Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-12 Thread Neil Aggarwal
Jonathan:

 Looking at the documentation closer, there does appear to be a way to
 add rules to the OUTPUT table, using the rich rules syntax.

Do you see a way to set the default policy to DROP?

Thanks,
  Neil

--
Neil Aggarwal, (972) 834-1565
We lend money to investors to buy or refinance single family rent houses.
No origination fees, quick approval, no credit check.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-09 Thread Neil Aggarwal
Earl:

 I am looking at the documentation of the new firewalld service in CentOS
7.

You can check out the following document
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/ht
ml/Security_Guide/sec-Using_Firewalls.html

That is the document I read when I referred to reading the documentation on
the
firewalld service.

Neil

--
Neil Aggarwal, (972) 834-1565
We lend money to investors to buy or refinance single family rent houses.
No origination fees, quick approval, no credit check.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-09 Thread Neil Aggarwal
Tom:

 I thought we were supposed to be moving forward

That is my thought exactly.  This is a step backwards.

I guess I will disable firewalld and go back to iptables.

Thanks,
  Neil

--
Neil Aggarwal, (972) 834-1565
We lend money to investors to buy or refinance single family rent houses.
No origination fees, quick approval, no credit check.


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Centos 7 - iptables service failed to start

2014-08-09 Thread Neil Aggarwal
Hello all:

I did a fresh install of CentOS 7 on a new machine.

I wrote /usr/local/bin/firewall.stop to remove all the firewall rules.
It contains this code:
# Flush the rules
/usr/sbin/iptables -F

# Set the default policies to accept
/usr/sbin/iptables -P INPUT ACCEPT
/usr/sbin/iptables -P OUTPUT ACCEPT
/usr/sbin/iptables -P FORWARD ACCEPT

I wrote /usr/local/bin/firewall.start to set the firewall rules.
It contains this code:
# IP definitions
ETH0_IP=a.b.c.d

# Load the FTP conntrak module
/usr/sbin/modprobe nf_conntrack_ftp 

# Set the default policies to drop all packets
/usr/sbin/iptables -P INPUT DROP
/usr/sbin/iptables -P OUTPUT DROP
/usr/sbin/iptables -P FORWARD DROP

# Flush any existing rules
/usr/sbin/iptables -F

# Allow loopback traffic
/usr/sbin/iptables -A INPUT -i lo -j ACCEPT
/usr/sbin/iptables -A OUTPUT -o lo -j ACCEPT

# Allow icmp protocol packets
/usr/sbin/iptables -A INPUT -i eth0 -d $ETH0_IP -p icmp -j ACCEPT
/usr/sbin/iptables -A OUTPUT -o eth0 -s $ETH0_IP -p icmp -j ACCEPT

[ Additional allow rules here ]

If I run the firewall.start script manually, it sets the iptables rules
correctly.
If I run the firewall.stop script manually, it removes the iptables rules
correctly.

The problem comes in when I am trying to execute this from systemd.

I wrote /etc/systemd/system/firewall.service with this content:

[Unit]
Description=Iptables firewall
Before=network.target
Wants=network.target

[Service]
Type=oneshot
ExecStart=/usr/local/bin/firewall.start
ExecStop=/usr/local/bin/firewall.stop
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target

Now, when I run systemctl start firewall.service, I get this output:
Job for firewall.service failed. See 'systemctl status firewall.service' and
'journalctl -xn' for details.

If I do systemctl status firewall.status, it gives me:
firewall.status.service
   Loaded: not-found (Reason: No such file or directory)
   Active: inactive (dead)

journalctl -xn gives me this output:
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[1]: Starting Iptables
firewall...
-- Subject: Unit firewall.service has begun with start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit firewall.service has begun starting up.
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[2268]: Failed at step EXEC
spawning /usr/local/bin/firewall.start: Exec format error
-- Subject: Process /usr/local/bin/firewall.start could not be executed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- The process /usr/local/bin/firewall.start could not be executed and
failed.
--
-- The error number returned while executing this process is 8.
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[1]: firewall.service: main
process exited, code=exited, status=203/EXEC
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[1]: Failed to start
Iptables firewall.
-- Subject: Unit firewall.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit firewall.service has failed.
--
-- The result is failed.
Aug 10 06:09:38 jamm23.jammconsulting.com systemd[1]: Unit firewall.service
entered failed state.

Any ideas what is happening here?

Thanks,
  Neil

--
Neil Aggarwal, (972) 834-1565
We lend money to investors to buy or refinance single family rent houses.
No origination fees, quick approval, no credit check.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Centos 7 - iptables service failed to start

2014-08-09 Thread Neil Aggarwal
Hey everyone:

 The process /usr/local/bin/firewall.start could not be executed 
 and failed.

I just realized I forgot to put #!/bin/sh at the top of my firewall
scripts.  I added that and it is working perfectly fine now.

Sorry for any trouble.

Thanks,
  Neil

--
Neil Aggarwal, (972) 834-1565
We lend money to investors to buy or refinance single family rent houses.
No origination fees, quick approval, no credit check.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] CentOS 7 - Firewall always allows outgoing packets?

2014-08-08 Thread Neil Aggarwal
Hello all:

I am looking at the documentation of the new firewalld service in CentOS 7.
It looks like no matter what I configure with it, outgoing connections are
still going to be allowed.  That does not seem very secure.

I always set my servers to default policy of DROP for everything incoming
and outgoing and then add rules to allow very specific traffic through.

Is this possible using the new firewalld service or should I disable it and
go back to using iptables?

Thanks,
  Neil

--
Neil Aggarwal, (972) 834-1565
We lend money to investors to buy or refinance single family rent houses.
No origination fees, quick approval, no credit check.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] acrobat reader for x86_64?

2013-03-01 Thread Neil Aggarwal
Fred:

 Adobe doesn't seem to have acroread for x86_64 linux, or at least I don't
 see it anywhere.
 Anybody know otherwise?

They produce a Linux RPM.  It's not 64 bit, but it will work and 
that is all you can get from them at the moment.

Xpdf works well enough for me that I don't need another tool.

Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] VNC server not reponding to external requests

2013-02-26 Thread Neil Aggarwal
  Will the VNC server allow remote logins as root?
 From root did you run vncpasswd to create the needed /root.vnc/ files?

Yes, I did.  I see a /root/.vnc directory with a log, pid, passwd, and
xstartup
files.

Any suggestions?

Thanks,
  Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges







___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] VNC server not reponding to external requests

2013-02-26 Thread Neil Aggarwal
Robert:

 And your /etc/sysconfig/vncserver has something like;
 VNCSERVERS=1:foo 2:root
 and you are attempting to connect to 5902 for the root user (compared to 
 5901 for user foo)?

Yes.

This is strange.  I just ran vncpasswd as root again and I can connect
now.  Weird, but I guess the problem is solved.

Thanks,
  Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] VNC server not reponding to external requests

2013-02-26 Thread Neil Aggarwal
 Our's is not to reason why...

I love that quote!  I guess you truncated it to be nice.

Thanks for your help!

Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] VNC server not reponding to external requests

2013-02-25 Thread Neil Aggarwal
Hello everyone:

I tried following the instructions on this page to set up a VNC
server:
http://wiki.centos.org/HowTos/VNC-Server

I can telnet to port 5901 from the machine itself:
# telnet 127.0.0.1 5901
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
RFB 003.008

But, when I try to connect to it from the outside world, I get a connection
timeout.

My /etc/sysconfig/vncservers file does not have the -nolisten tcp nor the
-localhost
options so it should be configured to accept outside connections.

Is there some default setting in the vncserver that I need to change to
allow outside
connections?

Thanks,
  Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] VNC server not reponding to external requests

2013-02-25 Thread Neil Aggarwal
 Is there some default setting in the vncserver that I need to change to
 allow outside
 connections?
 And what about iptables?

I have iptables and selinux turned off currently.
It still will not connect.

Any other ideas?

Thanks,
 Neil


--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] VNC server not reponding to external requests

2013-02-25 Thread Neil Aggarwal
Hey everyone:

I got it working.  I set it up under a user account.
I was trying to set it up with the root account.
It is working with the user account.

