cvlo's questions

Currently have a web server VPS in Germany with Hetzner. They are offering free load balancer service. Thinking about cloning my VPS in their Finland site (meaning adding another VPS with cloned setup/contents) for daily backups that can also increase my site's availability through the load balancer.

Is this even possible with two VPS, or would I need an extra one for storage/database? I'm basically trying to accomplish a RAID-1 structure but with two VPS instead of two hard drives.

What's the best way to set this up on Debian 10 in a way that whenever one of the servers is down, the other one can send the order to automatically reboot?

Looking for second opinions.

Suppose a website is set up so that only IPs from country X are allowed read/write access. This server goes through a CDN such as Cloudflare. Because the GeoIP block is at server level, it never gets enabled because Cloudflare will always cache from an IP in country X and broadcast worldwide so anyone outside of country X will still be able to read the version that was cached by Cloudflare locally.

Does this mean IPs from GeoIP blocked countries (outside of country X) will also have write access?

Inexplicably, it seems like there has been a bug for a long time in one of the most widely used firewalls, UFW, which does not allow for adding IPv6 deny rules above any other IPv4 rules.

The result is that in order to deny IPv6 addresses one has to rewrite the entire ruleset after adding an IPv6 deny rule, because the IPv4 rules (on top) override the newly added deny rules on IPv6 addresses.

Fail2ban also seems littered with errors for applying IPv6 deny rules. What are some workarounds people are using for this?

I tried setting up Mode 0 NIC bonding using ifenslave between my Ethernet and WiFi cards on Debian 10.

After numerous ifconfig wls1 up/down, I was able to set up Bond0 until it stopped working. After undoing the setup, I realized ifconfig wls1 up wasn't loading the WiFi adapter's firmware anymore (rtk8192ee)

:~$ sudo dmesg | grep firmware

[5.201360] rtl8192ee: Using firmware rtlwifi/rtl8192eefw.bin

[5.201745] rtl8192ee 0000:24:00.0: firmware: failed to load rtlwifi/rtl8192eefw.bin (-2)

[5.201799] firmware_class: See https://wiki.debian.org/Firmware for information about missing firmware

[5.201845] rtl8192ee 0000:24:00.0: Direct firmware load for rtlwifi/rtl8192eefw.bin failed with error -2

I know I'm not missing the firmware because it was working before. Could this be a NetworkManager bug?

Please see my /etc/network/interfacesfile below

source /etc/network/interfaces.d/*

auto lo

iface lo inet loopback

Any ideas why the firmware is acting up?