I am currently researching and evaluating Network Attached Storage systems and was wondering whether anyone out there has had previous experiences (good or bad) with any particular setup?
I am particularly curious to know:
1- what kind of a performance hit I can expect when data is stored on a NAS and accessed via ethernet over iSCSI as opposed to regular SATA or SCSI.
2- what pre-built NAS system would you recommend for a system that requires about 8 TB of disk space for file data and needs to have 100% uptime? I've been looking at: [url]
However I don't know what sort of limitations this hardware offers as far as simultaneous disk reads/writes go.
As my clients' needs expand, they're asking for chroot ssh/sftp setup. I'm currently on a dedicated Linux setup but don't really have the time to set up a whole new box with full virtualization or investigate a full chroot solution (baby on the way), and to be honest it would be less hassle to move to a new provider than worry about down time with sites.
What I'm looking for:
- linux hosting - hosting for 30+ accounts, some with several domains - at least 6 IP addresses for SSL certs - each account in a full chroot environment (ssh/sftp/ftp) so they can't poke around each others' files, or each account set up in a virtual machine setup (ie: openvz) - maildir - spamassassin - php 5, mysql, perl 5.8.8 - suexec apache would be nice
I have learnt it is harder to setup than I initially expected (since I have just moved from a shared hosting service). I am in need of some help setting up my DNS servers, as I am very confused. Here is most of the info I know:
1) I am running HyperVM
2) I've installed LXAdmin
3) I own the domain (purchased from xeodomains.com) runemart.com
4) My VPS hostname is: vps.runemart.com
5) I know my IP
6) My host has said:
'For VPS customers that have a HyperVM login you can now host forward DNS on the DNS servers rdns1.vaserv.com (US)rdns2.vaserv.com (UK'
And I am unsure what this means/how to do it.
I am not sure if I need some more information to set up my DNS, however I am sure that I can get it if I do.
Now, my questions begin. Firstly, I need to point my domain - runemart.com - somewhere. I believe I need to set up my DNS via HyperVM or LXAdmin so that they are something like: ns1.runemart.com and ns2.runemart.com. Though, is this correct? Am I able to set up my own actual domain name servers, or will my domain have to point at something like rdns2.vaserv.com?
If anyone can assist me in this I would be very greatful, as I am waiting to get my website running. This is all I will ask for now, I will take it one step at a time =).
I need to setup a vpn for a customer so they can access a development server. I'm running a Tomcat server and an Oracle database that they would need access to, both port 80(or 8080) and port 1521. This needs to be secured as there is customer data that needs to be protected.
This server will be part of our existing servers we rent from Pacificrack. I really would appreciate any suggestions as the best way to do this, short of buying my own cisco or checkpoint firewall with vpn.
I am currently using windows server 2008 standard to host my website. I set my website up with IIS and when i type in localhost i can see it. But, if i type i my ip adress I see my router's config page. I use dyn dns updater which takes my ip adress and uses that to update my website. But, when I go to my website I see my routers config page, not my website.
Hello I have my own web server. Due to some sites being blocked in where I currently reside (no not porn, just websites like flickr, orkut..etc). I have seen some programs that you can download for free and they connect through a VPN but dramatically slow down your connection and filled with ads. It did work. However I want my own setup and VPN
We are currently setting up a VPS server, which will be used for a specific client portfolio that we are aquiring from another company. This is a Linux based server with WHM/Cpanel.
However, we wish to set up DNS in the best possible way, since we need to host DNS for some vital ISP services also. I gather this probably means using a combination of DNS on the VPS server itself, as well as one or more other DNS servers in other physical locations. The VPS server itself is located in Amsterdam, while most clients are here in Norway - thus ensuring reliability for local clients is the most important consideration.
Now some key questions:
- How important is the physical location of the DNS servers, and where should these ideally be located?
- Is a cluster solution the way to go - and is this supported by WHM/Cpanel?
- We have Linux and Windows based servers on our local network; could these be used for DNS also? If so, tips on software needed?
i am currently experimenting DNS with my 2 ips (each with separate servers spread over 2 geographic locations) and my zone file maps these IPs to ns1.domain.com and ns2.domain.com.
