User contributions for Adj

04:1404:14, 18 January 2026 diff hist +1,659‎ N In transit data security ‎ Created page with "All of the Fnordly web properties (this wiki, webmail, OpenStack API endpoints, etc) are hosted behind HAproxy daemon(s) running on the Internet facing firewall machines. While it would be nice to say that things are all covered by HAproxy doing TLS termination for us, defense in depth principles demand that '''all''' traffic that can be encrypted '''be''' encrypted. As such, traffic between the HAproxy endpoints and the internal web services is encrypted to, and web s..."
00:2700:27, 18 January 2026 diff hist +87‎ Main Page ‎ →‎FnordNet infrastructure current

22:3322:33, 22 December 2025 diff hist +2,505‎ IPv6 connectivity ‎ →‎Allo Communications current
19:2219:22, 22 December 2025 diff hist +2,153‎ N IPv6 connectivity ‎ Created page with "At this writing, the home network infrastructure has 2 ISP connections. One from Comcast/Xfinity, the other from Allo Communications. Comcast supplies IPv4 and IPv6. Allo only provides IPv4, and if it does have plans to provide IPv6, they have not been well communicated. Plans are in progress to shut down the Comcast service, meaning no more native IPv6 for the home network. == Comcast/Xfinity == === Directly connected system (router/firewall) interface config === F..."
16:1816:18, 22 December 2025 diff hist +26‎ Main Page ‎ →‎FnordNet infrastructure

18:1218:12, 26 July 2025 diff hist +18‎ Notes on VM building ‎No edit summary
18:1118:11, 26 July 2025 diff hist +4‎ Notes on VM building ‎No edit summary
18:1118:11, 26 July 2025 diff hist +676‎ N Notes on VM building ‎ Created page with "What is says in the title. Here's what I run to start a Debian install with a virtio storage and network enabled UEFI virtual machine: sudo qemu-img create -f qcow2 /srv/vm-backing-store/padmeamadeus-0-vda.qcow2 64G sudo virt-install --name padmeamadeus-0 --memory 5120 --vcpus 2 --cpu host --cdrom ~/Downloads/debian-testing-amd64-20250726-netinst.iso --boot uefi --osinfo debian11 --disk /srv/vm-backing-store/padmeamadeus-0-vda.qcow2,bus=virtio --network bridge=br0,mod..."
17:5517:55, 26 July 2025 diff hist +29‎ Main Page ‎ →‎FnordNet infrastructure

14:2814:28, 24 July 2025 diff hist +302‎ Ceph performance metrics ‎No edit summary current Tag: Visual edit: Switched
14:2514:25, 24 July 2025 diff hist +2,131‎ N Ceph performance metrics ‎ Created page with "This has come up because the Sentinel 1 endpoint detection and response (EDR) agent is being installed across all our servers. In order to minimize potential customer impact we will: * Divide servers into three groups based on client IO sensitivity. Purely development environments being low sensitivity, and certain database workload being highly sensitive. S3 workloads will probably fall in the middle. * In each group, before S1 agent is installed and running, gather..."
13:0613:06, 24 July 2025 diff hist +31‎ Main Page ‎ →‎Other Ceph things

22:3922:39, 23 July 2025 diff hist +1‎ Rotating applications' Ceph S3 credentials ‎No edit summary current
22:3022:30, 23 July 2025 diff hist +3,746‎ Rotating applications' Ceph S3 credentials ‎No edit summary
22:0722:07, 23 July 2025 diff hist +4,396‎ N Rotating applications' Ceph S3 credentials ‎ Created page with "At $DAYJOB, some concern has been expressed that S3 client applications have no credential rotation. Which is probably fair. Here are some thoughts on the subject: * S3 bucket and object access is assigned to an abstraction called a "user." * Users identify themselves to the storage not by presenting their name, but my means of an "access key" and "secret key." The secret key is not sent across the wire to the S3 server. Instead it is used to sign any given request...."
21:4121:41, 23 July 2025 diff hist +74‎ Main Page ‎ →‎Ceph education events

Navigation menu