Will the VNC server allow remote logins as root?

Thanks,
  Neil

--
Neil Aggarwal, (972) 834-1565
We lend money to investors to buy or refinance single family rent houses.
No origination fees, quick approval, no credit check.

-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
Of Neil Aggarwal
Sent: Monday, February 25, 2013 10:33 AM
To: centos@centos.org
Subject: [CentOS] VNC server not reponding to external requests

Hello everyone:

I tried following the instructions on this page to set up a VNC
server:
http://wiki.centos.org/HowTos/VNC-Server

I can telnet to port 5901 from the machine itself:
# telnet 127.0.0.1 5901
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
RFB 003.008

But, when I try to connect to it from the outside world, I get a connection
timeout.

My /etc/sysconfig/vncservers file does not have the -nolisten tcp nor the
-localhost
options so it should be configured to accept outside connections.

Is there some default setting in the vncserver that I need to change to
allow outside
connections?

Thanks,
  Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] VNC server not reponding to external requests

2013-02-25 Thread Neil Aggarwal
 Well, once you VNC to the system, you can simply change to the root use if
 you have the credentials to do so.

I was hoping to connect to the remote session directly as root as opposed to
doing su.

  Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges




___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] How to limit upload bandwidth for a KVM guest?

2013-02-04 Thread Neil Aggarwal
James:

 Is this c5 or c6?

This is CentOS 6.

Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Postfix not reading main.cf

2012-06-07 Thread Neil Aggarwal
Adrian:

That is a great suggestion.  Thanks for the tip!

Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges


-Original Message-
What you should do is run postconf without paramaters to a file and
inspect that.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] [6.2] Postfix not reading main.cf

2012-06-06 Thread Neil Aggarwal
Hello:

I just did a fresh install of CentOS 6.2 on a virtual server.

I am trying to configure Postfix but it does not seem to be
reading configuration directives from /etc/postfix/main.cf

Here is what I did to test it:
vi /etc/postfix/main.cf and set this directive:
myorigin = hello.world.com
postfix reload
postconf -d | grep myorigin

I get this output: 
append_at_myorigin = yes
myorigin = $myhostname

Any ideas why it is not picking up the configuration?

Thanks,
  Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] [6.2] Postfix not reading main.cf

2012-06-06 Thread Neil Aggarwal
OK, nevermind.  I was supposed to be using postconf -n instead of -d.
Arrgh.  Been reading till my eyes are getting crossed.

Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges


-Original Message-
From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
Of Neil Aggarwal
Sent: Wednesday, June 06, 2012 9:13 PM
To: centos@centos.org
Subject: [CentOS] [6.2] Postfix not reading main.cf

Hello:

I just did a fresh install of CentOS 6.2 on a virtual server.

I am trying to configure Postfix but it does not seem to be
reading configuration directives from /etc/postfix/main.cf

Here is what I did to test it:
vi /etc/postfix/main.cf and set this directive:
myorigin = hello.world.com
postfix reload
postconf -d | grep myorigin

I get this output: 
append_at_myorigin = yes
myorigin = $myhostname

Any ideas why it is not picking up the configuration?

Thanks,
  Neil

--
Neil Aggarwal, (972)834-1565, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 6 preinstalled
Unmetered bandwidth = no overage charges


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MySQL max clustering package?

2010-03-17 Thread Neil Aggarwal
John:

 master-master replication has all kinds of inherent issues if you're 
 concerned with data and transactional integrity.

We have evaluated the problems and think we have found adequate
workarounds for them. The sites we deploy are e-commerce sites so: 
1. There are a lot more reads than writes.
2. When we need to write to the database, it is saving
info for an order.  All orders are independent
of each other so there is no conflict for those.
3. Product updates, fulfillments, etc. happen once
daily at night when the traffic is almost nonexistant.
The updates are sent to only one server so there is no 
conflict there.

The only potential place a conflict may occur is in
the qty available for a specific product.  The inventory
system updates the inventory regularly so even if the number
is wrong, it gets refreshed shortly thereafter.

We even built an application layer on top of master-master
replication to handle cases where a transaction fails.

We are using this system for several large clients
and it is working well.  Being able to have geographical
redundancy at a reasonable cost (A true cluster would
be very high cost) outweighs the limitations.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957
MySQL pre-installed on a virtual private server for $25/mo
Unmetered bandwidth = no overage charges, 7 day free trial

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MySQL max clustering package?

2010-03-17 Thread Neil Aggarwal
 Well what are your plans when it gets the AXE??

We will probably consider Maria DB.  Hopefully,
it will be mature enough by then.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 5.4 preinstalled for $25/month!
Unmetered bandwidth = no overage charges, 7 day free trial

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MySQL max clustering package?

2010-03-17 Thread Neil Aggarwal
Nate:

 I don't think MySQL replication has an issue with number of writes,

That has been our experience as well.

There are a couple of things to ensure:
1. The databases have to be sized such that they can handle
   all transactions occurring on the entire system, not
   just one side.  
2. The network between them has to be high quality.
   We use premium bandwidth and keep our replicated
   servers in data centers.  No back of the office
   connected via DSL/cable stuff.

As long as that is the case, replication has no problem 
keeping up and the transactions are sent across the 
network very quickly.  It is not real time but close
enough for our needs.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 5.4 preinstalled for $25/month!
Unmetered bandwidth = no overage charges, 7 day free trial

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MySQL max clustering package?

2010-03-17 Thread Neil Aggarwal
John:

 Have you thought of separating the databases? One for the 
 reads and one
 for the write on different raids?  Despite what some may believe this
 can be done.

Our goal is to create redundancy.  We want either system to be able
to work if the other is not available.  Designating one database
as a write db and the other as a read defeats that.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957
FREE trial: cPanel VPS with unmetered bandwidth
http://UnmeteredVPS.net/cpanel 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MySQL max clustering package?

2010-03-17 Thread Neil Aggarwal
Alex:

 Do you mean that a separate job, iterates the orders, accumulates the
 real ordered quantity and subtracts it from some initial quantity in
 order to produce available quantity?

There are a few things we do:
1. When we place an order, we commit the order to the database in
a transaction.
2. In a separate transaction, we reduce the qty available of the
product by the amounts ordered.  This transaction may be
a conflict with other transactions.  That is OK.
3. The inventory management system keeps the master inventory
of the products.  We have a continuous job that pulls the
latest updates to the inventory and feeds those updates
back to the web database.

So, even if an inventory number is wrong for a short time, it will
be updated to an accurate number soon.

 What do you do in cases where you have oversold a product. I mean when
 the ordered quantity  got bigger than the available quantity due
 to a conflict in available quantity field? I assume that the system
 sends an email to the warehouse to increase additionally the quantity
 of that product?

If we oversell a product, we are going to either have to get more
pronto or tell the customer we can't deliver it.  The inventory 
numbers are updated often enough that we do not encounter it often.

 Could you describe a case where a transaction has failed , and how you
 deal with it?

If a transaction fails on one endpoint, we try it against another
endpoint.  If it still fails, it depends on what the transaction
was for.  If it is not urgent (Like updating an inventory number)
we send ourselves and alert and drop the transaction.  If it is
urgent, we notify the customer there was an error and send ourselves
an alert.  This happens very rarely.

We also have monitoring on the state of the replication endpoints
to make sure they are still active and are not having a problem
communicating to the master.

I hope this helps,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/centos
Virtual private server with CentOS 5.4 preinstalled for $25/month!
Unmetered bandwidth = no overage charges, 7 day free trial

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MySQL max clustering package?

2010-03-17 Thread Neil Aggarwal
John:

  So, even if an inventory number is wrong for a short time, it will
  be updated to an accurate number soon.
 --
 I am just curious is this a hack around some specific 
 problem?  It just
 does not merge in my head.

Our customers sell products on marketplaces (Like Amazon)
as well as their direct web site so the web database needs
to get inventory updates from the inventory system in case
a product sold somewhere else.

Neil

--
Neil Aggarwal, (281)846-8957
FREE trial: cPanel VPS with unmetered bandwidth
http://UnmeteredVPS.net/cpanel 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MySQL max clustering package?

