Adam - welcome to the community and overlay networking!

Not trying to hijack the thread as this appears to be a ZT feature request topic, but since Pertino has come up a number of times, here are the answers:

DNS: PITA. We solved it by using customer internal DNS in AD environments. This is a solution for many customers, but not the end all. Without some type of local integration, overlay networks can never really be used for an internal company network because protocols will not translate.

Free plans: all trials revert to a free network for up to 3 devices; existing free plans with more devices are still live - thanks beta testers! Take the class-action suit to LMI 😘

Chef/Puppet: you can automate Pertino installs with your orchestration tools. We even have a Docker compatible client for cloud-bursting, cross-DC networking

LDAP integration/custom UI: We've got some APIs already available, some in the works. Plan is to make it so if you don't want to, you never have to enter the Pertino console.

Best,
Josh

@scottalanmiller I like to live on the edge 😂

With many things on ML, it comes out to semantics and asking the right original question.

But often people don't know what original question they really want to ask!

@dustinb3403 said in Copying Content from other sources:

Here is a wonderful deployment!

I want some of that vine-themed network cable.

@BRRABill said:

BTW: from Googling around tonight, it appears the SYnology can also be setup to use commercial backup programs like CrashPlan.

Though that CloudSync that @MattSpeller is talking about also looks killer.

It does, but we have a VM specifically for that. I don't how it would perform on the synology, but I didn't want to add any more services to it. The VM just mounts the normal shares and backs them up to Crashplan.

@FloridaMan said in SpiceWorld Craziness 2016:

@Texkonc said in SpiceWorld Craziness 2016:

@scottalanmiller said in SpiceWorld Craziness 2016:

@Texkonc said in SpiceWorld Craziness 2016:

@Dashrender said in SpiceWorld Craziness 2016:

@Texkonc said in SpiceWorld Craziness 2016:

@scottalanmiller said in SpiceWorld Craziness 2016:

@PSX_Defector said in SpiceWorld Craziness 2016:

That @Scale doing the boat again?

Should have run down to Austin for a quickie and/or crash the party.

Yup, another year on the @scale boat.

Probably the last.

why is that?

They .....

is not Scale here.

Good point, edited it.
Was refering to SW, as the last SW probably, which in turn ends the Scale boat likely.
My post was referencing SW, not Scale. 🙂

I have a ticket for next years Spiceworld, so I hope this years ain't the last. Also hoping Scale do the boat cruise again next year too.

SW 2017 is already booked, I can't imagine that there will be any issues with it happening now. And the boat cruise isn't scheduled but is so popular and such a success that I can't imagine it not happening.

@Natchos said in Can Windows 7 Still Upgrade to Windows 10:

@scottalanmiller that works for me. Sent them a reply, hopefully I didn't land on a relentless guy!
Thanks for the input, it's great.

Once you turn them down, you can just mark them as spammers and block them. There is no requirement to respond at all.

@hobbit666 said in MPLS alternative:

So following on from another thread.

I'm today's modern day how would you handle:-
*Multiple site connections around 60 sites.
*Internet access via a
for "security" either at a single point or something per connection? Nice to have Intruction detection blah blah blah 😁 and content filtering. Will need to allow certain ports in and out (I know this is normally standard on Firewalls/UTMs but worth mentioning)
*semi managed with high SLA.

How would multiple vpns be handled. Would it be a case each sites router would have multiple vpns to each site? Or a single VPN to a singe "master" site/device.

About two years ago, we stopped using MPLS in favor of site-to-site virtual private networks. Costs are decreasing, speeds are increasing, and visibility is improving. We're using Fortigates for the firewalls, but you should be able to use whichever firewall you're comfortable maintaining. Similar use profile in terms of traffic type (Citrix ICA). We used hub and spoke vpn architecture, which works well for us; what works best for you will rely on the rest of your infrastructure topology.

@scottalanmiller Pertino is installed, and LogMeIn is currently running. I'll send you an email with login creds.

Which CAD software are we talking about again?

Every single one that I've worked with had it's own version control built in, but would often cost extra for the licensing. You setup a server with the version control software for everyone to use. The workflow is then open V.C.S. -> checkout the file to be changed/add new file -> make changes -> save changes locally -> login to V.C.S. and check in the new version. Most of them would keep previous versions of files as well, and log who checked out each file (mostly so the next person who works on the file can go track them down when someone doesn't do the final step.) I'd say stick with the built-in tool chain.

@stacksofplates said in Looking to Buy a SAN:

I went to a Dr's office before my surgery and the hospital has a giant network where they can give you results and everything through their app/web portal.

We have that too. Our results and your records are available in our patient portal - a website, no app at this time.

The dr I went to literally said "oh we don't use apps here" and they required the hospital to fax them the information. It took like 3 weeks to get the info to them because they kept screwing up. There may be people out there that like the offices that are like that but I'm definitely not one of them.

We're not that bad, no where near. We have access to a local system called NeHII - it's a health interchange between all Nebraska hospital system - and it's an opt-out system for the patients (and you're barely made aware of it when visiting a hospital or any affiliated clinical office).
Additionally, since my providers have privileges to almost all of the local health systems around town, our staff have direct access to those medical records systems to pull data without needing to make a request and waiting on whatever form of data transfer might happen. Of course, that said, the data is typically extracted as a PDF and uploaded as such to our EHR, so no discreet data, but at least we generally have fast access to it.

