Best posts made by AdamF

Does anyone have a recommendation for a monitor mount that can fit 3 monitors? I built a new desk for myself, and I have 3 monitors. I would like to keep the desk clean by getting a monitor mount. Any recommendations?

Can you explain why if I just mount an NFS share, using the command below, I can get a data transfer/throughput speed of approx 300 MB/s

mount 192.168.2.2:/var/nfs_share1 /mnt/nfs1

BUT,

If I put an entry in fstab, it dramatically slows the transfer to about 35-40 MB/s

192.168.2.2:/var/nfs_share1 /mnt/nfs1 nfs rw,sync,hard,intr 0 0

What causes that?

@scottalanmiller Sounds solid. The speed difference is dramatic. Thanks.

This post will probably seem like I'm jumping around a bit, because I have so many questions about where to begin. So apologies in advance.

I'm starting another project in my home lab. I want to be able to spin up new servers from a clone or template, and then make changes to the new servers automatically. I'd like to accomplish the following:

1. On my KVM host (plain Fedora 30 host with KVM), spin up a server, and clone it.
2. With that clone, I want the ability to create new servers from that clone, and then tweak different things about the new server such as hostname, IP address, and some other items within the OS or application. (Perhaps with Ansible, Saltstack, other?)
3. The assigned IP address for each server can either come from a DHCP server, or from a list of hard coded IP addresses. (I do not currently have a DHCP server in this lab)

I do not currently have any solutions like Openstack, or any other web front ends to easily do this. I manage KVM VMs with both Virt-manager, and with libvirt. I am open to other solutions if they would be a better fit for this type of project.

What is a good solution for this project? Basically, an automation solution for new server setups. (I guess you would consider it private cloud automation.)

@stacksofplates said in Automated Provisioning - KVM & CM tools:

@fuznutz04 said in Automated Provisioning - KVM & CM tools:

@stacksofplates said in Automated Provisioning - KVM & CM tools:

Terraform will do this and I have an Ansible role to do it also.
As @IRJ mentioned Vagrant will work also. However I feel Terraform is a better fit as you have more control over the specific pieces of your infrastructure.

You would still prefer Terraform over Ansible for this as well?

Yeah. My role can create the VMs, but Terraform had more functionality for that. Ansible overlaps in the infrastructure provisioning space a lot, but it lacks keeping states like Terraform does.

I'd like to learn both. I just started with Ansible a day or two ago. I have been (and still am) using SaltStack.

@travisdh1 Yep, plus it is pretty, so it has to work well.

following this thread. Time to test this out on a spare box. I've always steered clear of this due to the feedback on here, but initial research looks like it has some pretty awesome features. The builtin backup features are nice too. And it has an API for even more automation. I like that. Time to spin up a box.

Is anyone using UNMS cloud? I host my own UNMS server, but UNMS cloud is now free if you have 10-5000 devices.

@scottalanmiller said in UNMS Cloud:

Yes, we've been using it for a little while. Maybe four months.

Yeah I just put one device on it. Looks awesome to me. I just need to migrate my devices now.

Does anyone use Web filtering in the SMB space ? If so, what is recommended for a small (less than 10 person) office? A Ubiquiti Edge router is on the edge, but if you would want to then filter web traffic through a box that filters and also monitors, what are people using? I previously used untangle back in the day, but have not worked with any web filters since then. 100% not interested in a UTM.

@DustinB3403 said in Web filtering for SMB:

Are you looking to block content, like online gambling, porn etc? PiHole does an amazing job out of the gate and makes it pretty easy to do this if you want something quick and simple to setup and maintain.

I use Pi-Hole at my house. Good idea. I'm looking to block accidental stuff. Want to do what I can to keep malware, etc out as much as possible.

@travisdh1 said in Web filtering for SMB:

Easiest, fastest, use Cloudflare DNS
1.1.1.2 and 1.0.0.2 blocks known malware sites
1.1.1.3 and 1.0.0.3 blocks malware and porn sites

PiHole is good if you want an easy local solution.