2010-03-17 Thread Neil Aggarwal
 that may be OK for an order processing system, but it could 
 be a serious 
 problem for something like a banking system where you are 
 dispersing cash.

I agree.  I did preface my comments with that.

Neil

--
Neil Aggarwal, (281)846-8957
FREE trial: cPanel VPS with unmetered bandwidth
http://UnmeteredVPS.net/cpanel 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] MySQL max clustering package?

2010-03-16 Thread Neil Aggarwal
 Mysql by itself has built in clustering though
 there can be significant limitations in it depending on your
 requirements.

I agree.  The built in cluster has too many limitations to
be useful, but MySQL master-master replication gives a very
good alternative to a true cluster.  We use it to deploy
geographically redundant systems and it has worked very
well for us.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/mysql
MySQL pre-installed on a virtual private server for $25/mo
Unmetered bandwidth = no overage charges, 7 day free trial

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Virtualization software to install Windows as guest on CentOS 5 as host ?

2010-02-03 Thread Neil Aggarwal
 I need to install Windows as guest on my CentOS 5 as host.
 Can you please give  me the link to download the requierd rpm 
 package for this purpose ?

The RedHat Virtualization Guide gives you all the info you will need:
 
http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Virtuali
zation_Guide/index.html
http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Virtualiz
ation_Guide/index.html
 

--
Neil Aggarwal, (281)846-8957
FREE trial: cPanel VPS with unmetered bandwidth
http://UnmeteredVPS.net/cpanel

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RAR from Console

2010-01-25 Thread Neil Aggarwal
 Hi fellows, how can I unrar (.rar of course) from my console?

RPMForge has an unrar package.
 
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/cpanel
cPanel/WHM preinstalled on a virtual server for only $40/month!
No overage charges, 7 day free trial, PayPal, Google Checkout 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS-virt] How to debug Ubuntu 8.04 LTS guest crashduring install?

2010-01-23 Thread Neil Aggarwal
 Runs fine on my centos 5.4 kvm, although I used the
 virt-manager gui to install it. 

Are you using bridged networking?  I think it has something
to do with that as well as not having a DHCP server in
my network.

 Interesting little distro - thanks for bringing it to my
 attention...

I am glad you found it useful.  I think it is a great
project which adds tremendous value.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/cpanel
cPanel/WHM preinstalled on a virtual server for only $40/month!
No overage charges, 7 day free trial, PayPal, Google Checkout 

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-virt] How to debug Ubuntu 8.04 LTS guest crash during install?

2010-01-22 Thread Neil Aggarwal
Hello:

I am using kvm on a CentOS 5.4 server.

I am trying to install the TunkeyLinux Core appliance 
found here: http://www.turnkeylinux.org/core

I downloaded the ISO file from the web site.

Then, I used this command to intall it:
virt-install -n tkl-core -r 512 --vcpus=1 --check-cpu --os-type=linux 
--os-variant=ubuntuhardy -v --accelerate 
-c /tmp/turnkey-core-2009.10-hardy-x86.iso 
-f /var/lib/libvirt/images/tkl-core.img -s 15 -b br0 --vnc noautoconsole

When I connect to the VNC console, I get the Turnkey linux 
options screen.
I select Install to hard disk from there and it seems to 
start the install but crashes during the installer startup.

This is repeatable so there has to be a way to debug it.

I tried turning on the debug option for virt-install but that
did not give me any useful info.

Any ideas how to debug this?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/cpanel
cPanel/WHM preinstalled on a virtual server for only $40/month!
No overage charges, 7 day free trial, PayPal, Google Checkout

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS] followup to request for centos C/W

2010-01-20 Thread Neil Aggarwal
 i'm under the
 impression that RH is firmly in the KVM camp (at least for now), and
 that learning Xen on red hat/centos wouldn't be as useful as learning
 KVM.

I agree.  Since RH is moving to KVM, it is better to learn KVM if
you have a choice.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/cpanel
cPanel/WHM preinstalled on a virtual server for only $40/month!
No overage charges, 7 day free trial, PayPal, Google Checkout 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] followup to request for centos C/W

2010-01-20 Thread Neil Aggarwal
 I don't have the hardware requirements at home to support KVM

I thought they run on the same hardware.  What do you feel
would not support KVM?

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/cpanel
cPanel/WHM preinstalled on a virtual server for only $40/month!
No overage charges, 7 day free trial, PayPal, Google Checkout 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS-virt] Xen Database vms

2010-01-15 Thread Neil Aggarwal
Ben:

 What if it were the only real active vm?

There is some overhead in virtualization, but you would
essentially have all the machine's resources available
to your db server.  That should be close enough to bare
metal performance.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/centos
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, PayPal, Google Checkout

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS] Get Me Outta Here! Web site security issue

2010-01-12 Thread Neil Aggarwal
 The user gets a warning saying that site identity could not 
 be verified and the user can add an exception if they want.

Those are SSL Cert warnings.  You will get to get a signed
cert to avoid them.

SSL Certs are pretty cheap now.  

http://startssl.org will generate certs for free but you
have to register and jump through a few hoops.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net/centos
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, PayPal, Google Checkout

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Apache/Cluster issue -- Single public IP address

2010-01-08 Thread Neil Aggarwal
 Is this the end of the road, for installing apache as a 
 service with ONE public IP
 address??

If I understand clustered services, you have only one
public IP address for the cluster, but that IP address needs
to be a virtual IP which can be point to one or more machines
on private IP adresses.

We have had good success creating HA services using
mysql master-master replication.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
Host Joomla!, Wordpress, phpBB, or vBulletin for $25/mo
Unmetered bandwidth = no overage charges, 7 day free trial 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Software RAID1 Disk I/O

2010-01-05 Thread Neil Aggarwal
 [r...@server ~]# uptime
  17:20:54 up 7 days,  3:26,  2 users,  load average: 3.41, 2.93, 2.89

I think you need to investigate what is causing the load
to be high.  In my experience, software RAID causes some
CPU load, but it should not be sustained unless you have
something doing continuous disk IO.  

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, PayPal, Google Checkout

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] chroot problem.

2009-12-30 Thread Neil Aggarwal
Frank:

 chroot: cannot run command `/bin/bash': No such file or directory

Do you have selinux disabled or enabled?

Neil 


--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, PayPal, Google Checkout

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: What are the 2 openssl commands I need to use?

2009-12-29 Thread Neil Aggarwal
Lanny:

 discovered that openssl is not available to me

You should be able to do a yum install openssl.
Do you have root access to the server?

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, PayPal, Google Checkout

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Sparc?

2009-12-29 Thread Neil Aggarwal
Jason:

 Are there any CentOS versions that support Sparc? 

Check out http://sparc.centos.org

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, PayPal, Google Checkout

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Future of MySQL

2009-12-13 Thread Neil Aggarwal
 Personally I'd like to see it go down so more people will start
 supporting PostgreSQL - which is a far better database anyway

Does PostgreSQL have non-transactional tables like MySQL?
I am not trying to start a holy war, just asking since I
do not know.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, Google Checkout accepted

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Virtualization Howto

2009-12-10 Thread Neil Aggarwal
Matt:

 It goes into how to make your own cloud.  Is there a similiar howto
 anywhere for CentOS 5.4 or anything?

Does the RHEL Virtualization Guide help?
http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Virtualiz
ation_Guide/index.html

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, Google Checkout accepted 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Anyone using fedora as guest/vm on Centos

2009-12-09 Thread Neil Aggarwal
 I just want to know if someone have any experience with 
 fedora installed
 as guest/VM on Centos.

Take a look at this page:
http://www.linux-kvm.org/page/Guest_Support_Status
for KVM support for specific guests.

I hope this helps,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, Google Checkout accepted

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] OT: How can I tell if a web site is now blocking IPs frommy country?

2009-12-06 Thread Neil Aggarwal
Lenny:

 days, Mozilla Firefox just hangs connecting to    How can I tell
 if they have started blocking IP addresses from Colombia?

Try using a few traceroute servers to see if other IP addresses 
from Colombia other countries are able to get to them.

