leto's questions

I'm in a kind of weird situation where I need to do the following:

Connect an OpenVPN tunnel with static RFC1918 IPs (think of 10.3.3.1 for the server end and 10.3.3.2 for the client end) and have it used by the KVM guest directly. What I'm trying to achieve is the KVM guest not knowing anything about the LAN and only the VPN tunnel.

EDIT: So that I don't need to mess with firewalls :-)

Normally I would try to bridge the tun-device with the interface for the KVM and assign the KVM a static IP (10.3.3.2). Is that wise or is there a better way?

I'm in the process of setting up a network security lab and want to monitor all packets leaving and entering the network. I'll get a 2Gbit/sec uplink as a channel terminated on a CISCO 3750 switch and a /24, the other end is a 6500 which is being run in production. Now I have a machine with two 1Gbit/sec NICs and want to use it to log the traffic with minimal changes to the 6500 which our network depends on.

What is the best way in terms of network structure to do this?

I thought of using SPAN on the 3750 side to mirror the traffic to my packet logger. But this means the system would not run in our datacenter.

I thought of using only 1Gbit/sec and setting the system up as a bridge, but this would put another throughput/latency penalty on the link.

I'm kind of anxious to create the SPAN on the 6500 because the concerning CISCO document says it would increase the load (which is a no-go).

Am I missing something here? Any other suggestions? Maybe use the system as a router for the /24? But then I'd be stuck with 1Gbit/sec.

I'm searching an ftp daemon that can support SSL/TLS over FXP using CPASV (or/and) SSCN and whos name is not "glftpd" or "drftpd". Any suggestions?

Thanks in advance

I'm planning to (privately) deploy a server that will be hammered with random I/Os in files ranging from 100MB to 50GB. The requests will range from 128 KB to 4MB. The profile will be 50:50 concerning read and write with a tendency of a little more reads.

What Filesystem can handle this load best? I've for now opted for XFS. But what tuneables should I look into?

Thanks

I've bought a VIA based router for the only purpose to run OpenVPN on it. Unfortunately it seems that Padlock is not used. Here is the important part from dmesg:

OpenBSD 4.8 (GENERIC) #136: Mon Aug 16 09:06:23 MDT 2010
[email protected]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: VIA C7 Processor 1500MHz ("CentaurHauls" 686-class) 1.51 GHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,APIC,SEP,MTRR,PGE,CMOV,PAT,CFLUSH,ACPI,MMX,FXSR,SSE,SSE2,TM,SBF,SSE3,EST,TM2,xTPR

My OpenVPN-Config has these options related to the ciphers/padlock:

cipher AES-128-CBC
engine cryptodev

I can verify that usercrypto is enabled by benchmarking with openssl speed command. The sysctl also reads:

kern.usercrypto=1

I'm deducing that Padlock is no used from these top informations which are taken @40 Mbit/sec (of 70/sec maximum) going through the VPN tunnel:

load averages:  0.66,  0.62,  0.54                                                                                                                                                          crypto.b0nd4ge.de 21:03:04
28 processes:  2 running, 25 idle, 1 on processor
CPU states:  1.9% user,  0.0% nice,  2.9% system,  3.2% interrupt, 92.1% idle
Memory: Real: 30M/142M act/tot  Free: 839M  Swap: 0K/1214M used/tot

  PID USERNAME PRI NICE  SIZE   RES STATE     WAIT      TIME    CPU COMMAND
20161 root      59    0 1224K 2676K run       -       116:45 53.42% openvpn
11092 named      2    0   18M   19M sleep     select   67:50  0.10% named

What else can I do to get Padlock working with OpenVPN? It's really a shame to no be able to max out my internet connection with this VPN.

Please help. Any suggestion would be appreciated. I've been googling for this since a couple of weeks.

given two 2TB USB external disks that have to be combined to one 4TB volume and formatted with one big Filesystem (XFS), I have a small question to ask.

Does LVM provide better Data recovery, should one disk be unplugged/damaged by being able to recover the data of the still working disk or is everything lost?

I would appreciate a solution where only the data of one disk is lost and I can recover the content of the other with the usual filesystem/lvm/raid tools. Is that possible with LVM or RAID "linear"? This is for storing unimportant files that can be retrieved from backup, but I want to save time :)

Thank you in advance