John Fox's questions

I'm looking at purchasing a reserved instance to access a GPU on AWS. It's likely that a few month down the line i will need to migrate the workload elsewhere.

Can i still see the RI on the marketplace, even if i am only paying for it monthly with no upfront costs, to get out of the agreement?

I'm struggling to move some files/folders from the cool tier in a container into archive storage. I've a load of machine backups that I want to get migrated over.

I've got the files in a container that's set to private and I know I need to select each of the files individually and change the properties to archive.

The problem is that when i go into the properties of the file, hot an cool (inferred) are available but archive is greyed out.

Anyone any ideas? Followed a couple of articles below but no matter what I'm unable to get them over to archive storage.

https://www.techtalkcorner.com/move-files-archive-tier-azure-storage/ https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal

Got some issues with a stuck azure sql bacpac import preventing me from importing the bacpac again to the database with the same name.

The file is being pulled in from an Azure storage account. I was importing a bacpac file (575mb) of a database that's 16gb. I thought the database import had stalled and deleted the database that was created as part of the import. Since discovered that the import was still in flight.

Now when i try and create another import of the database with the same name.

I've tried running az sql db op list to list the job but as the database no longer exists it errors (i deleted it thinking it had failed but the jobs still there in the background).

Also tried the same via the Microsoft API - https://docs.microsoft.com/en-us/rest/api/sql/databaseoperations/cancel but that gives a 404 as the database isn't there.

Anyone any idea on how I can cancel the stuck job?

No support on the account at the moment so my idea of contacting MS has gone. Is there a timeout on the job?

I'm trying to use the following piece of code in a powershell DSC script. It runs fine on first execution but on following executions it throws an error as it's already expanded.

Here's the command:

       $MaxSize = (Get-PartitionSupportedSize -DriveLetter c).sizeMax
       Resize-Partition -DriveLetter c -Size $MaxSize

What's the best way to get my script running with no error on subsequent runs?

Anyone help with a problem i am having with trying to configure my AWS Application Load Balancer to use an HTTPS upstream on a IIS server.

Everything works fine when I set the target group to hit the IIS server on http/80 with no issues. Due to some config in the site I need it to stay on https on the upstream and having some issues getting it to work. The application works over https from the server, using local host entries, and also from a machine in the same subnet. No SSL certificate warnings or similar. Site works fine from a machine on the same subnet.

As soon as I switch the target group/upstream from 80 to port 443 the site starts getting a 502 error.

Enabled logging on the ALB and nothing flagged up in the logs that would point to anything.

Only thing I can see is a few Target TLS Negotiation Errors around the time of the errors when running with https upstream.

Absolutely drawn a blank with it and struggling. Everything when hitting the site directly in IIS works on port 443 as normal. Just not through the ALB catching the traffic on 443 and using the upstream on 443.

I'm struggling to get the password from a couple of new ec2 instances when using terraform. Been reading up through a couple of posts and thought i had it but not getting anywhere.

Here's my config:

resource "aws_instance" "example" {
  ami = "ami-06f9d25508c9681c3"
  count         = "2"
  instance_type = "t2.small"
  key_name = "mykey"
  vpc_security_group_ids =["sg-98d190fc","sg-0399f246d12812edb"]
 get_password_data = "true"
}

output "public_ip" {
    value = "${aws_instance.example.*.public_ip}"
}

output "public_dns" {
    value = "${aws_instance.example.*.public_dns}"
}

output "Administrator_Password" {
    value = "${rsadecrypt(aws_instance.example.*.password_data, file("mykey.pem"))}"
}

Managed to clear up all the syntax errors but now when running get the following error:

PS C:\tf> terraform apply
aws_instance.example[0]: Refreshing state... (ID: i-0e087e3610a8ff56d)
aws_instance.example[1]: Refreshing state... (ID: i-09557bc1e0cb09c67)

Error: Error refreshing state: 1 error(s) occurred:

* output.Administrator_Password: At column 3, line 1: rsadecrypt: argument 1 should be type string, got type list in:

${rsadecrypt(aws_instance.example.*.password_data, file("mykey.pem"))}

I'm struggling to try and convert the following curl request into powershell using invoke-webrequest:

curl -X PATCH "http://172.28.36.62:8080/api/3/http/upstreams/my-api/servers/5" -H "accept: application/json" -H "Content-Type: application/json" -d "{\"down\": false}"

Gone and upgraded nginx and it uses a later version of the API with different commands and struggling to swap them over to powershell.

I'm looking at switching my log rotate setup to rotate logs hourly instead of daily. I think I've got the config ready to go but wanted to check whether the config would trigger a reload/restart of the process with the postrotate options?