Both of my servers run DNS and with zone entry for my domain name. But when i stop the dns server on first IP (ns1) the second dns server (ip2) not working or resolving. Both are master servers.
My question is if first server DNS fails, the second DNS should resolve? why it is not working. i guess that is reason why domain registrars ask for 2 name servers. if one fails other works as backup??
how do i setup these? should i setup a slave or something?
cpanel / whm shared and reseller accounts (300+ domains) secure only ports for cpanel/whm/webmail
Problem:
Seems like too often people get blocked out of firewall for ftp, webmail, pop3 or webmail. I'm not sure what to do without sacrificing good security measures.
Below is my configuration for CSF (chirpy's firewall)
Code: ############################################################################### # Copyright 2006, Way to the Web Limited # URL: http://www.waytotheweb.com # Email: sales@waytotheweb.com ###############################################################################
# Testing flag - enables a CRON job that clears iptables incase of # configuration problems when you start csf. This should be enabled until you # are sure that the firewall works - i.e. incase you get locked out of your # server! Then do remember to set it to 0 and restart csf when you're sure # everything is OK. Stopping csf will remove the line from /etc/crontab TESTING = "0"
# The interval for the crontab in minutes. Since this uses the system clock the # CRON job will run at the interval past the hour and not from when you issue # the start command. Therefore an interval of 5 minutes means the firewall # will be cleared in 0-5 minutes from the firewall start TESTING_INTERVAL = "5"
# Enabling auto updates creates a cron job called /etc/cron.d/csf_update which # runs once per day to see if there is an update to csf+lfd and upgrades if # available and restarts csf and lfd. Updates do not overwrite configuration # files or email templates. An email will be sent to the root account if an # update is performed AUTO_UPDATES = "0"
# Ethernet device setting is taken from the shared IP address in # /etc/wwwacct.conf but can be overridden here (e.g. "eth0") # # If you have multiple ethernet NICs that you want to apply all rules to, then # you can set the following to the interface name immediately followed by a # plus sign. For example, eth+ will apply all rules to eth0, eth1, etc ETH_DEVICE = ""
# Unfiltered ethernet devices in a comma separated list (e.g "eth1,eth2") ETH_DEVICE_SKIP = ""
# Lists of ports in the following comma separated lists can be added using a # colon (e.g. 30000:35000).
# Allow outgoing UDP ports # To allow outgoing traceroute add 33434:33523 to this list UDP_OUT = "20,21,53,113,123,873,953,6277"
# Allow incoming PING ICMP_IN = "1"
# Allow outgoing PING ICMP_OUT = "1"
# Block outgoing SMTP except for root, exim and mailman (forces scripts/users # to use the exim/sendmail binary instead of sockets access). This replaces the # protection as WHM > Tweak Settings > SMTP Tweaks. This will block hosting # clients from using your server as an SMTP relay SMTP_BLOCK = "0"
# If SMTP_BLOCK is enabled but you want to allow local connections to port 25 # on the server (e.g. for web scripts) then enable this option too SMTP_ALLOWLOCAL = "0"
# If this is a MONOLITHIC kernel (i.e. it has no LKM support, e.g. a VPS) then # set this to 1. Because of the nature of monolithic kernels, it's not easy to # determine which modules have been built-in, so some functionality may not be # available and this firewall script may not work. # # One example is if the ip_conntrack and ip_conntrack_ftp iptables kernel # modules are not available. If this happens, FTP passive mode (PASV) won't # work. In such circumstances you will have to open a hole in your firewall and # configure the FTP daemon to use that same hole. For example, with pure-ftpd # you could add the port range 30000:35000 to TCP_IN and add the following line # to /etc/pure-ftpd.conf (without the leading #): # PassivePortRange30000 35000 # Then restart pure-ftpd and csf and passive FTP should then work MONOLITHIC_KERNEL = "0"
# Enable logging of dropped connections to blocked ports to syslog, usually # /var/log/messages DROP_LOGGING = "1"
# Enable logging of dropped connections to blocked IP addresses in csf.deny or # by lfd with temporary connection tracking blocks DROP_IP_LOGGING = "0"
# Only log reserved port dropped connections (0:1023). Useful since you're not # usually bothered about ephemeral port drops DROP_ONLYRES = "0"
# Commonly blocked ports that you do not want logging as they tend to just fill # up the log file. These ports are specifically blocked (applied to TCP and UDP # protocols) for incoming connections DROP_NOLOG = "67,68,111,113,135:139,445,513,520,1026,1027,1234,1433,1434,1524,3127"
# Enable packet filtering for unwanted or illegal packets PACKET_FILTER = "1"
# Log packets dropped by the packet filtering option PACKET_FILTER. This