Home / user-200560

Jacob Evans's questions

Martin Hope
Jacob Evans
Asked: 2020-07-17 06:11:56 +0800 CST
  • 0

Working with alpine in docker and trying to start named but it only exits (with zero output)

This works CMD /usr/sbin/named -f -c /etc/bind/named.conf

and is then represented in the docker image as

            "Cmd": [
                "/bin/sh",
                "-c",
                "/usr/sbin/named -f -c /etc/bind/named.conf"

However this does NOT work.

CMD ["/usr/sbin/named", "-f", "-c /etc/bind/named.conf"]

Here's the full Dockerfile, I also use it for CI Test

FROM alpine
RUN apk --no-cache add bind bind-tools bash
CMD /usr/sbin/named -f -c /etc/bind/named.conf
docker
Martin Hope
Jacob Evans
Asked: 2018-10-24 06:39:53 +0800 CST
  • 3

I'm having a strange issue that I hope someone else has come across it, hostd.log doesn't show any information except to confirm the boot time is slower (16 seconds!).

vmware Power On events

Using this script.

for ($i=1; $i -le 25; $i++)
{
Start-VM -VM $(Get-VM 'vHost01 Test') -Confirm:$false
Start-VM -VM $(Get-VM 'vHost02 Test') -Confirm:$false
Start-VM -VM $(Get-VM 'vHost03 Test') -Confirm:$false
sleep -seconds 2
Stop-VM -VM $(Get-VM 'vHost01 Test') -Confirm:$false
Stop-VM -VM $(Get-VM 'vHost02 Test') -Confirm:$false
Stop-VM -VM $(Get-VM 'vHost03 Test') -Confirm:$false
sleep -seconds 2
}

additional Screenshots to show consistency. enter image description here enter image description here enter image description here

Both systems have local nvme disks, 2.1Ghz gold procs, and are booting a new & empty vm, same hardware versions, same os patch, same everything.

Systems all running VMware ESXi, 6.7.0, 10302608

Each Server is configured exactly the same: (1) SD w/ESXi installed (1) NVMe SSD for Datastore, all datastores are local. (2) Intel Gold 2.1Ghz 6130 Processors 768 GB of DDR4 RAM

Host1

12788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] State Transition (VM_STATE_OFF -> VM_STATE_POWERING_ON)
2018-10-23T14:26:35.376Z info hostd[2100207] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] SIOC: SIOC is notified not to start injector
2018-10-23T14:26:35.376Z warning hostd[2100207] [Originator@6876 sub=Hostsvc.Tpm20Provider opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] Unable to retrieve TPM/TXT status. TPM functionality will be unavailable. Failure reason: Unable to get node: Sysinfo error: Not foundSee VMkernel log for details..
2018-10-23T14:26:35.378Z info hostd[2100207] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] DictionaryLoad: Cannot open file "/usr/lib/vmware/config": No such file or directory.
2018-10-23T14:26:35.378Z info hostd[2100207] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] Could not expand environment variable HOME.
2018-10-23T14:26:35.378Z info hostd[2100207] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] DictionaryLoad: Cannot open file "~/.vmware/config": No such file or directory.
2018-10-23T14:26:35.380Z info hostd[2100207] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] Found vmx as /bin/vmx
2018-10-23T14:26:35.380Z info hostd[2100207] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] Starting vmx as /bin/vmx
2018-10-23T14:26:35.380Z info hostd[2100207] [Originator@6876 sub=vm opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] VigorExecVMXExCommon: VM /vmfs/volumes/5b9bb253-6d8a5196-5fdc-ac1f6b0e6418/New Virtual Machine/New Virtual Machine.vmx in directory /vmfs/volumes/5b9bb253-6d8a5196-5fdc-ac1f6b0e6418/New Virtual Machine
2018-10-23T14:26:35.380Z info hostd[2100207] [Originator@6876 sub=vm opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] VigorExecVMXExCommon: Exec()'ing /bin/vmx /vmfs/volumes/5b9bb253-6d8a5196-5fdc-ac1f6b0e6418/New Virtual Machine/New Virtual Machine.vmx.
2018-10-23T14:26:35.381Z info hostd[2100207] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-02-01-13-f9e3 user=vpxuser:VSPHERE.LOCAL\Administrator] Vigor: VMKernel_ForkExec(/bin/vmx, detached=1): status=0 pid=2110313
2018-10-23T14:26:35.765Z info hostd[2099717] [Originator@6876 sub=Vimsvc.ha-eventmgr] Event 223 : New Virtual Machine on  localhost in ha-datacenter is powered on