Other than that, I don't think you can tell from the
outside.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, Google Checkout accepted 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS-virt] Slightly OT: FakeRaid or Software Raid

2009-12-02 Thread Neil Aggarwal
 I have had great luck with nvidia fakeraid on RAID1, but I 
 see there are 
 preferences for software raid.

I have always heard that fakeraid and software RAID
perform the same.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, Google Checkout accepted 

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS-virt] KVM Support for Windows Server 2003 32 bit ready for production?

2009-12-02 Thread Neil Aggarwal
Hello:

I am wondering if KVM is ready for production
for running a Windows Server 2003 32 bit guest.

According to the RHEL 5.4 virtualization guide,
there is supposed to be a virtio-win yum package,
but that was not released.  Instead, it looks like
that is only available for RHN subscribers.

Also, I saw this posting on the CentOS list:

--- Quoted from CL Martinez
There are freely redistributable, but still they aren't published by
upstream. You 
can use these instead: 
http://www.linux-kvm.com/content/windows-binary-virtio-drivers-finally-relea
sed, but 
there are a lot of problems with any windows 64 bits. And another problem, a
big 
really, is that you can¡t install a windows kvm guest directly to a virtio
disk. 
First you need to install to an ide disk, after generate a virtio disk and
attach to 
win guest, install the virtio driver and last remove ide drive ... very very
ugly.
 End Quote

That seems to imply things are still not ready for production
use.

Any opinions?

Thanks,
Neil


--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, Google Checkout accepted 

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS] Small proxy appliance hardware

2009-12-02 Thread Neil Aggarwal
 I need to configure a small proxy appliance which doesn't 
 require a lot of CPU power
 I need something with UL/CSA/CE approvals

I recommend you look at the Supermicro 5015A-H:
http://www.supermicro.com/products/system/1U/5015/SYS-5015A-H.cfm?typ=H

The server is RoHS compliant and the power supply has
these approvals:
USA - UL listed, FCC 
Canada - CUL listed 
EN 60950/IEC 60950-Compliant 
Europe/CE Mark 
Germany - TUV Certified 

This would be more flexible than anything else.  It already
has ethernets and there would not be any compatability
issues.

I hope it helps,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, Google Checkout accepted 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Small proxy appliance hardware

2009-12-02 Thread Neil Aggarwal
 The Realtek 8111C gigabit controller is supported by 
 RH/Centos? Even at install
 time?

I have used many different Supermicro servers and
never had any problems installing CentOS and
everything works out of the box.

Looking at the wiki page:
http://wiki.centos.org/AdditionalResources/HardwareList/RealTekRTL8111b
It looks like sometimes it works and other times it
requires a custom driver.

I did not realize there was a potential issue with that
server.  I wish I had one to test to say for sure.

Thanks for the heads up!

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
No overage charges, 7 day free trial, Google Checkout accepted 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] rndc start fails with rndc: connect failed: connectionrefused

2009-11-25 Thread Neil Aggarwal
rndc: connect failed: connection refused

Here is what works for me:

cd /var/named/chroot/etc
rndc-confgen  rndc.key
chown root.named rndc.key

vi rndc.key and remove everything except the key section.

vi /var/named/chroot/etc/named.conf and 
copy the rndckey from /var/named/chroot/etc/rndc.key
into this section

key rndckey {
algorithm hmac-md5;
secret [RNDC key];
};

I hope this helps,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
7 day free trial, Google Checkout accepted

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RAIDs and JBOD?

2009-11-16 Thread Neil Aggarwal
On Mon, 2009-11-16 at 21:49 +, James Bensley wrote:
 So I have found this card and wondered if anyone has a second opinion
on it 

(http://www.supermicro.com/products/accessories/addon/AOC-SAT2-MV8.cfm).
 Seeing as it states on the website that the CD that comes with the
 card has RedHat drivers on it, and I will be using CentOS 5.4 i386 
 on my little home server everything should work just dandy shouldn't
 it?

Supermicro has a good pre-sales team.  I would call them and ask.
They should be able to give you a definitive answer.

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
7 day no risk trial, Google Checkout accepted

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Virtualization option at firstinstall CentOS-5.4 x86_64

2009-11-16 Thread Neil Aggarwal
Dave:

 In the Red Hat 5 Virtualization documentation it seems to strongly
 recommends having at least one physical cpu per VM.  Since I 
 have a quad
 core and I want to run the host plus 2-3 VMs, I decided give 
 each VM one
 virtual cpu. Maybe I was too cautious.

In section 28.4 of the RHEL 5.4 Virtualization Guide,
they state:

Virtualized CPUs are overcommitted best when each virtualized 
guest only has a single VCPU. The Linux scheduler is very efficient 
with this type of load. KVM should safely support guests with 
loads under 100% at a ratio of 5 VCPUs Overcommitting single 
VCPU virtualized guests is not an issue. 

So, if you are going to overcommit CPUs, make sure each
one of the guests has a single VCPU.  If you want to
allocate multiple VCPUs to the guests, do not overcommit
the CPUs.

I hope this helps,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
7 day no risk trial, Google Checkout accepted 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS-virt] Virsh shutdown all command?

2009-11-13 Thread Neil Aggarwal
Kai:

  Is there a command in virsh to shutdown all domains?
 
 Not sure, but might xend or xendomains stop do this?

I am using KVM so I don't think that will work for me.
Do you know of something similar for KVM?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
7 day no risk trial, Google Checkout accepted 

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Virsh shutdown all command?

2009-11-13 Thread Neil Aggarwal
Ed:

  Is there a command in virsh to shutdown all domains?
   I use a script to shutdown my domains.

Thank you for the script.  I will play with it to see
if I can get it to work.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
7 day no risk trial, Google Checkout accepted 

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS] 32bit development on x86-64

2009-11-11 Thread Neil Aggarwal
 You can always run VMware server or virtualbox and install a 
 complete 32 bit 
 system on the same host for a real build/test environment.

Don't forget about KVM.  It just a yum install.

Neil

--
Neil Aggarwal, (281)846-8957, http://JAMMConsulting.com
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
7 day no risk trial! http://UnmeteredVPS.net for details. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] software installation - good practice

2009-11-11 Thread Neil Aggarwal
Carlos:

 I tend to try out many open source apps/packages

I make a separate directory for each application in /usr/local
so they are isolated from each other.

You can also use KVM to set up virtual machines to be
able to test and then drop the entire VM if you don't
like it.  That will keep your main system completely
clean.

Neil

--
Neil Aggarwal, (281)846-8957, http://UnmeteredVPS.net
CentOS 5.4 VPS with unmetered bandwidth only $25/month!
7 day no risk trial, Google Checkout accepted 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] KVM + KSM?

2009-11-10 Thread Neil Aggarwal
Lucian:

 Hmm.. It seems KSM is already included, dumb me!
 
 modinfo ksm
 filename:   
 /lib/modules/2.6.18-172.el5/weak-updates/kmod-kvm/ksm.ko

That is good to know.  I did not realize it was installed
on my system either!

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Cluster server options?

2009-11-07 Thread Neil Aggarwal
Scott:

  Some code is designed for a single, powerful workstation.  I'd like
 this cluster to act as one powerful workstation.

I think your application has to be designed to run in a cluster
environment.  Splitting up a job into multiple streams of
execution requires some the application to coordinate the
different pieces that are running.

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Free or low cost online backup?

2009-11-01 Thread Neil Aggarwal
Hello:

Does anyone know a free or low cost online backup
system for CentOS?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Free or low cost online backup?

2009-11-01 Thread Neil Aggarwal
John:

 tar(1)

I can use that on the server, but what is the other side
to store the files?  I want the storage to be remote.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] RAID 10 on Install?

2009-10-30 Thread Neil Aggarwal
 How can I RAID 10 on install?

Does anyone know if this approach:
http://www.howtoforge.com/install-ubuntu-with-software-raid-10

Will work for CentOS?

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] vnc for non-root

2009-10-29 Thread Neil Aggarwal
Ken:

 Is it possible to make the ssh connection
 connecting to a linux box from a windows machine.

I use cygwin ssh to connect CentOS servers from my windows
laptop.

Neil


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Infrastructure HELP!

