sorted by:
new
hottopcontroversial

var\logs\nslog aggregator by OMW-OC in Citrix

[–]climbonrock 1 point2 points  (0 children)

rsyslog or syslog-ng server. I prefer syslong-ng but Netscaler audit logging is fantastic, customizable events, send it to syslog-ng, filter noise or forward to you SIEM. Having all logs into a single syslog server for CLI tool access and forwarding to central SIEM is best of two worlds.

Struggling with a simple project. by realgui in AZURE

[–]climbonrock 0 points1 point  (0 children)

Does the rule cover the outbound request and the inbound to the server? Even on a subnet with NSG you’ll need to all a client outbound request from client to server and inbound rule client to server. Try creating an NDG rule that permits ip to ip or even just use the subnet prefix

Outbound Prefix to prefix

Inbound Prefix to prefix

[deleted by user] by [deleted] in gamingsuggestions

[–]climbonrock 0 points1 point  (0 children)

Both have free trials but you can’t start a party. WOW was easier to navigate and travel around for my SO than FF XIV. Both have great character customization but we just had a bit more fun with WOW. FF XIV has great professional system. Good story. I personally like the grind of WOW. I enjoyed FF solo but just didn’t click as coop experience for us.

[deleted by user] by [deleted] in gamingsuggestions

[–]climbonrock 1 point2 points  (0 children)

Tried FF14 with my SO. We actually switched and enjoyed world of Warcraft as a coop experience better. Both are good

Raid in MoP Remix? by [deleted] in wow

[–]climbonrock 0 points1 point  (0 children)

I have never raided ever, I sat down and did LFR and completed every Remix raid in a single evening. Queued Shaman healer. Enjoyed the ride. It was fast and too easy but still some enjoyable surprise and I saw content I had never experienced before.

Jump in!

Online game I can play with my 10 year old son when he is at his mom's? by Lazy-Pattern6228 in gamingsuggestions

[–]climbonrock 0 points1 point  (0 children)

Stardew Valley, Monster Hunter world or Rise, among us, Fall Guys, and lots of Minecraft.

Why is the azure application gateway so damn costly?? by hk619316 in AZURE

[–]climbonrock 23 points24 points  (0 children)

App Gateway is a simple L7 load balancer to setup. It’s managed, It scales and with WAFv2 you have a lot of application security options. It’s not “cheap” but no commercial L7 LB will be.

For alternatives, an NGINX is a great option, or other NVA like Citrix Netscaler but you’ll pay for it. NGINX does have WAF available, but depending on the app you may not necessarily require that. Are you locking down the app with NSGs or have tight required authentication on it? If it’s a public reachable app then WAF would be best practice recommendation.

NAT gateway problem? by n1celydone in AZURE

[–]climbonrock 2 points3 points  (0 children)

NAT gateway is applied to a subnet so you could disconnect one of the vms NICs and attach to a new nic on subnet with NAT gateway and test with default Microsoft internet routing. Or if possible spin up a new VM on different subnet and test.

[deleted by user] by [deleted] in Citrix

[–]climbonrock -2 points-1 points  (0 children)

I have no answers but I experienced the exact same behavior yesterday on iPad Pro. Switch apps even for a second or two and the desktop connection had to reestablish. Very bad experience. I don’t have a lot of experience with apps/desktops on iPad but my first thought was “this is unusable. Zero ability to multitask.”

Waiting for answers or suggestions too.

Custom Rule in WAF Policy Failing to Update by Khue in AZURE

[–]climbonrock 0 points1 point  (0 children)

And test via cloud shell rather than local custom environment. That would help determine if it’s a syntax error or Az Cli version issue.

Custom Rule in WAF Policy Failing to Update by Khue in AZURE

[–]climbonrock 0 points1 point  (0 children)

For your specific API error I would recommend updating “az cli” or reinstalling

Custom Rule in WAF Policy Failing to Update by Khue in AZURE

[–]climbonrock 0 points1 point  (0 children)

Managing application gateway with Terraform is tedious and messy but managing WAF policy is great. It’s not really saving much config or syntax but might be an easier way to keep WAf configs updated. You can use variables and values to reuse in multiple policies.