will # show packet drops that iptables has deemed INVALID (i.e. there is no # established TCP connection in the state table), or if the TCP flags in the # packet are out of sequence in the protocol exchange. # # If you see packets being dropped that you would rather allow then disable the # PACKET_FILTER option above by setting it to "0" DROP_PF_LOGGING = "0"
# Enable verbose output of iptables commands VERBOSE = "1"
# If you wish to allow access from dynamic DNS records (for example if your IP # address changes whenever you connect to the internet but you have a dedicated # dynamic DNS record from the likes of dyndns.org) then you can list the FQDN # records in csf.dyndns and then set the following to the number of seconds to # poll for a change in the IP address. If the IP address has changed iptables # will be updated. # # A setting of 600 would check for IP updates every 10 minutes. Set the value # to 0 to disable the feature DYNDNS = "0"
# If you wish to allow access from all IP's that have authenticated using POP # before SMTP (i.e. are valid clients) then you can whitelist them using this # option which checks for IP addresses in /etc/relayhosts which last for 30 # minutes in that file after a successful POP authentication # # A setting of 60 would update IP's every 1 minute. Set the value # to 0 to disable the feature RELAYHOSTS = "0"
# Enable this option if you want to allow incoming connections from reserved # ports. Normally, only DNS connections have the same SRC and DST port (53) # and any other connections should have a SRC port > 1023. On *nix systems this # rule is generally adhered to and reserved ports are not allocated as SRC # ports. However, other notable OS's appear to ignore this and allocate them at # will. This means it's possible that users may come in on reserved ports, so # enable this option if you want to allow them to, or disable it if you want to # be strict ALLOW_RES_PORTS = "1"
# Limit the number of IP's kept in the /etc/csf/csf.deny file. This can be # important as a large number of IP addresses create a large number of iptables # rules (4 times the number of IP's) which can cause problems on some systems # where either the the number of iptables entries has been limited (esp VPS's) # or where resources are limited. This can result in slow network performance, # or, in the case of iptables entry limits, can prevent your server from # booting as not all the required iptables chain settings will be correctly # configured. The value set here is the maximum number of IPs/CIDRs allowed # if the limit is reached, the entries will be rotated so that the oldest # entries (i.e. the ones at the top) will be removed and the latest is added. # The limit is only checked when using csf -d (which is what lfd also uses) # Set to 0 to disable limiting DENY_IP_LIMIT = "100"
initial WHM DNS setup i tryed at first with whm but it seems like it messes the nameservers IPs so i just put some entries manually I got all name servers IPs and shared IP setup right but i may be have some problems with DNS zones here is my named config
--------------------------------------------------------------------------- view "internal" { /* This view will contain zones you want to serve only to "internal" clients that connect via your directly attached LAN interfaces - "localnets" . */ match-clients { localnets; }; match-destinations { localnets; }; recursion yes;
zone "." IN { type hint; file "/var/named/named.ca"; };
// include "/var/named/named.rfc1912.zones"; // you should not serve your rfc1912 names to non-localhost clients.
// These are your "authoritative" internal zones, and would probably // also be included in the "localhost_resolver" view above :
zone "ns1.xxx.com" { type master; file "/var/named/ns1.xxx.com.db"; };
zone "ns2.xxx.com" { type master; file "/var/named/ns2.xxx.com.db"; };
zone "main.xxx.com" { type master; file "/var/named/main.xxx.com.db"; };
zone "xxx.com" { type master; file "/var/named/xxx.com.db"; }; };
view "external" { /* This view will contain zones you want to serve only to "external" clients * that have addresses that are not on your directly attached LAN interface subnets: */ match-clients { !localnets; !localhost; }; match-destinations { !localnets; !localhost; };
recursion no; // you'd probably want to deny recursion to external clients, so you don't // end up providing free DNS service to all takers
// all views must contain the root hints zone: zone "." IN { type hint; file "/var/named/named.ca"; };
// These are your "authoritative" external zones, and would probably // contain entries for just your web and mail servers:
// BEGIN external zone entries
zone "main.xxx.com" { type master; file "/var/named/main.xxx.com.db"; };
zone "xxx.com" { type master; file "/var/named/xxx.com.db"; }; };
-------------------------------------------------------------------------- main.xxx.com is my hostname I still can't ping main.xxx.com or xxx.com but my name servers are ok what exactly the problem?