2009-10-29 Thread Neil Aggarwal

If you want speed, use RAID 10.

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

 -Original Message-
 From: centos-boun...@centos.org 
 [mailto:centos-boun...@centos.org] On Behalf Of ML
 Sent: Thursday, October 29, 2009 12:57 PM
 To: CentOS mailing list
 Subject: [CentOS] Infrastructure HELP!
 
 Hi Everyone,
 
 I started a social networking site and I am getting ready to go live  
 next week. I have limited fund as I am not funded yet (although  
 hopefully soon).
 
 I have an extra Mac Pro (I know, how can I possibly call a Mac Pro  
 dual 2.8 quad core with 16gb RAM extra). So Mac Pro quad Core, 16gb  
 RAM, 4 x 1tb RAID level Seagate drives. I was going to load 
 CentOS 5.4  
 on it, web, mysql etc, etc. This is really the only box I have that  
 would handle the site it it takes off and then I would need to add  
 more hardware and most hosting to RackSpace or something.
 
 My question is about initial setup. The 4 x 1TB drives. How to set  
 this up for I have some protection?
 
 RAID 0+1? (striped + mirrored) I would end up with 2TB useable space.
 
 RAID 5? so what one is a hot spare? 3TB useable space?
 
 What about striping the 4 1TB and mirroring that to a 4 x 1tb 
 External  
 drive enclosure?
 
 I want to be sure the data is protected, but machine resources and  
 money are limited.
 
 Thoughts are appreciated!
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Infrastructure HELP!

2009-10-29 Thread Neil Aggarwal
RAID 10 is striping across mirrored drives.

So, if you have 4 x 1TB drives, think of it as two separate
1 TB volumes.  The system will write half your data to
volume A and the other half to volume B.  The data in volume
A and B do not overlap.

Now, each volume is composed of a mirrored set of drives.  
Anything written to volume A is actually stored on two drives.  
Anything written to volume B is actually stores on the other two
drives.

Does this make sense?
Let me know if you need any more explanation.

Also, when you move to a hosted solution, I would appreciate
your considering my company for it.

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

 -Original Message-
 From: centos-boun...@centos.org 
 [mailto:centos-boun...@centos.org] On Behalf Of ML
 Sent: Thursday, October 29, 2009 1:03 PM
 To: CentOS mailing list
 Subject: Re: [CentOS] Infrastructure HELP!
 
 Neil,
 Can you explain how RAID 10 would work with 4 x 1tb drives?
 
 Should I just get 2 x 2tb drives and mirror?
 
 I probably dont need 4 x 1tb drives to start, maybe even 2 x 2tb. I  
 can't image this growing faster than I can get money to add more  
 equipment, move to Co-Lo, etc.
 
 On Oct 29, 2009, at 10:59 AM, Neil Aggarwal wrote:
 
 
  If you want speed, use RAID 10.
 
  Neil
 
  --
  Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
  CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated  
  64bit CPU
  1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero  
  downtime
 
  -Original Message-
  From: centos-boun...@centos.org
  [mailto:centos-boun...@centos.org] On Behalf Of ML
  Sent: Thursday, October 29, 2009 12:57 PM
  To: CentOS mailing list
  Subject: [CentOS] Infrastructure HELP!
 
  Hi Everyone,
 
  I started a social networking site and I am getting ready 
 to go live
  next week. I have limited fund as I am not funded yet (although
  hopefully soon).
 
  I have an extra Mac Pro (I know, how can I possibly call a Mac Pro
  dual 2.8 quad core with 16gb RAM extra). So Mac Pro quad Core, 16gb
  RAM, 4 x 1tb RAID level Seagate drives. I was going to load
  CentOS 5.4
  on it, web, mysql etc, etc. This is really the only box I have that
  would handle the site it it takes off and then I would need to add
  more hardware and most hosting to RackSpace or something.
 
  My question is about initial setup. The 4 x 1TB drives. How to set
  this up for I have some protection?
 
  RAID 0+1? (striped + mirrored) I would end up with 2TB 
 useable space.
 
  RAID 5? so what one is a hot spare? 3TB useable space?
 
  What about striping the 4 1TB and mirroring that to a 4 x 1tb
  External
  drive enclosure?
 
  I want to be sure the data is protected, but machine resources and
  money are limited.
 
  Thoughts are appreciated!
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
  ___
  CentOS mailing list
  CentOS@centos.org
  http://lists.centos.org/mailman/listinfo/centos
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Infrastructure HELP!

2009-10-29 Thread Neil Aggarwal
 Would 2 x 1TB enterprise drives be enough mirrored?

Are you going to to software RAID1 or hardware?

I find software RAID1 bogs down for intensive database
applications.

NOTE: Host based RAID is the same as software RAID.
You will need an actual external RAID card like one
from Areca.

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Infrastructure HELP!

2009-10-29 Thread Neil Aggarwal
 If I can find a cheap enough RAID Card that wil fit the Mac Pro, I  
 would do hardware RAID, but Apple wants $699 for theirs...

$699 is pretty steep, but RAID cards are not cheap.
They are worth it for performance though.

If you don't need absolute performance, software RAID will
work.  

Give with multiple smaller drives instead of two larger
ones.

Neil


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Infrastructure HELP!

2009-10-29 Thread Neil Aggarwal
 Is software RAID 10 decent performance?

Given that you are just starting out,
go with SW raid10.  When your usage grows,
plan to move to hardware raid or a hosted solution.

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Infrastructure HELP!

2009-10-29 Thread Neil Aggarwal
Matt:

Everyone I know recommends Areca cards.

Neil


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

 -Original Message-
 From: centos-boun...@centos.org 
 [mailto:centos-boun...@centos.org] On Behalf Of Matt
 Sent: Thursday, October 29, 2009 3:44 PM
 To: CentOS mailing list
 Subject: Re: [CentOS] Infrastructure HELP!
 
  $700, eesh.  You can get some nice Areca cards for much 
 less than that.
 
 What is the cheapest SATA hardware raid card I can get at newegg.com?
 Seems like most turn out not to be true hardware raid that I have
 found and will not run on CentOS 4.8 without a great deal of grief.
 
 Matt
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Infrastructure HELP!

2009-10-29 Thread Neil Aggarwal
 Not a direct answer to your question, but be careful of SATA drives.

Seagate does make enterprise SATA drives.

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] vnc for non-root

2009-10-28 Thread Neil Aggarwal
Ken:

You can set the machine up to use VNC for the
console.

Then, give the person a normal login which they will
use to login to the machine from the console interface.
Basically, it will be just like they are sitting at
the machine a logging in with a user account.

I would also require the VNC to be tunneled through
SSH for encryption since VNC does not do that internally.

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

 -Original Message-
 From: centos-boun...@centos.org 
 [mailto:centos-boun...@centos.org] On Behalf Of ken
 Sent: Wednesday, October 28, 2009 3:57 AM
 To: CentOS Mailing List
 Subject: [CentOS] vnc for non-root
 
 At work I've been asked to set up vnc for a remote user (a vendor
 sysadmin to install 3d party software we've purchased).  Of 
 course I'm a
 bit skittish about allowing root access to this.  Is there a way to
 configure vnc so that root cannot log in through it...?  Or 
 do I have to
 use some other utility to deny root access (e.g., securetty).
 
 Thanks, folks.
 
 
 -- 
 War is a failure of the imagination.
 --William Blake
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] /etc/aliases file wildcard

2009-10-28 Thread Neil Aggarwal
 machine*: myaccount
 
 would take any name matching machine* and forward onto the 
 myaccount 
 mailbox.

Would putting a wildcard in /etc/mail/virtusertable
solve the problem?

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Scripting help please....

2009-10-28 Thread Neil Aggarwal
I wonder if you can do this in two steps:
 
1. Parse out the unique values from the thrid column into
a file.
2. Run the processor on the script to print where the
third column matches one of the values identified.
 
I dont know how to do this in a script.
I would write a simple Java program to do it.
 
Neil
 


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
http://www.jammconsulting.com/ 
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

 


  _  

From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
Of Truejack
Sent: Wednesday, October 28, 2009 12:10 PM
To: centos@centos.org
Subject: [CentOS] Scripting help please


Need a scripting help to sort out a list and list all the duplicate lines.

