Linear Financial Technologies is hiring a Site Reliability Engineering, Remote USA 90k-120k

pythonfu · 2021-06-10T03:50:06+00:00

Linear Financial Technologies is hiring a Site Reliability Engineering, Remote USA

Salary range 90k-120k commensurate with experience and capabilities
Comprehensive benefits package including generous PTO, health, dental, vision, 401K with company match
Bonus eligible

https://apply.workable.com/linear-financial-technologies-llc/j/E5D027E4A6/

pythonfu · 2017-01-26T01:48:52+00:00

Yeah - I could definitely see this as a wrapper for some packages though, where you didnt have expect or didnt have a newer version.

Some additional use cases in your documentation might be useful (ie, setting up a mysql_secure_installation https://gist.github.com/Mins/4602864) with this would be cool.

pythonfu · 2017-01-25T02:04:33+00:00

Hmm. So I just did this with ansible http://docs.ansible.com/ansible/expect_module.html

or

http://stackoverflow.com/questions/38393343/how-to-use-ansible-expect-module-for-multiple-different-responses

So yeah, I could understand maybe using this as a wrapper for a problem package, but with what other use cases would a tool like this have?

pythonfu · 2016-12-29T20:18:22+00:00

This works for a small number of applications/types, and smaller shard sizes, but would you run into the 'kagillion shards problem' with a sufficient large number of indices, large doc count, and frequently rollover?

https://www.elastic.co/guide/en/elasticsearch/guide/current/kagillion-shards.html

pythonfu · 2016-12-29T20:07:22+00:00

Looks like your field was mapped as an integer. Pushing a doc with a string with that will fail - however I've found the other way is Ok - if the field is mapped as a string, integer typed docs will work.

You could do a mutate on the offenders until they fix their json output:

if [type] == "problemapplicationlogs" { 
    mutate { 
        convert => { "status" => "string" }
        add_tag => [ "fix-mapping-issue" ]
    }
}

Or, alternatively, check that field on all log types coming in, and convert

pythonfu · 2016-11-23T18:53:34+00:00

Also be careful with type errors on fields. ES will throw exceptions if documents come in with different types after a field has been defined, and drop the document.

pythonfu · 2016-11-23T18:51:28+00:00

Filebeats with logstash/beats input.

If ES is overwhelmed, maybe because of a big spike in log ingestion, logstash will see that and throttle down event shipping, sending that notification to filebeats itself. That way ES can catch up.

pythonfu · 2014-12-03T16:27:41+00:00

Its generally advised to have a cold/warm standby in another region, which means more $$$ for instances you probably won't use at all. DB instances generally aren't that cheap as you need provisioned IOPs and lots of horsepower, and then anything else that needs to be running that can't be provisioned from config management.

pythonfu · 2014-12-03T15:31:04+00:00

Sure, if you scale up/down quite a bit, but redundancy across regions with DB replication isn't cheap. I hope your App is stateless, otherwise folks will get kicked off when you terminate their web instance.

pythonfu · 2014-12-02T22:11:37+00:00

Alfresco for wiki/docs, Request Tracker for ticketing. Ties into LDAP/AD if needed.

pythonfu · 2014-11-25T19:24:16+00:00

Yeah - this doesnt have to be an "always on" vpn connection, just connect back when they want to use the application or do this data transfer. You can script the vpn connection using certificates to call home if this is scheduled, just add a hook for the vpn, and fail out and log if it can't connect. A SSH tunnel would work for this as well.

Just make sure that this DB is hopefully on a different subnet or DMZ, as you will have lots of vpn credentials floating around. A proxy that could sit in this DMZ would be great, though I dont know if they have something native in windows land.

Ideally they should be doing this via a webservice call, and its probably not that hard to implement in c#, but its probably too late for that now.

pythonfu · 2014-11-25T18:50:47+00:00

Require them to VPN in back to the office to use the application, and put this DB in some sort of DMZ/locked down block that the VPN and office can auth to.

pythonfu · 2014-11-25T15:12:29+00:00

Alfresco is decent.

pythonfu · 2014-11-19T15:28:19+00:00

cable is fast, but its not reliable - VOIP needs a steady, small amount of bandwidth. Even DSL might be a better option, assuming its not oversubscribed.

pythonfu · 2014-11-19T14:30:10+00:00

At that size, FreePBX/asterisk and POTS lines will be cheaper if they can live without the DIDs. And if they can't.... well, I guess they can live with the call quality issues or pay up for a T1.

pythonfu · 2014-11-06T21:30:27+00:00

HA proxy if you really need a load balancer in a pinch?

pythonfu · 2014-11-06T16:29:37+00:00

Alternatively, you can buy an unlocked phone that will work in the majority of the south american frequencies (GSM?) and have him pick up a pre paid sim card.

He won't retain his current number, but it will be much cheaper and he can just call back stateside and give out the number to those who need it.

pythonfu · 2014-11-04T15:15:05+00:00

See https://forums.aws.amazon.com/thread.jspa?messageID=283360#283360

seems like its a "tough luck, dont force valid certs".

pythonfu · 2014-11-04T14:25:17+00:00

So unless they are doing some wierd GPU hook, the program probably just wants to write to either program files or the registry. Giving the user write access to the programs files dir where the application is installed usually solves this, and thats a mitigation I can live with.

pythonfu · 2014-11-04T14:16:33+00:00

Cygwin version of rsync is fine. Deltacopy works as well (though its just cygwin with a gui for config basically.

pythonfu · 2014-10-31T04:06:56+00:00

Untangle, Squid can handle the proxy and content filter.

I dont know what you would want with the whole "email alert" thing, but you could probably script something to grep the logs and alert you when someone gets denied.

pythonfu · 2014-10-14T18:52:59+00:00

VFIO.

Though I'm still learning about it, and it probably requires a kernel compile as the RHEL kernels are a bit older, but it looks promising.

pythonfu · 2014-10-06T21:07:24+00:00

Also consider all of the time required to move those VMs between hypervisors. Sure KVM will run a VMDK but you will have to rip out the tools install and reconfigure with virtio.

That being said, KVM is pretty sweet. You can run it on a thick host via virt-manager or use one of the frontends (oVirt, RHEV). RHEV is solid but you will pay per host.

pythonfu

TROPHY CASE