I looking for a way to get the list of the top bandwidth eater on my Juniper ssg5. On my old OpenBSD Box I had a command line version of ntop. It was just perfect.
How can I do the same thing whith the SSG?
Thank you !
I have a complex directory structure with lot of small files in it. like:
/opt/data/1000/45/32/2009/10/15/76543.zip
When I launch a du or find on this directory (/opt/data/) my server load increases a lot (0,5 --> 25) and my system doesn't respond any more.
Can I "slow down" the execution of the du/find command to keep my system accessible? I don't care if the command takes 3 days to run :-) I've tried with nice -n 19 with no success...
Thank you !
I'm looking for a way to auto-restart a service when it crashes (Apache, Proftpd, Jboss...). I'm running debian. I could script something but I'm trying to find a "good practice" for this.
Do you know a software that can do this?
Thank you
Just a question about your Postgresql server(s). On what hardware are you running Postgresql? (CPU, Memory, Disk configuration, RAID...)
I'm planning to buy a dedicaded server for my postgresql instance: - Dell R710 - Xeon E5520 x 1 - RAM: 24GB - 2x146GB SAS 15K RAID1 for OS + pg_xlog - 3x450 SAS 15K RAID5 OR 4x450GB SAS 15K RAID10 for database.
What do you think about this config?
Thank You!
I'm confused with XenServer... I plan to buy a Dell R710 server and run XenServer on it. Dell can sell me a XenServer license with the server, I can choose between XenServer Express and Xen Server Enterprise. When I look at Citrix Web Site they talk about "XenServer" and "Citrix Essentials for XenServer". So, what's the difference between Dell's Express/Enterprise edition and Citrix Xenserver/Essentials?
and an other question: is XenCenter free?
Could you help me?
Thank you!
I'm trying to build an architecture with Virtual Servers for J2EE Web applications Hosting. I've no experience in virtualisation. I currently have 1 server whith Apache/Jboss/Postgresq/Proftpd installed and I want to design something where services run on different servers.
1 HTTP Load Balancer (+ 1 HTTP server for failover)--> Multiple Application Servers or web servers--> Database Server (+ 1 server for replication)
Files will be stored on SAN and 2 servers for Database and HTTP Load Balancer (not virtual)
Here is what I have in mind: Architecture
- What do you think about this architecture?
- Is Jboss running well on Xen (or VMWare) virtual machines?
- Is heartbeat the best tool to get failover?
- Am I right to put the database on a dedicated server (and not on SAN)?
- my SAN will be used for static files (images...). Should I use iSCSI or Fiber Channel?
Thank You !!!
I use Postgresql 8.4 and I wanted to know what type of RAID is mostly used for databases. I read everywhere that RAID10 is the best suited and RAID5 not a good option. ex: http://www.revsys.com/writings/postgresql-performance.html
My server is a Dell Poweredge 2950. Dell support told me that they dont have a lot of customers using RAID10. Most of times they use RAID5 + raid controller cache ON.
What do you think about that? What RAID level do you use for your database servers?
Thanks !
What do you think about lighttpd for AJP load Balancing?
I use Apache and mod_jk for this, it works fine. What would be the benefit of switching apache to lighttpd?
What software use to load balance J2EE applications? Hardware load balancer?
Thank you!
What tools do you use to monitor hardware RAID Status on Dell Poweredge 2950 (II and III, perc)? I run Debian. I've used a "debianized" version of dell openmanage in the past. I'm looking for a lightweight solution and (if possible) something "debian packaged".
Any ideas are welcome!
Thanks
After a fresh GNU/Linux Debian install I can see that a lot of users are created:
- daemon
- bin
- sys
- games
- man
- lp
- news
- uucp
- proxy
- list
- irc
- gnats
- Debian-exim
- statd
- identd
This os is running on a server. I don't have games, printer, news server, irc server...
Are these users useful? Can I remove some of them?
I did not find any documentation about this :(
I have compiled different softwares (apache, postgresql, proftpd, and jboss) and installed then into a single directory (with the --prefix configure option). I have something like that: /opt/apache /opt/proftpd /opt/postgresql /opt/jboss. I run all these services with the same user. I've done that 'cause it's easier for me in term of right management (all services have access to the same data directory). And it's a way for me to "package" all the services I use in a single directory.
To start the services:
- apache: started in root, and I have set the following directives in the config file: "User pol" "Group pol"
- postgresql: started with user "pol"
- proftpd: started in root, and I have set the following directives in the config file: "User pol" "Group pol"
- jboss: started with user "pol"
pol user have a shell. It's useful for maintenance.
- What do you think about this config?
- Should I run all these services with different users?
- What are the security best practices for users/services management?
Thank You !!
I have GNU/Linux Debian Servers (Etch/Lenny) in production. I want theses systems to stay up to date. I have installed apticron with tells me what packet needs an upgrade. What is the good practice for production servers and stable releases of debian:
- always upgrade all packets (risky or not on debian stable?) OR
- only apply security updates (enough or not?)
Thanks!
I have a SSG5 firewall with some route based VPN. I have a LAN, a DMZ, an another net and WAN. How should I do to make DMZ use VPN and not LAN? I think it's a routing problem. But Source routing doesn't solve my problem.
It was easier on my old OpenBSD Box 'cause route where made by the system automatically. I think it was using Sthe VPN (SA/ProxyID) configuration to add configure them.
Thank U !
I have a GNU/Linux Debian server running: apache, jboss, proftpd and postgresql (RAM: 16GB, 4 core Xeon). Max Apache process is 1200, same thing for the Jboss DB Pool. And I can have up to 400 simultaneous FTP download. Load average can raise 5 (1 most of time). What do you think about that? Is this server considered as "too loaded"?
Regards,