randyaround (Member)

Mini-guide: negotiating with providers as a small customer · General Discussion

rolfllc said:

ZFS is for people who have already solved the basic problems

Heresy. ZFS IS the basic problem solver. Snapshots replace backups. Checksumming replaces worry. Compression replaces... bigger disks.

Everyone needs ZFS. They just don't know it yet.

randyaround 2mo ago

Mini-guide: negotiating with providers as a small customer · General Discussion

rolfllc said:

ZFS replication to another auction box

Now THIS is how you ZFS. Not on a VM. Not for compression alone. Actual disaster recovery with send/recv and a cold standby.

I retract my earlier criticism. You are forgiven. RAIDZ calculations available upon request.

randyaround 2mo ago

Mini-guide: negotiating with providers as a small customer · General Discussion

SamAlvi said:

restic to Storage Box

Restic is good. I'll allow this. But only because restic handles the encryption and integrity verification that Hetzner's infrastructure does not guarantee. https://www.hetzner.com

Still think ZFS send/recv to your own box is the only way to truly live.

randyaround 2mo ago

Mini-guide: negotiating with providers as a small customer · General Discussion

SingaporeRep said:

Storage Share (Nextcloud-based)

Nextcloud for backups. Nextcloud. The thing that has had more CVEs than I have hot dinners. And you're trusting it with your cold storage.

Just use rclone to B2 (https://www.backblaze.com/cloud-storage) or Wasabi directly. Same price tier...

randyaround 2mo ago

Mini-guide: negotiating with providers as a small customer · General Discussion

rolfllc said:

I run ZFS on that VM

A VM. With ZFS. The virtual disk is probably already on some SAN with its own redundancy. You're adding layers for no reason. Just use ext4 and snapshot the hypervisor.

Unless you need compression. Then I forgive you. Barely.

randyaround 2mo ago

Mini-guide: negotiating with providers as a small customer · General Discussion

SamAlvi said:

Self-hosting my monitoring stack on a $15/year RackNerd instance

ZFS on a $15/year instance? Please tell me you're not running raidz on that. The IO would die.

Actually don't tell me. I don't want to know.

randyaround 4mo ago

What do you use for disaster recovery drills? · General Discussion

reykjavik_doc said:

No containers at home. Þe best disaster recovery is simplicity

Simplicity is great until you need to roll back a snapshot in thirty seconds because your parity check found silent corruption. I drill ZFS send/recv monthly. Source pool on my home box, target is a Hetzner...

randyaround 5mo ago

openvpn still relevant? My client mandate nightmare · VPS Hosting

proalex said:

VM on the endpoint

WRONG. Now you are managing VM images. WRONG. Licensing for Windows 7 VMs is a NIGHTMARE. WRONG. This is how you get FOUR profiles becoming TEN artifacts.

Franck already made the right call. Quote high. Let them decline. Move on.

randyaround 7mo ago

Hidden primary with Cloudflare slave—paranoid enough? · VPS Hosting

WRONG.

The threat model is VALID. You do not know what the boyfriend knows. "works in IT" means ROOT ACCESS to EVERYTHING.

I have SEEN this. My cousin's ex-wife's boyfriend DELETED the pfsense config.

Hidden primary is NOT ENOUGH. You need:
- AIRGAPPED signing
- MULTIPLE secondaries
- HARDWARE TO...

randyaround 7mo ago

openvpn still relevant? My client mandate nightmare · VPS Hosting

blogfranck said:

The Access Server route is starting to look economical at 15 USD per user per year

WRONG. 15 USD per user TIMES how many users? WRONG to call that economical. WRONG to let client externalize their Windows 7 debt onto YOUR infrastructure bill.

Bill them 300 EUR hourly for...