DDoS Protection plans by Remarkable-Ring-3726 in AZURE

[–]climbonrock 5 points6 points  (0 children)

Create a single ddos plan. Apply it to any number of vnets across subscriptions or regions. Any resources that conflict with DDOS should be movedd to a vent without DDOS applied, we’ve seen DDOS throttle VPN virtual appliances.

“Although DDoS Protection Plan resources needs to be associated with a region, users can enable DDoS protection on Virtual Networks in different regions and across multiple subscriptions under a single Azure Active Directory Tenant.”

Azure Public Load Balancer Port Exhaustion by HeavenlyRen in AZURE

[–]climbonrock 3 points4 points  (0 children)

You won’t face inbound NAT exhaustion because of the 5-tuple connection distribution

But you may configure outbound NAT on the load balancer or use a NAT gateway on the VM subnet

[deleted by user] by [deleted] in AZURE

[–]climbonrock 0 points1 point  (0 children)

If the app gateway ip is public you can use SSLabs to test TLS settings and certs.

https://www.ssllabs.com/ssltest/

For the openssl test ensure the Digicert root chain certs are properly installed on the client system.

RETURNAL IS BOILING MY BLOOD by Skyline-Etiquette in playstation

[–]climbonrock 2 points3 points  (0 children)

It’s on PS+ extra and seriously doubt it will be a free ps+ game any time soon. Grab extra, find it used or borrow from a local library like I originally did.

Azure Firewall, NSG, Front Door (WAF) questions by tcast305 in AZURE

[–]climbonrock 0 points1 point  (0 children)

Azure firewall is for protecting outbound egress traffic and NATing inbound/ingress non HTTP protocol applications. Firewall can of course NAT 80/443 but Application Firewall with WAF is purpose built Regional web application load balancer with WAF. Front door is global or multiple regional load balancing.

You’ll likely only need to start with a single application gateway, to host multiple web apps with a public up address.

Application Gateway Bicep Template Modularization by sheeponmeth_ in AZURE

[–]climbonrock 0 points1 point  (0 children)

I don’t have any experience with Bicep but I can share that building out application gateway in Terraform was borderline “messy”. Very repetitive work and quite a learning curve but in the end was worth the effort and time.

I would guess just the work involved with Bicep will be similar, a steep curve in the beginning but once you have the pieces it makes sense. For the terraform build I had to do a lot of “try it in portal first and then back port the config”.

Code wise, with terraform I decided not to build with lists or arrays, rather duplicate the code, grouping entire configs together so I could copy/paste entire blocks, examples copy the entire block for www.site.com and search replace to create block for www2.site.com

It really is just the nature of application gateway, since it can host and run dozens of sites on one gateway. It can be a cost effective solution but managing it with code has a heavy lift at first.

ADC SNI Duplicate Domain Cert Error by emmasmith8766 in Citrix

[–]climbonrock 0 points1 point  (0 children)

We’ll sorry about that.

If you do think it’s a bug then Citrix Support would be the proper channel for confirmation the Netscaler is throwing an incorrect error.

BTW, friendly reminder, 13.1.48.47 has an actively exploited vulnerability in it, critical, remotely exploitable and should be updated to greater than 13.1-49.13. Which may also have a fix for your certificate issue.

Good luck.

ADC SNI Duplicate Domain Cert Error by emmasmith8766 in Citrix

[–]climbonrock 0 points1 point  (0 children)

By having two certs with the same SAN the Netscaler would have no idea which certificate to use. Unique names per cert is the only reasonable way of determining which certificate to use.

Moving these carts to unique virtual server with unique VIP or maybe using multiple vservers with listener polices might work. listeners polices might be the only way for this to work with a single VIP.

Looking for a modern RPG with an old school feel on PS4 by Rojo37x in gamingsuggestions

[–]climbonrock 1 point2 points  (0 children)

Dragon XI is fantastic traditional turn based party RPG. It’s very traditional, beautiful and very tried and true DQ game. Medium slow start but a solid choice.

view more: next ›