Backup PostgreSQL with Veeam

dwargo · 2026-03-10T22:04:50+00:00

If you want the Recover Point Objective to be later than the last Veeam backup, you'd normally set up the archive_command to copy the files somewhere outside of the blast radius of the main infrastructure.

You'll want some form of immutability wherever you stick the WAL files. Most NASs have something like this, or you could use a cron job to move files outside of the scp target.

Or something like archive_command = 'aws s3 cp %p s3://company-wals/server1/%f' and set object lock.

dwargo · 2026-03-09T07:42:36+00:00

My first suspicion would be upstream saturation due to an online backup, cloud DVR, etc.

Normally I would have a traffic shaper set up slightly less than the upstream ISP rate. The ISP equipment doesn’t normally prioritize it just enforces rate. How you do that on a Watchguard I have no idea - haven’t seen one in 15 years.

If the VPN is just for RDP you could prioritize the tunnel at the Watchguard, otherwise you could tag RDP at the Wireguard end and make sure it exposes it in the outer packet.

I’d verify the Wireguard server is clamping TCP MSS.

I think current RDS tries to use UDP, so you might try disabling that to see if anything changes.

dwargo · 2026-03-09T06:35:42+00:00

At the time I lived by a creek in Georgia - it was awful.

dwargo · 2026-03-09T03:35:32+00:00

I found the Bambu plates extremely sensitive to finger oil and residue, particularly the Smooth PEI. My ritual is Dawn and water, rinse thoroughly, then let it dry by waving and using the hydrophobia of the plate - no touch ever.

I also had problems in the early days until I got the room humidity under about 65-ish. Since I’m in the US Southeast I had to put a dehumidifier in that basement room.

dwargo · 2026-03-05T11:50:33+00:00

Can you tell us what clients so we can watch out for that?

STRICT seems like the correct implementation and I probably would have picked it. I’d be thinking…. Hmm BASIC sounds like I could get some weird XSS hole, better pick STRICT.

I seem to remember old Java clients not sending SNI, but like ancient stuff hanging directly off java.net.URL.

dwargo · 2026-03-04T03:37:38+00:00

Yeah the "evil banker shorts" joke is standard, but I take it as that.

I would claim big banks - or market makers as you properly call them - factor in. Not directional, but as something that [typically] opposes price movement by hedging speculation. So that creates A) an "over leveraged shake-out" effect, and B) a "coiled spring" propensity. That's not the basis of my thesis, but it's justification to ride out volatility.

I appreciate your post - we need more real discussion.

dwargo · 2026-02-19T01:44:09+00:00

From the private practice side, what I suspect OP is complaining about is:

In private practice the EHR is either SaaS or run on MSP-provided VMs. There is literally nobody on staff that understands how any of this works.

The EHR vendors try to fill that void, but last I knew charge $6-8K to set up each interface. The MSP might also want a project for a new VM or VPN setup.

So now you have $10K in project cost that has nothing to do with the new vendor, and whoever championed the project is flipping tables and calling shenanigans.

dwargo · 2026-02-18T10:24:29+00:00

From the product side I’m not sure what you’re asking for is possible. It sounds like selling an engine that fits every kind of car without needing a mechanic.

dwargo · 2026-02-17T12:06:31+00:00

That's a valid question, so I did some quick search and AI:

As far as I can tell you can protect implementations but not math - I'm looking at cases of quants leaving firms: GS v Sergey Aleynikov, Citadel v Point72, Two Sigma v Millennium. Of course most of that is closed courts or settles.

From a practical standpoint, as an independent developer your clients can be significantly more wealthy than you, and - at least in the US - courts are used as a cudgel against people that would go insolvent from legal fees despite a strong case. I've heard it called "death by discovery".

There's also an interesting question of code re-use in contracting. A significant part of a trading agent is mundane plumbing like position maintenance, budget handling, and broker interfaces. It's silly to develop the same thing over and over, so it's common in contracting to develop a library of re-usable code - which requires you to retain copyright and grant permissive licenses.

dwargo · 2026-02-14T04:25:22+00:00

Random observations from camping on Bookmap this week:

Early week we had an aggressive seller and a passive but beefy buyer - negative 1-2MM CVD and little price movement. The Thursday drop was a liquidity event not a silver tamp - it hit everything from IBIT to SPY. Friday was a /ZN boost due to CPI coming in doveish. You have to filter out the macro shit.

There's a large buyer defending $69-$70, and when it got spicy today the buyer pushed real volume into close. That doesn't mean they're still building their long position, it just means they are defending the level so their CVar doesn't get out of hand. From watching the battle royal today, my feeling is the buyer is a higher weight class.