I'm running this on ubuntu 16.04 and have copied my config from /etc/cron.daily to /etc/cron.hourly ready to go

Here's my config here from the logrotate.d/nginx file:

/var/log/nginx/*/*.log {
    hourly
    missingok
    rotate 720
    compress
    delaycompress
    notifempty
    create 640 nginx adm
    sharedscripts
    postrotate
            if [ -f /var/run/nginx.pid ]; then
                    kill -USR1 `cat /var/run/nginx.pid`
            fi
    endscript
}

If this does kill the process, is there a way around this step?

We are experiencing a weird issue that I cannot figure out and hope someone may be able to help me out.

When we restart one of our web servers, I have to go into the site.config to comment out a couple of references to .net in order to get our Wordpress site to start correctly.

For Windows, every time a server or IIS service is restarted, I have to update Site.config on c:\inetpub\temp\appPools\Site\Site.config.

<isapiFilters>
    <filter name="ASP.Net_2.0_for_V1.1" path="%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll" preCondition="bitness32" />
    <filter name="ASP.Net_4.0_32bit" path="C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_filter.dll" preCondition="bitness32" />
    <filter name="ASP.Net_4.0_64bit" path="C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_filter.dll" preCondition="bitness64" /> 
</isapiFilters>

I end up needing to put comment marks around the block to get the site to work correctly.

I’m after some assistance as I’ve run into a couple of issues implementing nginx as a reverse proxy backing onto windows servers. I’ve used the config that works elsewhere with no issues but I’m seeing issues with more failed requests (404s) and nginx specific error codes 499.

We are seeing around 200 post 404 errors in the nginx logs when using the setup and only around 100 of the same errors when running against IIS. The files are there in most cases and the same (get requests anyway) work when hit directly on the windows server.

My first through was that there was something wrong with my setup using the post requests through nginx but it’s only a small percentage so don’t think there’s anything fundamentally wrong with nginx post setup.

The 499 status codes, client closed connection seems a little weird. I can see around 150-300 499 requests for 20k requests. It may be that these were happening anyway and we are just not seeing them being reported in IIS.

Here’s my nginx site config:

server {
        listen 80;
        server_name www.mydomain.com;

        access_log /var/log/nginx/www.mydomain.com/mydomain.com.log main_ext;

        location / {
                proxy_pass http://mydomain;
                health_check;
                }

                }
upstream myupsteam {
        zone myupsteam 64k;
        sticky cookie srv_id expires=1h domain=.mydomain.com path=/;
        server IP;
} 

Really need to start pushing the traffic through these servers as the IIS servers are struggling with the load but just need to get to the bottom of the errors before we can sign the switch over off.

I’ve tried changing the proxy timeout settings, proxy bind address onto private NICs.

Anyone any ideas?

I am trying to use a IIS reverse proxy running on IIS in a new Azure VM against an old classic VM. I have the server proxying onto the classic VM but this is currently over the public IP address.

Is it possible to get a new Azure VM, running in a resource group (on one subnet) talking to a classic VM running in a Virtual network (classic) section on a different subnet?

We are experiencing an intermittent issue with websites accessing resources/images over CIFS/SMB shares (running on our storage array). It comes and goes and we are trying to get to the bottom of it.

The error code in the browser is 500.19 with the error code 0x80070038.

I've come across these two locked threads and is seems like the same issue:

http://forums.iis.net/t/1165964.aspx?500+19+error+NetBios+command+limit

http://forums.iis.net/t/1158781.aspx

Is this still applicable in a Windows 2012r2/IIS 8.5 environment?

I've had a look in the registry for MKLM\Services\CurrentControlSet\lanmanworkstation\MaxCmds but cannot see it.

We have a win 2012/IIS 8.5 web farm up and running using a shared config. All was working great on the servers and we would create a site on one server and it would go across them all. We run into an issue with the servers and had to change a number of them to local configurations before reverting them back to the shared config.

The problem we had was with us not being able to start sites so was a bit of a major issue. At the time we suspected it was related to the way we were using DFS to share the configuration across servers and possibly IIS was accessing the config files whilst they were being touched by DFS. We tried a couple of things and ended up reverting the servers back to a previous IIS config (due to corruption issues and not being able to start sites) and had to setup a new DFS share.

We have an issue when we create a new site on the farm, the site is started on web01 but stuck on starting on the remaining servers. When we try and click on start on one of the sites we get the error

there was an error performing this operation. Details: the object identifier does not represent a valid object. (exception from HRESULT: 0x800710D8)

When i edit the binding of any site on the server (the one with the sites stuck on starting) and apply the changes I am then able to start all the problematic sites.

Anyone any ideas as to what the cause could be and how to resolve it?

Thanks

I'm looking at using azure active directory domain services to replicate our accounts upto Azure in order to be able to use our local domain accounts to authenticate against services like dropbox, dynamics CRM and possibly google apps. Ive installed the connect software and all of the accounts have been pulled in.

some of the articles i have seen talk about setting dns records up on the public fqdn but we do not have one, we run mydomain.lan

Is it possible to get these accounts to authenticate in Azure if no domain?