Host2 (and host3)

12788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] State Transition (VM_STATE_OFF -> VM_STATE_POWERING_ON)
2018-10-23T07:26:44.667Z info hostd[2099611] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] SIOC: SIOC is notified not to start injector
2018-10-23T07:26:44.667Z warning hostd[2099611] [Originator@6876 sub=Hostsvc.Tpm20Provider opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] Unable to retrieve TPM/TXT status. TPM functionality will be unavailable. Failure reason: Unable to get node: Sysinfo error: Not foundSee VMkernel log for details..
2018-10-23T07:26:44.669Z info hostd[2099611] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] DictionaryLoad: Cannot open file "/usr/lib/vmware/config": No such file or directory.
2018-10-23T07:26:44.669Z info hostd[2099611] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] Could not expand environment variable HOME.
2018-10-23T07:26:44.669Z info hostd[2099611] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] DictionaryLoad: Cannot open file "~/.vmware/config": No such file or directory.
2018-10-23T07:26:44.671Z info hostd[2099611] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] Found vmx as /bin/vmx
2018-10-23T07:26:44.671Z info hostd[2099611] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] Starting vmx as /bin/vmx
2018-10-23T07:26:44.671Z info hostd[2099611] [Originator@6876 sub=vm opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] VigorExecVMXExCommon: VM /vmfs/volumes/5b9bb26a-d53a0f08-9b51-ac1f6b0e6454/New Virtual Machine/New Virtual Machine.vmx in directory /vmfs/volumes/5b9bb26a-d53a0f08-9b51-ac1f6b0e6454/New Virtual Machine
2018-10-23T07:26:44.671Z info hostd[2099611] [Originator@6876 sub=vm opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] VigorExecVMXExCommon: Exec()'ing /bin/vmx /vmfs/volumes/5b9bb26a-d53a0f08-9b51-ac1f6b0e6454/New Virtual Machine/New Virtual Machine.vmx.
2018-10-23T07:26:44.672Z info hostd[2099611] [Originator@6876 sub=Libs opID=14bb9f56-84b2-4978-9cd2-bd86db47993f-112788-auto-112789-h5c:70032863-28-01-01-82-212a user=vpxuser:VSPHERE.LOCAL\Administrator] Vigor: VMKernel_ForkExec(/bin/vmx, detached=1): status=0 pid=2107626
2018-10-23T07:27:00.067Z info hostd[2100473] [Originator@6876 sub=Vimsvc.ha-eventmgr] Event 131 : New Virtual Machine on  localhost in ha-datacenter is powered on
vmware-esxi
Martin Hope
Jacob Evans
Asked: 2018-07-04 05:45:55 +0800 CST
  • 0

How do I get my 1709 windows 10 agents to upgrade to 1803? What is the KB of the "April 2018 Feature upgrade to 1803"?

I've got two wsus servers, 2012 R2 that's been servicing out network for a while now, and 2016 fresh. Both of them have updated clients to Windows 10 1709 without an issue, however I cannot seem to get 1803 to show up. If I connect the windows 10 computer to the internet directly, it finds the update.

I'm also unable to find the "Feature Upgrade to 1803" on the windows catalog site

windows-10
Martin Hope
Jacob Evans
Asked: 2017-08-02 06:02:23 +0800 CST
  • 2

I have a bind cluster with private/public records stored in (2) views and configured with TSIG. Standard slave operation works but I'd like to use dig to transfer the zones for troubleshooting/testing.

Typically I'd use dig example.com @ns1.example.com -y tsig-key:SECRETCODE however this is denied as the key is only assigned to the view public.

Reproduce: Attempt a dig axfr from a client in the internal view.

Transfer Fails:

dig AXFR example.com -y external:xxxxxxxx

Transfer Succeeds

dig AXFR example.com -y internal:xxxxxxxx
domain-name-system
Martin Hope
Jacob Evans
Asked: 2017-08-01 08:07:31 +0800 CST
  • 1

Since IPv4 private IP Space was never contiguous, it is typical to send all unknown routes to an upstream gateway, such as your internet provider (ISP).

With IPv6, private IP space is contiguous, and only 2000::/3 has been assigned as internet addressable by IANA

Would it be better to only route 2000::/3 to the ISP as opposed to all assigning a default route. (or use RA)

I would say it is obvious that all unregistered IP addresses are blocked from going out the wan (RFC1918,RFC5735, etc) so questions related to firewall/security are out of scope. This question is restricted to ROUTING please.

routing
Martin Hope
Jacob Evans
Asked: 2017-06-02 12:52:11 +0800 CST
  • 3

How can I test network connectivity to a Keberos KDC (UDP/88)? Does Kerberos have a standard way to communicate that gives any output?