i 've tried to setup dns server. i configured dns as well. but it's not reachable by the domain. would you help me to setup this dns settings correctly. will my nameservers would be NS1.mydomain.net and ns2.mydomain.net if i set it up in windows server 2003? i can't login through ftp programs. even when i type my login details. how to change the permission on the server.
Does anyone know of a tutorial that can teach me to setup a dns on my windows server for apache so instead of using an ip address i can use a domain and it would go to my website.
I am trying to run my first PHP 5 application that I bought from SitePoint called "Using Ajax with your web applications" but am having lots of problems trying to configure it to run on Windows XP and IIS.
I have installed Apache2.2 and PHP php-5.2.3-win32-installer.msi
I have made some changes and the last error message I got yesterday was this:
No input file specified.
I have tried to set the doc_root path in the .ini file to C:inetpub/wwwroot/finance/www and also delete it as I saw in some forums but to no avail.
I have set my IIS alias to the "www" folder since it contains the index.php file. It also contains another file I do not know what it is used for (.htaccess) and I left it alone.
[url]
Today, when I tried to open the file again in IE,
[url]
I got the following error:
Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, claudiop@kmrsoftware.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
I would appreciate very much if someone could help me to sort this problem out. What do I have to do to get the server back and running and get it to work with this PHP application?
I am having some trouble correctly setting up IIS 7 on Vista Business.
I have used the standard resources and web casts from Microsoft to get IIS set up to run asp/asp.net applications. When I run them from the localhost they run perfectly and everything seems to be fine. What I am having trouble with is editing and updating websites based in the inetpub>wwwroot folder.
I keep getting security messages and am unable to save edited file directly from studio.
Is there a plain English (yes I am new to server management) tutorial to getting IIS 7 to work fully so that I can develop ASP.NET applications at home.
There are a lot of tense people here lately..and I'll withhold the name the guilty party in this until I see when my next billing date is..should be interesting indeed. It is clear some of you need a good laugh.
Silly me..I was always under the impression when a "VPS has been setup" message via email...it was actually setup. Nope.
Actually..the vps is *NOT* setup. I have to wait another 24-48 hours for it to actually work. Mind you..I'm not talking about DNS at all..the fact remains..I have a setup email..and it ain't setup at all. No placeholder page via http..no power panel..no remote desktop..all tried with a raw ip address. The DNS has been setup, though. I'm going to keep a close eye on these folks for further fun.
Sadly..my experience has been deplorable with people that play games like this on day one. In fact..I've never had day 30 with any of them.
I have a dedicated server, Windows Box using IIS and Plesk.
I purchased an SSL from comodo and have installed the cert without any problems.
I have read the many plesk tutorials without any success.
Problem:
[url]works as it should
[url] automatically re-directs the the browser and displays the index page found in the /httpdocs/ folder
[url] not found even though the file is there and in the /httpsdocs/ folder, however the SSL is working and is indeed my SSL that I purchased.
It would appear to me that for some reason the /httpsdocs/ folder is not accessible and if no specific file is requested it re directs to the /httpdocs/index.html file and thus breaking the SSL.