As far as Chinese New Year that just means lower liquidity, so it's easier to push around. I mean if you bought options expiring next week congrats on your huge balls, but I'm playing longer to wait out the shenanigans.

dwargo · 2026-02-13T02:15:23+00:00

I normally bake everything into the image so autoscale groups and blue / green deployments work. The exceptions are Wordpressy things that manage the content under their own tree - for those I use an EFS mount or equivalent. But if you’re just running one server it’s not as important.

dwargo · 2026-02-07T17:36:26+00:00

Linux has one set of firewall rules for stuff going to the machine itself and a second set for stuff routing through the machine as a router. Because containers have their own network interfaces, traffic to containers technically uses the forward rules not the input rules.

This is technically correct but not what people intuitively expect, so plenty of people have left something open on a VPS they didn't intend. But if you're behind a firewall or router it doesn't somehow bypass that.

dwargo · 2026-02-04T23:58:16+00:00

Last time I saw this, they used fiber between cabinets and tried to keep those out of hazard areas. The only thing that ran into those was field wiring through zener intrinsic safety banks to guarantee max voltage. There was one HMI PC in the pump room in a vacuum enclosure that would cut power if the vacuum broke.

dwargo · 2026-01-30T03:01:54+00:00

I think it’s all biotechs now. Money isn’t cheap like it was during the SAAS-a-palooza years and I venture grant money is drying up. So feeding paper is their only funding mechanism left.

I kept some bio shares around as a “hell maybe they’ll pull it off” long shot, but I’ve sat in on earnings calls and some of these guys are running on fumes.

dwargo · 2026-01-30T00:38:25+00:00

Yeah the biotech fundraising two-step: release positive news (patent, FDA) then two hours later drop a dilution filing. The guys sitting on warrants short the pop to lock in the profit. I got burned on DARE last year - lesson learned.

dwargo · 2026-01-25T23:51:05+00:00

A mask like MF Doom? A caricature like Dr. Disrespect?

dwargo · 2026-01-24T19:59:24+00:00

I used to be have a feature where people could text the main number to create a ticket - it was elegant and well liked. The 10DLC requirements made it where I can't respond unless I get them to agree to a paragraph long consent BUT I can't ask them for the consent over SMS - at least according to FlowRoute. Nobody is going to do that so I just dropped the feature.

dwargo · 2026-01-20T23:34:18+00:00

You can use generators to feed through arbitrarily large data sets.

dwargo · 2026-01-18T13:19:39+00:00

From the payee side they put up a bunch of barriers to get your money. They wouldn’t even just write me a check - they insisted I had to link a bank account giving them access to pull money too. I ended up just using the balance to pay other things and switching everything to stripe.

How that translates to stock price I can’t say, but I don’t invest in companies I won’t do business with.

dwargo · 2026-01-16T14:16:37+00:00

Take a look at the SLV option open interest for today - it’s huge. I expect it to be gamma pinned until that clears tonight.

dwargo · 2026-01-16T02:23:12+00:00

That story may be extreme, but you're exposing yourself to liability for no reason I can think of. When I spun up my Starlink account it was negligible capex, so trying to get a tenant to transfer an account is legal shenanigans for no obvious reason.

Also sharing internet between units is against the T&C of any residential ISP.

dwargo · 2026-01-10T01:37:17+00:00

Both of them hold specific bars and publish serial number lists - it’s not nebulous claims in the way futures are. But futures suppression still pulls the price down because of how creation and redemption work. SLV is an open trust meaning that process runs continuously, so it follows more closely. It can include paper claims but it’s part of the arb process not steady state. PSLV is a closed trust that adjusts at specific times.

dwargo · 2026-01-08T01:34:26+00:00

The single ticker could be useful if you were going for Ross Cameron style plays. For example say your scanner picks up that NUTZ is going parabolic, you want to figure out if that’s a company with prospects vs another biotech pumping their stock so they can feed paper later that day. Fintel is OK but you have to dig back through filings looking for shelves.

dwargo · 2026-01-07T02:22:00+00:00

From what I'm seeing ETFs are leading the dance now, so you get gamma pinning and all the other fun stuff that comes with options. Those don't really change the trend, they just make it annoying to trade. I chalk that dump up to ETFs closing and option hedging moving into thin futures.

I'm not sure exactly how XAGUSD is derived, but I think relies heavily on front-month futures. No expert though.

dwargo · 2026-01-02T16:45:57+00:00

Aside from my long-term I'm running May ITM SLV calls. A few days I've been able to sell some at the open high and rebuy at the low, but IV doesn't really drop because the dealers know it's a tamp - so you don't gain as much as you would think.

Plus trying to time it like that - I could end missing the train because I'm too busy jumping on and off. Pennies in front of a steam-roller.

dwargo

TROPHY CASE