HTTP for example, 

nc -v google.com 80
GET

will dump the website

nc -v smtp.gmail.com 587
ehlo localhost.localdomain

will dump the options I have (like starttls)

But kerberos, being UDP, I can't even test if the socket is open, the only way I'm able to test if there is a firewall issue is to log into the KDC, stop kerberos, and start netcat on that port

[[email protected] ~]$ nc -l -u 88 
[[email protected] ~]$ nc kdc.example.com -u 88
linux-networking
Martin Hope
Jacob Evans
Asked: 2017-02-18 07:49:45 +0800 CST
  • 1

I have a few postfix servers that I use to send email from webforms, I want to be able to send email from external domains to my domains, from my domains to my domains, and from my domains to external domains.

I do NOT want to be able to send from external domains to external domains.

mynetworks alone seems to make a full open-relay (from any to any), which I do NOT want.

internal domains = example.com,example.org external domain = yahoo.com

From internal to any = Allow

Desired Result:

mail from: [email protected] < 2.1.0 OK
rcpt to: [email protected] < 2.1.5 OK
rcpt to: [email protected] < 2.1.5 OK
rcpt to: [email protected] < 2.1.5 OK

Actual Result:

rcpt to: [email protected] < 2.1.5 OK
rcpt to: [email protected] < 2.1.5 OK
rcpt to: [email protected] < 454 4.7.1 Relay Access Denied

From Any to Internal Only

Desired Result:

mail from: [email protected] < 2.1.0 OK
rcpt to: [email protected] < 2.1.5 OK
rcpt to: [email protected] < 2.1.5 OK
rcpt to: [email protected] < 454 4.7.1 Relay Access Denied

Actual Result:

mail from: [email protected] < 2.1.0 OK
rcpt to: [email protected] < 2.1.5 OK
rcpt to: [email protected] < 2.1.5 OK
rcpt to: [email protected] < 454 4.7.1 Relay Access Denied
postfix email-server
Martin Hope
Jacob Evans
Asked: 2017-02-12 18:07:34 +0800 CST
  • 1

I'm trying to enable IPv6 on my OpenVPN tunnels, but when I follow https://community.openvpn.net/openvpn/wiki/IPv6 and add

openvpn --version

OpenVPN 2.4.0 mipsel-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Feb  3 2017

openvpn windows client

peer info: IV_VER=2.3.11
peer info: IV_PLAT=win
peer info: IV_PROTO=2
peer info: IV_GUI_VER=OpenVPN_GUI_10

openvpn linux client

peer info: IV_VER=2.3.14
peer info: IV_PLAT=linux
peer info: IV_PROTO=2

Working Config

daemon
topology subnet
server 192.168.12.0 255.255.255.0
proto udp
port 1194
dev tun21
ncp-ciphers AES-128-GCM:AES-256-GCM:AES-128-CBC:AES-256-CBC
cipher AES-256-CBC
auth RSA-SHA384
compress
keepalive 15 60
verb 3
push "route 192.168.11.0 255.255.255.0"
client-config-dir ccd
client-to-client
duplicate-cn
push "dhcp-option DNS 192.168.11.1"
plugin /usr/lib/openvpn-plugin-auth-pam.so openvpn
verify-client-cert none
username-as-common-name
ca ca.crt
dh dh.pem
cert server.crt
key server.key
status-version 2
status status 10

But if I add:

server-ipv6 2001:db8:0:123::/64

Although I have an IPv4 and IPv6 IP on my client, I cannot send/receive any traffic.

I've tested on v4 Only and Dual-Stacked v4/v6 endpoints, I currently only need to provide v6 connectivity over v4 tunnels, but eventually the reverse.

openvpn ipv6 ipv4
Martin Hope
Jacob Evans
Asked: 2016-12-02 06:34:55 +0800 CST
  • 2

We have a very mixed environment as many enterprises should, our users are in Microsoft AD, our servers are a mix of windows and linux.

As such, we use the sshPublicKey ldap attribute to store ssh keys for linux authentication and gitlab.

Does TFS allow you to specify this ldap attribute for accessing the TFS Hosted git repo

Running TFS 2015

This is the version of git packaged with TFS, and not any external git repos.

team-foundation-server ldap ssh-keys
Martin Hope
Jacob Evans
Asked: 2016-11-30 22:50:48 +0800 CST
  • 3

I have 4 Domains, 1 Forest Root, 3 children. The children are nearly replicas, and have their machines named the same in all 3 child domains.

