jcollum's questions

We are setting up an API that will need to be "sleeping" during certain hours. Sometimes we would like to override that with a control signal like "start" and "stop". We have the API set up as 4 docker containers with Nodejs Hapi and nginx to do load balancing.

We'd want any control signals (curl -X POST http://myapi.company.com/stop) to go to all the upstream servers. Normal requests (e.g. curl http://myapi.company.com/meta/tables) should be load-balanced normally and sent to only one server.

Is this possible with nginx?

The possible duplicate question doesn't explain how to route some requests to all upstreams.

This is not a duplicate. This question is much more detailed than "What is group policy". Mods need to be a little less aggressive around here.

I'd like to push out a Windows Firewall: Allow remote administration exception properties group policy to all computers connected to my DC. The instructions from MS are here, the relevant line is "Right-click the selected OU, and click Group Policy Update…". If I try to update the Users GPO it says there are no computer objects. If I try to add a "Computers" object, it says it already exists. The only thing in the tree that I can update is the Domain Controllers object; that doesn't seem right.

It's very confusing. If I can't add it, how come I can't see it? I don't have any filters turned on.

The whole point of this is to be able to force a GP update on all computers in the domain. The instructions that I linked imply that I can do that via the GPMC but I don't see any way to accomplish that.

I'm working with a domain controller (WS 2012 R2) and several client machines (all Win7). I'd like to add a group called Support to the Remote Desktop Users group on every client machine. From looking around, it appears that this is not possible. I've tried PSEXEC (SysInternals) with mixed results (of the 2 machines I tried, I was only able to connect to one).

How can I add a user group to the Remote Desktop Users group on all machines connected to my domain controller? Doing it one by one is a lot of work.

I've been getting this message a lot lately:

I'm building a few Windows VMs. The fix is to leave the domain and then rejoin it. It's a bit labor intensive though... is there any way to do this via script and not have to reboot in the middle? Doing it the manual way takes about 3-5 mins.

This is how I have it configured:

Some users have their screen savers password protected, other's don't. I made the change a week ago, plenty of time for the policy to propagate. Is it possible some of the users in the domain aren't configured to get policy updates?

While only some users have the password lock, all users are currently not able to edit their screen saver.

This is the first time I've ever done anything with group policy. The Domain Controller is Server 2012. The machines are Windows 7.

Edit: looks like it may be a bug in Server 2012: http://support2.microsoft.com/kb/2976965#appliesto, investigating...

cmd.exe, Administrator level:

C:\Windows\system32>net user jcollum /domain
The request will be processed at a domain controller for domain XXXX.YYYYY.

System error 1355 has occurred.

The specified domain either does not exist or could not be contacted.

The username is correct, as far as I can tell. We've recently swapped domain controller servers. I'm having trouble copying a large set of files from a server to a portable drive (running into permission errors).

I pulled up the datasheet but there's only "Acoustics Sound Power Measured" and I can't make any sense of it. It's got numbers like (page 15):

Power in Watts: >= 300W

Servers/Rack Mount BA: 7.0

I'm trying to figure out if we can realistically install these servers (4) in the closet in our office. Our existing server is installed in there but it's a tower, not a blade. I have essentially no experience with this sort of thing and I'm being asked to help.

I'm building an app that is hosted on Heroku. Heroku suggests that Apex Domains are a Very Bad Idea -- they suggest using CNAME records and a workaround service like Zerigo or DNSSimple. However, every other host I've used seems to have no issue with it. EngineYard is included in that list and they also host on Amazon EC2.

Should I get away from using A records in favor of using CNAMEs with a Zerigo workaround in the future? Is this really only a concern for high-availability apps? Is Heroku just being paranoid?

Related: Add www to non-www address with ssl

I'm working with a Rails app and having a ton of issues getting SSL for certain routes to work. I thought I'd instead just do a brute force approach and solve this in nginx config... fewer moving parts involved, more certain to work is my thinking.

For example, let's say I have a path that looks like 'http://mysite.com/users/sign_in'. Would I force that path to use SSL like so?

location / {
      rewrite  ^http://(.*)(/users/sign_in/)(.*)$  https://$1$2$3 permanent;
    }

Can anyone recommend a good resource for doing this sort of https/http redirection in nginx?

I'm trying to troubleshoot an extremely slow file transfer (5kb/s up) to a work server over the VPN.

A network admin at work has told me that I should expect to see a transfer rate reduced by up to 55% when I am connected to the VPN at work. I realize there are a lot of variables here, but is that figure typical? I did a speed test at BandwidthPlace before and after connecting the VPN and didn't see any appreciable change. Is that a reliable test?

We are using Forticlient SSL VPN.