That's great. I didn't know they came out with 1.1.1.3. That's awesome!

So the title kind of sucks, but here it goes.

I have 2 sites. Office (Edge router) and COLO (Edge router). I have my PBX down at the COLO. I previously connected my phones at the Office to the PBX down at the COLO via public IP. (Meaning the phones connected to the public IP of the PBX) No NAT down at the COLO. Everything was working perfect.

I now setup a site to site VPN between the 2 sites. Now, whenever I have a phone call, I have 1 way audio.

The office network is a 10.0.0.x/24 network, and the only thing I can think of right now that would be causing this, is the static rule that I setup down at the COLO firewall that says anything destined for 10.0.0.x/24, route out interface VTI0. But why is the audio trying to be sent to the 10.0.0.x/24 network in the first place? Shouldn't Asterisk be sending the audio back to the public IP address:port at my office? I wouldn't think that it should be trying to send it through the VPN tunnel.

I have to do some packet captures at multiple points here to really pin point what is going on, but has anyone else ever experienced this?

**Side note: If I change my phone IP to 10.0.5.1/24 (different local subnet), the audio traffic works perfectly.

I have a user who connects to our PBX remotely. For whatever reason, their home IP keeps changing almost weekly. The lovely responsive firewall on FPBX ALWAYS blocks their new IP and I have to add it back in. I have the user setup with DuckDNS, and I have whitelisted their DNS name. However, they connect into the home office with your standard VPN tunnel. So, therefore, DuckDNS sees the public IP address of the OFFICE IP, and not the user's home IP. Is there anyway around this? Can I force the DuckDNS program to see their actual home public IP address instead of the Office IP address?

Also, is there something on the users phone that could be triggering the responsive firewall to block their IP?

For those using other PBXs other than FPBX, do you have this issue with IPs constantly being blocked?

@Dashrender said in FreePBX and changing IPs:

I'm curious why DuckDNS is picking up on the VPN IP instead of the local one? no split tunneling?

Any possibility that the home user has a router that supports DynDNS? If so, set that up should solve the problem.

Good call on the split tunneling. Checking...

So this is now a super old post, but still relevant. I have been using Saltstack to manage my servers. I don't have any downsides to this so far, but I like to re-evaluate every so often. I see that Ansible open sourced (a couple years ago) their Tower GUI (AWX) That's attractive to me.

What are the current opinions on server management in regards to Ansible vs Saltstack.

So I decided to upgrade. :). Weekend project while I’m sick. Vms created, moving all data now. This is MUCH quieter than the r710.

@Pete-S said in I'll Show You Mine If You Show Me Yours, Home Labs:

@AdamF said in I'll Show You Mine If You Show Me Yours, Home Labs:

So I decided to upgrade. :). Weekend project while I’m sick. Vms created, moving all data now. This is MUCH quieter than the r710.

So moving to the cloud or upgrading hardware?

Upgrading hardware. I decided that I like having my systems in house, and between my plex server, photo backups, lab VMs, Pi-hole ,etc, it just makes sense for me personally to have it in house.

What is the physical connection layout for the Cradle point? I understand that the static IP block that I have from Comcast would NOT work during a failover scenario. I can deal with that. However, under normal operation (not in LTE failover), is this configured in such a way that creates double NATing? We have VoIP phones connecting to a cloud PBX, and I would not want to deal with double NAT.

@dbeato said in Cellular backup options:

@AdamF said in Cellular backup options:

@scottalanmiller Yeah, Our team, when working from home, likes to RDP into their PCs at the office. They use either traditional VPN, or Zerotier. Some of them claim to have issues with Zerotier, claiming it is "slow" for them. I never use traditional VPN anymore and I only use Zerotier if I have to RDP to anything at the office. I never experience slowness of any kind with Zerotier.

Yeah, change is "hard"

Zerotier is was such a game changer for us. Remember the old MPLS / pay a fortune days? DO NOT miss those.