Sunday, March 20, 2011

ZFS file server with Solaris 11

Why I choose zfs filesystem for my home file server

  • Functionality (deduplication, encryption, compression, snapshot, replication, clone, iscsi target builtin, etc)
  • Block level checksum (say goodbye to silent data corruption)
    • Report read error and corrects it if you have a mirror or parity raid. (must have with ssd technology)
  • Use ssd for intelligent “l2arc” caching
  • Always consistent on disk
  • Good startup to learn about zfs read: The last word in file systems http://www.sun.com/software/solaris/zfs_lc_preso.pdf
  • Because it's cool to learn something new

Why don’t choose zfs for file server

  • You don’t want to have a dedicated server for storage at home
    • For standard home usage a cheap nas with raid1 do the job
  • You’re a performance freak and just do sequential read and write and don’t care about silent corruption and zfs functionalities
  • You don’t want to invest your time to understand and have fun with zfs
My zfs file server hardware

  • Amd x2 5050e 45W
  • Motherboard “SAPPHIRE PI-AM2RS780G”
  • 8gb ram
  • Intel pro 1000/100/10
  • 1 x 250gb “For system boot... not in mirror yet”
  • 3 x 1.5tb raidz “for data”
  • 1 x 40gb intel ssd x25-v “For cache l2arc” Read my benchmark

Friday, March 18, 2011

RSA Breached: SecureID Affected

According to the announcement, RSA was breached in an APT attack (we don’t know if they mean China, but that’s well within the realm of possibility) and material related to the SecureID product was stolen.

http://securosis.com/blog/rsa-breached-secureid-affected

Friday, July 9, 2010

Configure NFS for simple firewall rules

http://www.croc-informatique.fr/2008/11/faire-un-montage-nfs-dans-un-environnement-scuris-redhat/

List of (tcp/udp) ports for all VMware product

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1012382

Ipfilter example on Brocade Fabric OS 6.x

Allow ssh,http,https and block telnet on Brocade Fibre Channel switch (Fabric OS 6.x)

ipfilter --create my_filter_rule --type ipv4
ipfilter --addrule my_filter_rule -rule 2 -sip any -dp 22 -proto tcp -act permit
ipfilter --addrule my_filter_rule -rule 2 -sip any -dp 80 -proto tcp -act permit
ipfilter --addrule my_filter_rule -rule 2 -sip any -dp 443 -proto tcp -act permit
ipfilter --addrule my_filter_rule -rule 2 -sip any -dp 23 -proto tcp -act deny
ipfilter --activate my_filter_rule
ipfilter --save my_filter_rule

Friday, April 2, 2010

antivirus false positive

Check if a detected virus is a false positive....submit the infected file for scan by 30 differents virus scanner in one step.

http://www.virustotal.com
http://virusscan.jotti.org/en