@Dashrender said in O365 and encrypted mail to other email systems:

I don't look at it as bleakly as you do. You in no way told the receiver they couldn't receive it, you told them they have to use a different method to receive it. Is it a good experience - I'm not going to argue that point, frankly I don't care as long as it works.

But you did... you sent them an email and the email didn't include the payload, it told you to go look in another system for the payload that didn't arrive (the princess is in another castle.) Why did you need the email if email isn't delivering the message? It's obviously similar to failure... two systems are being used for a single thing. All they want is the payload, not a message telling them about a payload elsewhere.

@scottalanmiller said in Discovering FakeRAID in the Real World:

@wrcombs said in Discovering FakeRAID in the Real World:

@scottalanmiller said in Discovering FakeRAID in the Real World:

@wrcombs said in Discovering FakeRAID in the Real World:

@scottalanmiller said in Discovering FakeRAID in the Real World:

@wrcombs said in Discovering FakeRAID in the Real World:

@dave247 said in Discovering FakeRAID in the Real World:

@scottalanmiller What about RAID 1 on the motherboard? Yeah it's "fake", but it's still effectively mirroring the drives. I use that on my home pc and it hasn't failed me.

Thats what we use .

Is it? I thought you just determined that you didn't have FakeRAID, but had to use Windows RAID instead (which is the recommended choice anyway.)

I just know that we mirror Drives, WE use RAID 1 : Using CLTR+Fduring the boot. Is it possible we are using FakeRAID? Completely! like we have all came to the conclusion of: This place is diseased with horrible practices. Why we dont use Windows RAID- but instead use FastTrak? I have no Idea.

Oh, if you are doing CTRL-F during boot to configure RAID, pretty likely it is FakeRAID. But the one in your other thread didn't support that. That's a unique one, though?

Unique for sure, Because we us FakeRAID: but we could set it up to use Software RAID..

Right, you have options, but chose the weird one, it would seem. And the one that can't be used uniformly.

Sadly this falls under : Being Plagued by horrible practices . . .

@scottalanmiller said in Apple plans to scan your images for child porn:

@dustinb3403 said in Apple plans to scan your images for child porn:

@scottalanmiller said in Apple plans to scan your images for child porn:

@jaredbusch said in Apple plans to scan your images for child porn:

And the pile on officially begins.

https://9to5mac.com/2021/09/09/csam-scan-encrypted-messages/

Now we know how bad it is if the UK is supporting it! The ultimate surveillance state.

China is way worse...

Sort of. It depends on what you measure. Camera, they are worse (per capita, for real.) But when it comes to far more intrusive data, they are less.

Screen Shot 2021-09-10 at 7.24.50 AM.png

Uh that completely ignores the fact they monitor all of their internet traffic. They don't need to file data requests when they already have it?

@BRRABill said:

@scottalanmiller said

I have a feeling that that doesn't actually count.

Hmmm, you may be right. I just realized all the product keys are the same. Hmmm.....

Well, whatever. I am doing all I can. 🙂

Doesn't it balk then?

@jaredbusch said in Fax: Sangoma FAXstation:

@bigbear there was a lot of random speculation about the service earlier. In the thread. The entire concept of it generating an email blows my mind. No where does it ever state anything like that happened @scottalanmiller

It is poorly explained all around in their marketing. I saw it for years and forget how I ended up trying it. It was also horribly named before as FachsBachs or something crazy. FaxxBochs.

Great example came in today. Someone had a Dell server, four matching drives. The system arrived with no virtualization configured and the OS was installed without RAID on a single drive. Each drive was attached as an individual drive. Obviously Dell never intended someone to use the system like that, even for a desktop that's not an acceptable setup. It's pretty clear that it was just a test install to show that the hardware was working.

But several people said "but Dell set it up this way, obviously it is okay" and it has been running in production and is now a disaster.

@scottalanmiller We are also working on our enterprise offerings. See https://www.zerotier.com/product-ss.shtml -- we haven't made a big announcement quite yet but we are working with a few customers in the IoT and device space and this is also applicable to large enterprise SDN. We will offer live real-time monitoring of network quality of service and proactive investigation of problems as a service, and one of our engineers has a machine learning background so we are planning to leverage advanced quantitative analytics and deep learning against circuit test data eventually. We're also looking forward to pitting deep learning against harder scenarios in NAT traversal in the near-mid future.

Pricing on that page is still being refined. We might add something more fine grained in the future. Existing model is actually geared more toward IoT device vendors.

@JaredBusch said in supporting an office of computers with full drive encryption:

@scottalanmiller said in supporting an office of computers with full drive encryption:

@Mike-Davis said in supporting an office of computers with full drive encryption:

@wrx7m said in supporting an office of computers with full drive encryption:

I saw this marked as solved but can't seem to find the post that mentions the solution/what the OP ended up doing.

I was wondering how much time it would add to my job if I took on a client that was using full disk encryption. After a few posts it was clear that it would be additional overhead.

Yeah, definitely some for sure.

But potentially tiny amounts if you tell them that they must be present for any reboots you need to make.

Possibly. They might be okay with that.

@Dashrender outbound trip means leaving the country.