For Example:

DC1.dev.example.com
DC2.dev.example.com
DC1.test.example.com
DC2.test.example.com
DC1.prod.example.com
DC2.prod.example.com

From what I can tell, the only issue is the SPN duplication on domain join that requires manually fixing.

DC1.dev.example.com
HOST/DC1
HOST/DC1.dev.example.com

The shortname is a duplicate, so when I add test, the SPNSET function of the AD Domain join process fails, if I manually enter the fqdn in the computer name (extended attributes, service principle names) all is well.

Can I prevent the shortname from being added to SPN?

active-directory domain kerberos
Martin Hope
Jacob Evans
Asked: 2016-06-02 12:16:52 +0800 CST
  • 1

Since Keepalived and Cisco/Force10 both use VRRP, and use an ID Range of 0-255:

1) Would using the same number in the same vlan cause a issues.

2) Would using a different number in the same vlan cause a issues.

3) Would using the same group ID on another vlan cause issues.

I am thinking of reserving the last 55 group IDs for Keepalived and the first 200 for L3 Switches.

networking linux-networking vrrp
Martin Hope
Jacob Evans
Asked: 2016-05-15 18:54:03 +0800 CST
  • 4

When is it best to use VMDK, RDM-V or RDM-P?

I have always defaulted to using the standard VMFS5 Datastores with VMDK files for each server. However I typically use RDM-V when I need an excessive amount of storage on a VM for something like archive data storage or backup servers. On these systems I would give the server a OS Partition, and then a Raw mapped Data partition. Is there a reason not to do this?

virtualization iscsi vmware-esxi datastore
Martin Hope
Jacob Evans
Asked: 2015-11-24 12:35:39 +0800 CST
  • 3

Which is Better, and Why?

There are 2 inbound mail filters, they are in a cluster with equal hardware specs and can handle the same load. This is a new configuration and I would like to know which is a better way to handle equal cost load balancing of 2 servers, I can set them both to use the same hostname (ehlo) and same certificates, they currently use a certificate that includes all 3 names, the common name being mx.

In either scenario will severs retry both IP addresses in the case of an outage of 1 of the servers.

Scenario 1

example.com. IN MX 10 mx.example.com.
mx.example.com. IN A 10.0.0.10
mx.example.com. IN A 172.31.0.10

Scenario 2

example.com. IN MX 10 mx1.example.com.
example.com. IN MX 10 mx2.example.com.
mx1.example.com. IN A 10.0.0.10
mx2.example.com. IN A 172.31.0.10

*Assume all other variables are best practice (FCrDNS, SPF, ETC)

Google Seems to do BOTH.

;;Answer
gmail.com. 300 IN TXT "v=spf1 redirect=_spf.google.com"
gmail.com. 86400 IN SOA ns1.google.com. dns-admin.google.com. (2015031901 21600 3600 1209600 300)
gmail.com. 345600 IN NS ns1.google.com.
gmail.com. 345600 IN NS ns2.google.com.
gmail.com. 345600 IN NS ns3.google.com.
gmail.com. 345600 IN NS ns4.google.com.
gmail.com. 3600 IN MX 10 alt1.gmail-smtp-in.l.google.com.
gmail.com. 3600 IN MX 20 alt2.gmail-smtp-in.l.google.com.
gmail.com. 3600 IN MX 30 alt3.gmail-smtp-in.l.google.com.
gmail.com. 3600 IN MX 40 alt4.gmail-smtp-in.l.google.com.
gmail.com. 3600 IN MX 5 gmail-smtp-in.l.google.com.
gmail.com. 300 IN AAAA 2607:f8b0:4006:80c:0:0:0:1015
gmail.com. 300 IN A 173.194.123.85
gmail.com. 300 IN A 173.194.123.86
gmail-smtp-in.l.google.com. 300 IN AAAA 2607:f8b0:400c:c00:0:0:0:1a
gmail-smtp-in.l.google.com. 300 IN A 74.125.134.26
gmail-smtp-in.l.google.com. 300 IN A 74.125.134.27
domain-name-system
Martin Hope
Jacob Evans
Asked: 2015-10-23 20:49:36 +0800 CST
  • 13

I have a few switches that are in the same rack that must be connected via fiber OM2, 50/125 MM, LC/LC (2 additional examples added for reference are 10GbE and are OM3).

A Verizon tech told me that he had to add attenuators because the laser was too strong and would burn out the optics.

I've never heard of it, are there any best practices on these db levels?