My data looks somethings like this

host6:dev406mum.dd.mum.test.com:22:11:11:no
host7:dev258mum.dd.mum.test.com:36:17:19:no
host7:dev258mum.dd.mum.test.com:36:17:19:no
host17:dev258mum.dd.mum.test.com:31:17:19:no
host12:dev258mum.dd.mum.test.com:41:17:19:no
host2:dev258mum.dd.mum.test.com:36:17:19:no
host4:dev258mum.dd.mum.test.com:41:17:19:no
host4:dev258mum.dd.mum.test.com:45:17:19:no
host4:dev258mum.dd.mum.test.com:36:17:19:no

I need to sort this list and print all the lines where column 3 has a
duplicate entry.

I need to print the whole line, if a duplicate entry exists in column 3.

I tried using a combination of sort and uniq but was not successful.



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Change from Root

2009-10-27 Thread Neil Aggarwal
Did you remove the # in front of the line?
You still have it in your example.
 


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
http://www.jammconsulting.com/ 
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

 


  _  

From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
Of Victor Subervi
Sent: Tuesday, October 27, 2009 9:52 AM
To: CentOS mailing list
Subject: Re: [CentOS] Change from Root


What I was interested in doing was to make it impossible for root to login
directly, but rather enable other users to login and then su to root. So I
edited /etc/ssh/sshd_config to read:
#PermitRootLogin no
(It was the dir I didn't know.) It initially said yes, but it was and is
commented. How is it that I then and still can login directly as root? Is
reboot necessary?
TIA,
V


On Mon, Oct 26, 2009 at 4:17 PM, Neil Aggarwal n...@jammconsulting.com
wrote:


 I am not sure what a VPS is


VPS stands for virtual private server.

   Neil


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit
CPU, 1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Change from Root

2009-10-27 Thread Neil Aggarwal
Victor:
 
Also, check out section 4.4.2 of the security guide:
http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/security-guide/s
1-wstation-privileges.html
 
It addresses your question precisely.
 
Neil


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
http://www.jammconsulting.com/ 
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

 


  _  

From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf
Of Victor Subervi
Sent: Tuesday, October 27, 2009 9:52 AM
To: CentOS mailing list
Subject: Re: [CentOS] Change from Root


What I was interested in doing was to make it impossible for root to login
directly, but rather enable other users to login and then su to root. So I
edited /etc/ssh/sshd_config to read:
#PermitRootLogin no
(It was the dir I didn't know.) It initially said yes, but it was and is
commented. How is it that I then and still can login directly as root? Is
reboot necessary?
TIA,
V


On Mon, Oct 26, 2009 at 4:17 PM, Neil Aggarwal n...@jammconsulting.com
wrote:


 I am not sure what a VPS is


VPS stands for virtual private server.

   Neil


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit
CPU, 1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos



___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EMC CX4 Clariion

2009-10-27 Thread Neil Aggarwal
We had received a new EMC storage (Clariion CX4) and the 
 EMC analist has 
 told us that CentOS aren't on their support list, but RHEL are :)

I have always taken the stance that if something works with
RHEL, it will work with CentOS.  

Have not had a problem yet.

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] EMC CX4 Clariion

2009-10-27 Thread Neil Aggarwal
 'The vendors' that supply 'enterprise-grade hardware and software' (as
 EMC, Oracle etc do, e.g.) will never give you *support* for your
 machine, running CentOS, connected to their stuff.

That is a good point.

I am ready to deploy a RHEL test machine if the
support people insist on that, but they will usually
listen to a problem with their stuff as long as we
focus on their side of things.

Neil

--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit CPU
1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW, Zero downtime 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Change from Root

2009-10-26 Thread Neil Aggarwal
 I am not sure what a VPS is

VPS stands for virtual private server.

Neil


--
Neil Aggarwal, (281)846-8957, http://www.JAMMConsulting.com
CentOS 5.4 KVM VPS $55/mo, no setup fee, no contract, dedicated 64bit
CPU, 1GB dedicated RAM, 40GB RAID storage, 500GB/mo premium BW  

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Switch to measure traffic at IP level?

2009-10-25 Thread Neil Aggarwal
I think I have a solution:
 
In the guests' XML files, I set a target device name
so they will always use a known device (Instead of 
getting an aribtrary vnet* device).
 
Next, using snmp on the host, I can get the interface stats
for that device and use cacti to graph it.
 
Thanks to everyone for the help,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 


___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS-virt] Need info on vnet mapping to guests

2009-10-24 Thread Neil Aggarwal
Hello:

I have a host running two KVM guests.  The guests
use br0 and each has a static IP address.

I am trying to figure out if there is a way to
use snmpd on the host to measure the traffic
usage of the guests.  I do not want to require
anything running on the guests since I do not
control them.

Looking at netstat -in on the host, I see this
info:

Kernel Interface table
Iface   MTU MetRX-OK RX-ERR RX-DRP RX-OVRTX-OK TX-ERR TX-DRP
TX-OVR Flg
br01500   0   237609  0  0  013615  0  0 0
BMRU
eth0   1500   0   967594  0  0  0   354576  0  0 0
BMRU
lo16436   0   63  0  0  0   63  0  0 0
LRU
virbr0 1500   00  0  0  0   32  0  0 0
BMRU
vnet0  1500   029802  0  0  0   306940  0  0 0
BMRU
vnet1  1500   0   311556  0  0  0   789331  0  0 0
BMRU

Looking at the firewall logs for packets that hit the firewall, 
I see that vnet1 is connected to guestA and vnet0 is connected to 
guestB.

Is there a better way to determine which vnet is connected to
which guest?

Also, does the mapping change when I stop and start guests
or reboot the host?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS] Switch to measure traffic at IP level?

2009-10-23 Thread Neil Aggarwal
Hello all:

Is there a network switch that will give me traffic
stats at an IP address level?

Right now, I only get statstics at a port level, but
that does not help since each of my servers run several
virtual machines and I need to measure traffic
per virtual machine.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Switch to measure traffic at IP level?

2009-10-23 Thread Neil Aggarwal
Nate:

Thanks for the suggestion.  I am looking into it
now.

Currently, I use Cacti to graph the data coming
from my switches.  Do you know if that will that 
work with any of these switches?

Thanks,
Neil


--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

 -Original Message-
 From: centos-boun...@centos.org 
 [mailto:centos-boun...@centos.org] On Behalf Of nate
 Sent: Friday, October 23, 2009 8:50 AM
 To: centos@centos.org
 Subject: Re: [CentOS] Switch to measure traffic at IP level?
 
 Neil Aggarwal wrote:
  Hello all:
 
  Is there a network switch that will give me traffic
  stats at an IP address level?
 
 any of these can:
 http://www.sflow.org/products/network.php
 
 Myself I'm  biased towards Extreme networks having used them
 for almost 10 years now, very easy to use.
 
 nate
 
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Switch to measure traffic at IP level?

2009-10-23 Thread Neil Aggarwal
 http://www.sflow.org/products/collectors.php
 
 ntop would probably be the main free flow based monitor,
 though there are some really really nice commercial
 products.

I just need something that gives me a usage graph
at daily, weekly, and monthly intervals with a 95%
line.

It looks like ntop works with RRD so that seems
like a good solution.

Thanks for your help!

Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Switch to measure traffic at IP level?

2009-10-23 Thread Neil Aggarwal
 Can one setup a Linux server to offer sflow? If the Linux host can run
 sflow, then it's easy to capture the bandwidth usage on the host? 

That is a good idea.  Since we have to have the host OS running,
it might be able to do the collection activities for us.

If anyone has a soution for this, I am interested in more info.

 I'm sitting with the same problem, and rely on snmpd on each VPS, but this
 isn't ideal - especially if clients disable snmpd

I agree.  I do not want a solution that depends on software
installed on the guest since the client has control of that.

Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Switch to measure traffic at IP level?

2009-10-23 Thread Neil Aggarwal
 Alternately you could use something like Munin to monitor on 
 the box itself.

