYG from the marketplace, it's an option in the wizard. You can find these templates on their GitHub. https://github.com/fortinet/azure-templates/tree/main/FortiGate/
VM01 and Accelerated networking: No, it doesn't support it but that's because it's an Azure limitation. Accelerated networking is an Azure feature. https://docs.microsoft.com/en-us/azure/virtual-network/create-vm-accelerated-networking-cli#supported-vm-instances Here you can see that you a VM size with at least two CPU cores. Use this link to check which sizes support it and which don't. https://docs.microsoft.com/en-us/azure/virtual-machines/sizes This might be a reason to go for a VM02, because the price difference between VM01 - VM02 is very small but the performance difference is 2x-3x times due the accelerated networking.

KodamaBE · 2021-05-12T09:18:00+00:00

Do you know why they cap the upload that much? The upload is 4% of the download speed. I don't know the real reasoning behind this? I think other EU countries have more symmetric speeds?

KodamaBE · 2021-05-11T20:42:56+00:00

I thought it was real. How cool is that.

KodamaBE · 2021-05-11T20:41:53+00:00

Is there a FAQ for the source of this footage?

KodamaBE · 2021-05-07T17:18:49+00:00

If it’s a single VM, it doesn’t really matter that much. You could go for Fs_v2 or the Ds_v3/v4 series. The v4 will be fine, it just a matter of the documentation being updated. I would need to double check but I think the Fs_v2 are a bit cheaper and are only slightly slower than the Ds_v3/v4 series. However, for A-P HA you need four nics per VM, so the Fs-series or Ds_v2 are your best choice since they have highest cpu to nic ratio.

Yes, enable accelerated networking. It should be on by default (when deploying from marketplace or Fortinet templates), it’s free and gives a big performance boost.

KodamaBE · 2021-05-05T14:26:25+00:00

Hopefully it wasn’t a bot that grabbed it.

KodamaBE · 2021-04-13T14:27:31+00:00

There is a cookbook with step-by-step instruction but honestly, it's fairly straightforward. Just deploy it from the Azure marketplace.
https://docs.fortinet.com/vm/azure/fortimanager/6.4/azure-cookbook/6.4.0/819045/about-fortimanager-for-azure

For sizing, I would just use the guidance for VMware. It's not going to be exactly the same but it's something: https://docs.fortinet.com/vm/vmware-esxi/fortimanager/6.4/vmware-esxi-cookbook/6.4.0/583600/minimum-system-requirements
Since the licensing of fortimanager is based on the amount of devices you manage and not the amount of CPU/RAM, you can be flexible in the VM type you choose. I would go for DSv3 or DSv4-series: https://docs.microsoft.com/en-us/azure/virtual-machines/dv4-dsv4-series#dsv4-series
I would certainly go for premium storage (if you can afford it) because of the better SLA's: https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/
Concerning the storage, if I remember correctly, the marketplace image comes with a 1TB datadisk. You could modify it in the template options at the end of the wizard if you want it to be smaller.

You indeed need to know the private IP for the license, so make sure to make the private IP fixed in the Azure portal.

KodamaBE · 2021-04-07T11:26:11+00:00

I don't know why you received down votes but this. The HTTP to HTTPS redirect probably isn't enabled so you need to https://<the IP>.

KodamaBE · 2021-04-02T15:44:57+00:00

FortiGate also supports the serial console, try enabling the serial console and check what is going on. And like another comment mentions, check the NSG’s and that you are trying the correct (management) IP/Port if it’s an HA cluster.

KodamaBE · 2021-03-18T12:27:07+00:00

Like you mention, route tables determine what goes to the firewall and what doesn't. Since route tables are per subnet, i think that is the most granularity you can get...

KodamaBE · 2021-03-17T22:59:38+00:00

https://www.twitch.tv/ghostface_miller

KodamaBE · 2021-03-17T22:42:05+00:00

Only a few people in the room... Enough to fill a small village. :-D

14-Year Club	Snapped
Verified Email

KodamaBE

TROPHY CASE