I have just finished setting up another dedicated server of mine and this one is located in a different data center than the others, after i set it up i received this message from c-Panel to my root e-mail address:
The hostname (customer.wholesaleinternet.com) resolves to 64.21.9.57. It should resolve to 208.110.80.90. Please be sure to correct /etc/hosts as well as the 'A' entry in zone file for the domain. Some are all of these problems can be caused by /etc/resolv.conf being setup incorrectly. Please check this file if you believe everything else is correct. You may be able to automaticly correct this problem by using the ' Add an A entry for your hostname ' under ' Dns Functions ' in your Web Host Manager wholesaleinternet.com is where the server is located in the data center. i wish to have my own nameservers and on the same server, i want my nameservers to be NS1.jakeswebhosting.com and NS2.jakeswebhosting.com how can this be fixed? any one that can help me resolve this problem there will be a remote backup offer to claim from us
I've been using reseller accounts for a while but a major customer has decided their needs have grown to the point they want the server to be local for faster access and other things. Since they have been quite happy with my services so far, they want to let me carry on for them even though I've admitted to them I've never done the things they want before.
So now I need to setup the Linux servers in a local datacenter and would appreciate some real ground advise on certain things.
1. Redundancy if the server fails So far my research indicates that this is known as a failover arrangement. It seems that the software to use are Heartbeat which monitors if the primary server's alive and DBRD which synchronizes changes to the drive data. Am I correct or missing something crucial in the middle somewhere?
2. Backup Website If for some reason the server is totally inaccessible, such as network failure, is there a way for visitors to be redirected to a site hosted on my current reseller account informing them that the site is currently unavailable and giving some basic contact information?
3. Bandwidth control The server is provided with a 5mbps connection. My client runs several web applications and would like to ensure speeds on certain applications for some customers.
I understand it's possible to set up domains like www-client_normal_customers-com, www-client_premium_customers-com, www-client_staff_updaters-com using 3 different IP pointing to the same server. (using dashes because wht won't let me post urls...)
Then is it possible to set things in such a way that premium IP and staff IP will always at least have 1mbps of bandwidth to use.
E.g. 20 normal customers banging away at the server using the full 5mbps. 2 premium customers connects, the rest are automatically cap to 4mbps, giving the premium customers 1mbps to share.
Then a staff logs in to update the database, normal customers get cap to 3mbps giving the staff 1 mbps to use and not affecting the premium customers.
i have two different ip addresses from two hosting providers free and bind in running both of them. will i be able to setup ns1 and ns2 with those IPs for my new domain.
I want to setup WSUS for automatic updates for our servers. Can I setup WSUS on a VPS created in Virtuozzo? What should be the ideal server configuration for the WSUS. Also, I want to know if I can update any server using the WSUS server or the servers should be in the same network.
We have a client that has a mail server with two drives. One hard disk is devoted for OS/Application (C and one is devoted for mail storage only (D
The goal is to make the D: drive which is a SATA 320GB drive to be made into a mirror, i.e. add another drive and a RAID Card and make D has a RAID Mirror drive.
My understanding is that when a RAID is configured for drives, the drive will lose whatever data it has on it ? Is there no other way to construct a singular environment into a RAID mirror environment (by adding a drive and Card) without losing drive on one of the primary drives?
Virtuozzo based VPS comes with no control panel. I am wondering if it is easy to install Lxadmin or not? and is it all the same as lxadmin preinstalled by providers for operating?
I used a vps for several months with lxadmin, can deal with lxadmin well. so still want to have it.
I've registered a new domain name and 'hired' a Virtual Private Server (not managed) to host it. I know 'some things' in php and web design but I'm newbie with configuring servers (especially remotely on a Linux server.... )...
This is what I've done so far :
1. registered domain name at namecheap.com and set up DNS there (my VPS server names)
2. I've installed Linux Ubuntu 8.04 on my VPS
3. I've downloaded and installed XAMPP 1.7.1 on my VPS
I've registered my domain name yesterday and it is still 'invisible' when I type in the address... BUT when I type in my VPS's IP address, the XAMPP welcome screen appears (MySql isn't running though...).
I know this is a child's play for a Linux expert, please if someone knows a good tutorial, step-by-step guide on how do I set up everything to work properly....
We have servers in many DC's FDC, Singlehop, DedicatedNOW, ThePlanet, but no one set up our servers faster than Gigenet. I placed the order and 2 hours later I get my server login details and all the plugins I needed were also installed. I also read on their website that 95% of the servers get deployed within 2 hours which is great! I have contacted support 2 times and they replied quickly and they did exactly what I asked for. So far so good and will update everyone in a couple of months on how everything goes.