I took a look and I think it requires software running on
each guest to report the data back to the centralized
system.  Is that correct?

If so, I am looking for a solution that does not require
any software on the guest machines.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Switch to measure traffic at IP level?

2009-10-23 Thread Neil Aggarwal
Matt:
 
 why not just use your current cacti setup and 
 enable snmp on each of the hosts?  That seems like 
 the simplest and cheapest approach.

As I understand it, I would actually have to
enable snmp on each of the guests, not the hosts.

Am I wrong?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Switch to measure traffic at IP level?

2009-10-23 Thread Neil Aggarwal
Matt:

 depending on what your using for virtualization, you might be able to pull
all 
 of those stats with snmp on the host. 

I am using KVM on CentOS 5.4

Let me know if you think it is possible to gather everything
I need at the host without requirining anything from the guests.
 
Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] What about port mirroring? (Was: Switch to measure traffic at IP level)

2009-10-23 Thread Neil Aggarwal
Hello everyone:

I was just reading an ntop guide and it mentioned
many switches have port mirroring.

According to what I am reading, the Cisco I am using
will copy all traffic to the mirror port.  Then,
I can monitor what is going on from there.

That seems like a good way to do this.

Are there any pitfalls with this approach?

Would ntop be a good tool for it?

I would like to graph total bytes in and out
as well as 95% usage on an IP address level.
I would like daily, weekly, and monthly graphs.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] What about port mirroring? (Was: Switch to measure traffic at IP level)

2009-10-23 Thread Neil Aggarwal
 yeah, a 1gig port can't handle all the traffic from N 1gig 
 ports.  heck, 
 ti can't even handle all the traffic from a single full 
 duplex connection

That is a good point.  My traffic is light right now
so I might be able to use it until the traffic grows.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Recommendation for PCI-e SATA RAID 5 card?

2009-10-21 Thread Neil Aggarwal
Hello:

I am looking for a recommendation for a PCI-e
RAID card for my server.  The server has a
PCI-e x16 low profile slot so the card has
to be at most 6.6 inches long x 2.536 inches
high.  I would like to use RAID 5 with 3 drives
so I have to have those capabilities.

It has to be CentOS 5.4 compatible (Of course!).

I took a look at the offerings from 3Ware, but
their cards are too long.

If you have a card you are happy with, I would
appreciate a recommendation.

Thanks,
Neil


--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS-virt] Error setting up bridge with static IP address

2009-10-20 Thread Neil Aggarwal
Hello:

I am trying to follow the RHEL virtualization guide
to set up a bridge on a system running CentOS 5.4.

I copied my ifcfg-eth0 to ifcfg-eth0:1 and
set its content to this:

DEVICE=eth0:1
HWADDR=[The MAC address from eth0]
ONBOOT=yes
BRIDGE=br1

I then created ifcfg-br1 with this content:

DEVICE=br1
TYPE=Bridge
BOOTPROTO=static
BROADCAST=192.168.2.255
IPADDR=192.168.2.202
NETMASK=255.255.255.0
NETWORK=192.168.2.0
ONBOOT=yes
DELAY=0

When I do service network restart, I get this error:

error in ifcfg-eth0:1: didn't specify device or ipaddr

I specified the device so it looks like it wants an IP
address but that is contrary to what I am reading on
the Internet.

Any ideas what went wrong?

Thanks,
Neil


--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


Re: [CentOS-virt] Error setting up bridge with static IP address

2009-10-20 Thread Neil Aggarwal
I downloaded the DVD iso using the torrent file from
one of the mirrors showing it.


--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

 -Original Message-
 From: centos-virt-boun...@centos.org 
 [mailto:centos-virt-boun...@centos.org] On Behalf Of Ben M.
 Sent: Tuesday, October 20, 2009 1:26 PM
 To: Discussion about the virtualization on CentOS
 Subject: Re: [CentOS-virt] Error setting up bridge with 
 static IP address
 
 Are you using the leaked copy of 5.4 or is it showing on 
 some of the 
 mirrors now?
 
 Neil Aggarwal wrote:
  Actually, this worked.  I am able to SSH to the box
  on the 192.168.2.200 IP address.  I had a typo in
  my ssh command.  Sorry for any confusion.
  
  Thanks,
  Neil
  
  --
  Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
  Will your e-commerce site go offline if you have
  a DB server failure, fiber cut, flood, fire, or other disaster?
  If so, ask about our geographically redundant database system. 
  
  -Original Message-
  From: centos-virt-boun...@centos.org 
  [mailto:centos-virt-boun...@centos.org] On Behalf Of Neil Aggarwal
  Sent: Tuesday, October 20, 2009 1:11 PM
  To: 'Discussion about the virtualization on CentOS'
  Subject: Re: [CentOS-virt] Error setting up bridge with 
  static IP address
 
  I did some more reading on the Internet and it looks like
  I am supposed to set up the bridge on eth0 and configure
  the bridge with the IP address of the host.
 
  So, I removed ifcfg-eth0:1 and changed ifcfg-eth0
  to this:
  DEVICE=eth0
  HWADDR=[The MAC address]
  ONBOOT=yes
  BRIDGE=br0
 
  I removed ifcfg-br1 and created ifcfg-br0 with this
  content:
  DEVICE=br0
  TYPE=Bridge
  BOOTPROTO=static
  BROADCAST=192.168.2.255
  IPADDR=192.168.2.200
  NETMASK=255.255.255.0
  NETWORK=192.168.2.0
  ONBOOT=yes
  DELAY=0
 
  I don't get any errors when I do service network restart
  but now I can't ssh to the host using the 192.168.2.200
  IP address.
 
  I also tried setting these values in /etc/sysctl.conf:
 
  net.bridge.bridge-nf-call-ip6tables = 0
  net.bridge.bridge-nf-call-iptables = 0
  net.bridge.bridge-nf-call-arptables = 0
 
  net.ipv4.ip_forward = 1
 
  and rebooting the machine.  That did not help.
 
  Any ideas?
 
  Thanks,
 Neil
 
 
  --
  Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
  Will your e-commerce site go offline if you have
  a DB server failure, fiber cut, flood, fire, or other disaster?
  If so, ask about our geographically redundant database system. 
 
  ___
  CentOS-virt mailing list
  CentOS-virt@centos.org
  http://lists.centos.org/mailman/listinfo/centos-virt
  
  ___
  CentOS-virt mailing list
  CentOS-virt@centos.org
  http://lists.centos.org/mailman/listinfo/centos-virt
  
 
 ___
 CentOS-virt mailing list
 CentOS-virt@centos.org
 http://lists.centos.org/mailman/listinfo/centos-virt

___
CentOS-virt mailing list
CentOS-virt@centos.org
http://lists.centos.org/mailman/listinfo/centos-virt


[CentOS] Don't have scaling_available_frequencies files

2009-10-20 Thread Neil Aggarwal
Hello all:

I am trying to follow the RHEL virtualization guide.
According to Chapter 17, I have a processor without
a constant Time Stamp Counter (Its an Opteron).

According to that guide, I need to set the MIN_SPEED and 
MAX_SPEED variables in /etc/sysconfig/cpuspeed to the
highest frequency show in
/sys/devices/system/cpu/cpu*/cpufreq/scaling_available_frequencies

I took a look at my system (CentOS 5.4) and there are no
cpufreq directories in the cpu folders.

Is that a problem?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Don't have scaling_available_frequencies files

2009-10-20 Thread Neil Aggarwal
  I took a look at my system (CentOS 5.4) and there are no
  cpufreq directories in the cpu folders.
 
 I think that's probably because the associated driver is
 not loaded.

I did some reading on the cpufreq and actually think it
is better that it is not enabled.

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Is AMD rev F the same thing as socket F?

2009-10-18 Thread Neil Aggarwal
Hello:

I am looking at the RHEL 5.4 virtualization guide.
According to Chapter 17, if I want to use KVM on my
machine, I need to check if it has the constant Time Stamp 
Counter by running this:

cat /proc/cpuinfo | grep constant_tsc

When I do that on the server (Currently running CentOS 5.3),
I do not get any output.  According to the output, that
means my system does not have the counter.

