@jahanson@infosec.exchange
@jahanson@infosec.exchange avatar

jahanson

@[email protected]

I'm a Web Application Developer that loves #opensource #infosec #foss #homelab #kubernetes #hardware #networking #programming. I'm a huge advocate for open source and open standards!

This profile is from a federated server and may be incomplete. Browse more on the original instance.

jerry, to random
@jerry@infosec.exchange avatar

Ok. I am tired of Infosec.exchange being sluggish. I just submitted a crazy order with Hetzner to upgrade the instance. Hopefully the last time for a while. I ordered a dell AMD Genoa 48 core server with 256 GB of ram to act as a database and redis server, a dell 64 core sapphire rapids server with 256gb of ram to act as the single front end/puma/streaming server, and an amd 7950 with 128gb of ram to run minio (insourcing from Backblaze).

I ordered all with 10g network interfaces to be connected to the same switch.

I continue to see issues with Backblaze performance causing issues with posting.

This will consolidate the environment down from about 13 servers to 4 (I will keep using less expensive servers on 1G networks for Sidekiq if it can’t run on the sapphire rapids server.

I will be putting that behind Fastly for global distribution and ddos mitigation. I don’t know whether I’ll keep serving media via bunny.net or try to do that with Fastly also. Bunny works pretty well and is cost effective for media delivery.

Anyhow, changes are coming. Thanks for patience.

jahanson,
@jahanson@infosec.exchange avatar

@jerry egress is no longer free with 10g uplink. Is that going to be a problem you think?

milosz, to random
@milosz@adventurousbeastie.eu avatar

I am back. Two weeks without network will end soon. At first I need to install and prepare CI/CD for personal blog and all other stuff. A lot of work :) Decided to stick with self-hosted GitLab this time, so I can keep everything in one place.

jahanson,
@jahanson@infosec.exchange avatar

@milosz I’m really liking self hosting my git as well. I went with Forgejo. They have github-like actions support with their own runner.

jerry, to random
@jerry@infosec.exchange avatar

I made some changes to the Infosec.exchange CDN by moving the cache to more countries and using much faster nvme storage at the edge. It should be a good bit faster and a lot more expensive, so I have to stay on top of purging old media. Let’s see how that goes.

jahanson,
@jahanson@infosec.exchange avatar

@jerry what edge servers are you using? I thought hetzner only had VMs in the US. Are you using another company for US edge servers you could stick nvmes in?

jahanson,
@jahanson@infosec.exchange avatar

@jerry ahhhh that makes more sense. I remember that option now.

jerry, to random
@jerry@infosec.exchange avatar

The ISE database is struggling a bit lately. I am not sure if it’s causing a noticeable delay or not but it is getting to me. I am going to bite the bullet and start the (hopefully) final ISE upgrade for a while.

jahanson,
@jahanson@infosec.exchange avatar

@jerry sapphire incoming? 😱

jerry, to random
@jerry@infosec.exchange avatar

How am I just now learning about steampipe and the mastodon plugin for it? 🤯

jahanson,
@jahanson@infosec.exchange avatar

@jerry sounds like I need to check this out!

jerry, to random
@jerry@infosec.exchange avatar

Execute order 66

video/mp4

jahanson,
@jahanson@infosec.exchange avatar

@jerry domain purchase?

jerry, to random
@jerry@infosec.exchange avatar

Sleepy time cometh

jahanson,
@jahanson@infosec.exchange avatar

@jerry I love the lighting in this pic a lot! What a sleepy puppy.

jerry, to random
@jerry@infosec.exchange avatar

A closeup of a brown tabby cat’s face, partially obscured by the box she is laying in

jahanson,
@jahanson@infosec.exchange avatar

@jerry 🐻 🐱!

jerry, to random
@jerry@infosec.exchange avatar

What is your favorite ssh client for Windows?

jahanson,
@jahanson@infosec.exchange avatar

@jerry https://termius.com/free-ssh-client-for-windows but if not that then ssh, it’s available on windows win-get or WSL SSH. I absolutely abhor PuTTY 🚫

jerry, to random
@jerry@infosec.exchange avatar

Wasabi and Backblaze are making it a much easier decision for me to move to self hosted minio storage 💩

jahanson,
@jahanson@infosec.exchange avatar

@jerry every service I’ve tried for object storage I’ve always gone back to minio. The only reason I would use something else is if I don’t want to provide my own storage devices.

jerry, to random
@jerry@infosec.exchange avatar

Missed it by that much

jahanson,
@jahanson@infosec.exchange avatar

@jerry

jerry, to random
@jerry@infosec.exchange avatar

Foundation is turning into a space soap opera

jahanson,
@jahanson@infosec.exchange avatar

@jerry still waiting to see the latest one but the latest one ones ending killed me. Can’t wait.

jerry, to random
@jerry@infosec.exchange avatar

My precious came today!

jahanson,
@jahanson@infosec.exchange avatar

@jerry it looks like a mount? Probably a camera thing? lol

jahanson,
@jahanson@infosec.exchange avatar

@jerry @EmperorHenry This is crazy. I knew photography was complicated but the way you describe it feels like a different level

jerry, to random
@jerry@infosec.exchange avatar

So far, I am pretty impressed by the simplicity of fastly.

I am contemplating a major refactoring that is focused on performance. I believe I will consolidate down from the 13 servers today to 4 larger servers colocated on a 10gbps network, and moving back to a local minio storage provider.

The 16 core DB server is regularly saturating, so will likely go with one of the 64 core sapphire rapids servers for that and redis, and another for puma.

Fastly seems like a much better solution than setting up a bunch of nginx reverse proxies around the world, and so far it seems to be working really well.

jahanson,
@jahanson@infosec.exchange avatar

@jerry This sounds awesome, are you going to locate them in the same rack with a 10gb switch from their custom solutions option?

jerry, to random
@jerry@infosec.exchange avatar

In case anyone wants to help me bang on this fastly enabled front end, it’s https:://crank2.Infosec.exchange. It’s the same login and account as regular Infosec.exchange.

jahanson,
@jahanson@infosec.exchange avatar

@jerry This is pretty legit

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • uselessserver093
  • Food
  • aaaaaaacccccccce
  • test
  • CafeMeta
  • testmag
  • MUD
  • RhythmGameZone
  • RSS
  • dabs
  • KamenRider
  • Ask_kbincafe
  • TheResearchGuardian
  • KbinCafe
  • Socialism
  • oklahoma
  • SuperSentai
  • feritale
  • All magazines
    •