Output on the Juniper

>show interfaces diagnostics optics ge-0/2/1
Physical interface: ge-0/2/1
    Laser bias current                        :  5.284 mA
    Laser output power                        :  0.3120 mW / -5.06 dBm
    Module temperature                        :  35 degrees C / 95 degrees F
    Module voltage                            :  3.2670 V
    Receiver signal average optical power     :  0.2986 mW / -5.25 dBm
    Laser bias current high alarm threshold   :  13.000 mA
    Laser bias current low alarm threshold    :  1.000 mA
    Laser bias current high warning threshold :  12.500 mA
    Laser bias current low warning threshold  :  2.000 mA
    Laser output power high alarm threshold   :  1.0000 mW / 0.00 dBm
    Laser output power low alarm threshold    :  0.0440 mW / -13.57 dBm
    Laser output power high warning threshold :  0.5010 mW / -3.00 dBm
    Laser output power low warning threshold  :  0.1120 mW / -9.51 dBm
    Module temperature high alarm threshold   :  110 degrees C / 230 degrees F
    Module temperature low alarm threshold    :  -40 degrees C / -40 degrees F
    Module temperature high warning threshold :  93 degrees C / 199 degrees F
    Module temperature low warning threshold  :  -30 degrees C / -22 degrees F
    Module voltage high alarm threshold       :  3.600 V
    Module voltage low alarm threshold        :  3.000 V
    Module voltage high warning threshold     :  3.500 V
    Module voltage low warning threshold      :  3.100 V
    Laser rx power high alarm threshold       :  1.1220 mW / 0.50 dBm
    Laser rx power low alarm threshold        :  0.0079 mW / -21.02 dBm
    Laser rx power high warning threshold     :  0.7943 mW / -1.00 dBm
    Laser rx power low warning threshold      :  0.0200 mW / -16.99 dBm

Output on my Core Switch

CoreSwitch#sh interfaces tengigabitethernet 0/46
TenGigabitEthernet 0/46 is up, line protocol is up
Port is part of Port-channel 127
Description: Juniper
Hardware is DellEth, address is 00:00:00:00:00:00
    Current address is 00:00:00:00:00:00
Pluggable media present, SFP type is 1000BASE-SX
    Wavelength is 850nm
    SFP receive power reading is -5.8704dBm

CoreSwitch#sh int te0/7
TenGigabitEthernet 0/7 is up, line protocol is up
Port is part of Port-channel 7
Description: Access Switch Stack 1
Hardware is DellEth, address is 00:00:00:00:00:00
    Current address is 00:00:00:00:00:00
Pluggable media present, SFP+ type is 10GBASE-SR
    Medium is MultiRate, Wavelength is 850nm
    SFP+ receive power reading is -8.9177dBm

CoreSwitch#show int te0/6
TenGigabitEthernet 0/6 is up, line protocol is up
Port is part of Port-channel 6
Description: Access Switch Stack 2
Hardware is DellEth, address is 00:00:00:00:00:00
    Current address is 00:00:00:00:00:00
Non-qualified pluggable media present, SFP+ type is 10GBASE-SR
    Medium rate is unknown, Wavelength is 850nm
SFP+ receive power reading is -3.0356dBm

Is -5 dBm acceptable? The default 'ALARMs' are between -1 and -16, but should I aim for -10 dBm and spend the money on 5db attenuators?

networking
Martin Hope
Jacob Evans
Asked: 2015-09-29 11:59:39 +0800 CST
  • 1

I'm trying to setup a 302 redirect if someone enters the IP address, but 301 all other requests to the www.subdomain of that domain.

server {
    listen 198.251.86.133:80;
    server_name 198.251.86.133;
    return 302 http://www.jacobdevans.com/anycast-301/;
}

server {
    listen 198.251.86.133:80;
    server_name _;
    return 301 http://www.$host$request_uri;
}

I have the 301 working, except if I put the 302 section above in, my hope is to allow anyone (non-https, sorry) to be able to point their A record root domain somewhere easy to do 301, example.com to www.example.com

Currently, everything is caught by the first listen option

# curl -I jacobdevans.com
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.6.3
Date: Mon, 28 Sep 2015 20:08:45 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: http://www.jacobdevans.com/anycast-301/

# curl -I 198.251.86.133
HTTP/1.1 302 Moved Temporarily
Server: nginx/1.6.3
Date: Mon, 28 Sep 2015 20:08:56 GMT
Content-Type: text/html
Content-Length: 160
Connection: keep-alive
Location: http://www.jacobdevans.com/anycast-301/

http://www.redirect-checker.org will pull from my luxembourg location

Thanks!

nginx