It then gives me instructions for AMD revision F CPUs.
I did a search and did not find anything that seems relevant 
to revision F.  The only stuff I am finding is talking about
socket F. Is that the same things as a Socket F CPU or 
something different?  

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Is AMD rev F the same thing as socket F?

2009-10-18 Thread Neil Aggarwal
Akemi:

 http://www.chiplist.com/AMD_Athlon_64_processor/tree3f-section--2103-/

I have an Opteron.  I don't see a similar listing for those.
Do you?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Is AMD rev F the same thing as socket F?

2009-10-18 Thread Neil Aggarwal
Akemi:

 http://www.chiplist.com/new/processor_specifications/

Well, according to CPU info, I have:

vendor_id   : AuthenticAMD
cpu family  : 15
model   : 65
model name  : Dual-Core AMD Opteron(tm) Processor 2210
stepping: 2
cpu MHz : 1809.490
cache size  : 1024 KB
physical id : 0
siblings: 2
core id : 0
cpu cores   : 2
apicid  : 0
fpu : yes
fpu_exception   : yes
cpuid level : 1
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca
cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt rdts
cp lm 3dnowext 3dnow pni cx16 lahf_lm cmp_legacy svm extapic cr8_legacy
bogomips: 3622.54
TLB size: 1024 4K pages
clflush size: 64
cache_alignment : 64
address sizes   : 40 bits physical, 48 bits virtual
power management: ts fid vid ttp tm stc

The closest match in that list is:
AMD Opteron DP 2000 series Dual-Core processor (Santa Rosa, Rev. F) 

So, I guess my processor is a Rev F processor.
I will follow the instructions in the virtualization guide.

Thank you,
Neil


--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

 -Original Message-
 From: centos-boun...@centos.org 
 [mailto:centos-boun...@centos.org] On Behalf Of Akemi Yagi
 Sent: Sunday, October 18, 2009 11:16 AM
 To: CentOS mailing list
 Subject: Re: [CentOS] Is AMD rev F the same thing as socket F?
 
 On Sun, Oct 18, 2009 at 8:53 AM, Neil Aggarwal 
 n...@jammconsulting.com wrote:
  Akemi:
 
  
 http://www.chiplist.com/AMD_Athlon_64_processor/tree3f-section--2103-/
 
  I have an Opteron.  I don't see a similar listing for those.
  Do you?
 
  Thanks,
         Neil
 
 I see some here:
 
 
 Akemi
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] the ongoing wait for centos 5.4

2009-10-18 Thread Neil Aggarwal
 I am burning the DVD ISO image to disk right now. It is available from 
 some mirrors.
which are mostly incomplete... maybe some isos are ok but even the
centos.org 
machines are not yet in sync...
I would strongly suggest that you wait for the actual announcements, but
ymmv.

This leads me to a question:

If I use BitTorrent to download the DVD image from
tracker.centos.org, I assume the file has to be complete
or could it still be missing something?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS 5.4? anyone?

2009-10-16 Thread Neil Aggarwal
 Soon means soon ... we have to get the tree stable on many servers
 before we can make it available.  This stuff takes time.

I think this is the major source of this latest flurry
about the release date.

The twitter posting from KB said soon and then things
went quiet for 2 days without any additional information
posted.  As a matter of fact, there is still nothing posted
to the blog.

I think most people assume soon is sometime that day or 
the next. By saying that, KB unfortunately set people's 
expectations to a shorter timeframe than what reality needed.  

We all understand things take time.  We can all accept that,
but its hard to gauge how long things take when we are
not involved in the process.  We are looking to the developers
to help us set our expectations correctly.  

Johnny's post on the centos mirror announce list was a
much better posting:

 The CentOS 5.4 tree will begin syncing out on the CentOS and
  CentOS-incdvd targets in the next 24-48 hours 

That sets people's expectations to a timeframe without
any misinterpretation.

Please do not take this posting as negative or complaining.
I am trying to offer constructive criticism to help avoid
some of these misunderstandings in the future.

Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.  

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Cant map Apache DAV network place to network drive

2009-10-08 Thread Neil Aggarwal
Hello:

I have set up a DAV file system on my apache server
using these directives in ssl.conf:

Alias /files /var/www/files
Directory /var/www/files
  Dav On

  AuthType Basic
  AuthName Filesystem access
  AuthUserFile /var/www/files.passwd

  require valid-user

  Options Indexes
/Directory

On my client machine (Windows XP SP3), I am
able to add the https location as a network place.

But, when I go to map the network place as a network
drive, I can browse to the network place and see
the folders, but the OK button is always greyed
out.

Is there something wrong in my Apache config
or is Windows being obtuse?

Does anyone know how to fix this?

Thanks,
Neil


--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


[CentOS] Can't get forwarding to work

2009-10-04 Thread Neil Aggarwal
Hello all:

I am having trouble getting port forwarding
with iptables to work.

I have this configuration:

Internet --- Linux machine --- Windows machine

The windows machine is set up to listen on 
IP address 10.0.0.31

I am able to use lynx to connect to http://10.0.0.31 on 
the linux machine so there is no problem going from
the linux machine to the windows machine.

I have tied a public IP address a.b.c.d to the
linux machine and entered these rules in its
firewall:

/sbin/ifconfig eth0:1 $WIN_EXTERNAL_IP netmask $ETH0_NETMASK broadcast
$ETH0_BCAST
/sbin/iptables -t nat -A PREROUTING -p tcp -i eth0 -d $WIN_EXTERNAL_IP
--dport 80 -j DNAT --to $WIN_INTERNAL_IP:80
/sbin/iptables -A FORWARD -p tcp -i eth0 -d $WIN_INTERNAL_IP --dport 80 -j
ACCEPT

I have this log entry at the bottom of the firewall rules:

/sbin/iptables -A FORWARD -j LOG --log-prefix FORWARD 

When I try to go to the external IP address http://a.b.c.d from
another network, I get an error.

Any ideas?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system.

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Can't get forwarding to work

2009-10-04 Thread Neil Aggarwal
Hello:

I changed my rules to these:

/sbin/iptables -t nat -A PREROUTING -d $WIN_EXTERNAL_IP -j DNAT --to
$WIN_INTERNAL_IP
/sbin/iptables -t nat -A POSTROUTING -s $WIN_INTERNAL_IP -j SNAT --to
$WIN_EXTERNAL_IP

And I am still not seeing anything log on the firewall log
and the connection is not working.

Any ideas?

Thanks,
Neil


--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Can't get forwarding to work

2009-10-04 Thread Neil Aggarwal
This is interesting:

When I go to lynx http://a.b.c.d on the linux machine,
I get the CentOS test page.

This looks like the connection is not forwarding, it
is just going to the local machine.

Any ideas?

Thanks,
Neil

--
Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
Will your e-commerce site go offline if you have
a DB server failure, fiber cut, flood, fire, or other disaster?
If so, ask about our geographically redundant database system. 

 -Original Message-
 From: centos-boun...@centos.org 
 [mailto:centos-boun...@centos.org] On Behalf Of Neil Aggarwal
 Sent: Sunday, October 04, 2009 8:15 PM
 To: 'CentOS mailing list'
 Subject: Re: [CentOS] Can't get forwarding to work
 
 Hello:
 
 I changed my rules to these:
 
 /sbin/iptables -t nat -A PREROUTING -d $WIN_EXTERNAL_IP -j DNAT --to
 $WIN_INTERNAL_IP
 /sbin/iptables -t nat -A POSTROUTING -s $WIN_INTERNAL_IP -j SNAT --to
 $WIN_EXTERNAL_IP
 
 And I am still not seeing anything log on the firewall log
 and the connection is not working.
 
 Any ideas?
 
 Thanks,
   Neil
 
 
 --
 Neil Aggarwal, (281)846-8957, www.JAMMConsulting.com
 Will your e-commerce site go offline if you have
 a DB server failure, fiber cut, flood, fire, or other disaster?
 If so, ask about our geographically redundant database system. 
 
 ___
 CentOS mailing list
 CentOS@centos.org
 http://lists.centos.org/mailman/listinfo/centos

___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos


  1   2   >