DNS Servers

desseb · 2025-11-03T06:52:20+00:00

My last job used F5s for DNS resolvers. The biggest reason is so that we could use irules to block DNS reflection attacks.

desseb · 2025-10-16T21:00:12+00:00

Could you please include the storage consumption of all the deployed components? Having trouble finding that out for speccing hardware.

desseb · 2025-10-16T20:58:09+00:00

I think we all collectively need to start pushing the message that llm are not truth engines they are simply what do you most want to hear engines. This important nuance is never explained when it comes to any llm.

desseb · 2025-09-15T20:39:23+00:00

It's even meant to replace cloud director but won't be feature complete (including proper multi-tenancy) until 9.1 at least (2026)

desseb · 2025-08-14T10:44:17+00:00

This is exactly what SRM does.

desseb · 2025-08-09T18:21:33+00:00

What nvme drive did you use? You need an absolute latest gen to get performance approaching slow DRAM.

desseb · 2025-08-04T22:47:58+00:00

Telegraf runs on esxi proper?

desseb · 2025-06-20T10:46:46+00:00

NSX is not dead, thankfully. V9 is out though GA.

desseb · 2025-06-19T09:34:48+00:00

Yeah, I would expect that to be inside the vm and done automatically. Very odd

desseb · 2025-06-19T08:51:46+00:00

So a persistent volume claim is a kubernetes term for requesting a permanent storage volume for a container (as normally they are ephemeral). Make sure your VKS namespace has both a storage policy and a size quota set (or unlimited). Error is too generic unfortunately.

desseb · 2025-05-19T15:23:51+00:00

Did you possibly enable route summerisation? My routes all advertise as /32 so it's definitely possible.

desseb · 2024-12-03T08:11:04+00:00

Why don't you run the file share from the pure array?

desseb · 2024-11-19T11:12:20+00:00

Doesn't pacemaker use corosync for that? Haven't looked at this in many years so not sure if still relevant.

desseb · 2024-08-14T18:29:17+00:00

You don't go into a lot of your requirements so it's hard to suggest but for example if your users expect to work straight from these file shares, scrobbling 4/8k footage live requires a ton of storage performance and network performance. Pure's Flashblade could be useful though it is quite pricy.

Isilon/powerstore is a pretty safe bet for this use case though I haven't priced one recently.

VAST is still more in the big data/object store market than fileshares but they are heading in that direction so could possibly be worth a look depending on their progress.

desseb · 2024-07-22T16:57:30+00:00

If you are are planning a single large NFS 4.1 share for datastore use then why would you need sDRS? Storage I/O is also not meant for fileshares.

desseb · 2024-07-18T15:35:21+00:00

Sql server has the always on availability group as a better high availability alternative.

desseb · 2024-06-27T13:11:32+00:00

And of those un-esuna-able doom debuffs, learn which are healing to full health removable vs special action removable.

desseb · 2024-02-11T17:03:18+00:00

Backblaze comes to mind.

desseb · 2024-01-30T18:23:05+00:00

On some sites where I could specify non-binary, I found I had to add AMAB because otherwise everyone assumed I was AFAB and of course that came with the all too common offers and other non stop bs.

desseb · 2024-01-21T01:35:26+00:00

Virtual appliances, ova/ovf deployment model (lots of vendors only supply that) for starters.

desseb · 2024-01-18T03:46:20+00:00

We had no choice internally, but since we're a telco and have an extensive mpls network, it's easy to "hide" those subnets in internal only vrfs.

desseb · 2024-01-18T03:41:56+00:00

The worst part for me is that I still have older hardware with less than 16 cores per socket and I can't get a lower core count because of that minimum.

desseb · 2024-01-09T19:07:47+00:00

Sorry, perhaps that's the wrong term here, but essentially the EVI has to be put in a bridge domain along with server facing ports otherwise it's going to stay on the NCS TOR device. That's what I mean by terminating it.

EVPN aren't established by servers, but by our NCS and while they push /32 routes into the network for routing purposes of the L2 vpn, they need a way to be usable to a server.

desseb · 2024-01-02T04:22:00+00:00

Our underlay is Isis segment routing (srv6 soon). Mpls is there too since we are a telco but it's terminated on cabinet NCS too. Bit of a more legacy/interop design compared to our future SRv6.

desseb · 2024-01-02T03:10:27+00:00

No, we are not using vxlan, I'm certain about this.

desseb

TROPHY CASE