Skip to content
randyaround

randyaround

Member

Joined:
Jan 2025
Last seen:
2mo ago
Posts
15
Threads
0
Likes
996
Reputation
171
randyaround

randyaround 2mo ago

Mini-guide: negotiating with providers as a small customer · General Discussion

rolfllc said:
ZFS is for people who have already solved the basic problems

Heresy. ZFS IS the basic problem solver. Snapshots replace backups. Checksumming replaces worry. Compression replaces... bigger disks.

Everyone needs ZFS. They just don't know it yet.

randyaround

randyaround 2mo ago

Mini-guide: negotiating with providers as a small customer · General Discussion

rolfllc said:
ZFS replication to another auction box

Now THIS is how you ZFS. Not on a VM. Not for compression alone. Actual disaster recovery with send/recv and a cold standby.

I retract my earlier criticism. You are forgiven. RAIDZ calculations available upon request.

randyaround

randyaround 2mo ago

Mini-guide: negotiating with providers as a small customer · General Discussion

rolfllc said:
I run ZFS on that VM

A VM. With ZFS. The virtual disk is probably already on some SAN with its own redundancy. You're adding layers for no reason. Just use ext4 and snapshot the hypervisor.

Unless you need compression. Then I forgive you. Barely.

randyaround

randyaround 4mo ago

What do you use for disaster recovery drills? · General Discussion

reykjavik_doc said:
No containers at home. Þe best disaster recovery is simplicity

Simplicity is great until you need to roll back a snapshot in thirty seconds because your parity check found silent corruption. I drill ZFS send/recv monthly. Source pool on my home box, target is a Hetzner...

randyaround

randyaround 5mo ago

openvpn still relevant? My client mandate nightmare · VPS Hosting

proalex said:
VM on the endpoint

WRONG. Now you are managing VM images. WRONG. Licensing for Windows 7 VMs is a NIGHTMARE. WRONG. This is how you get FOUR profiles becoming TEN artifacts.

Franck already made the right call. Quote high. Let them decline. Move on.

randyaround

randyaround 7mo ago

Hidden primary with Cloudflare slave—paranoid enough? · VPS Hosting

WRONG.

The threat model is VALID. You do not know what the boyfriend knows. "works in IT" means ROOT ACCESS to EVERYTHING.

I have SEEN this. My cousin's ex-wife's boyfriend DELETED the pfsense config.

Hidden primary is NOT ENOUGH. You need:
- AIRGAPPED signing
- MULTIPLE secondaries
- HARDWARE TO...

randyaround

randyaround 7mo ago

openvpn still relevant? My client mandate nightmare · VPS Hosting

blogfranck said:
The Access Server route is starting to look economical at 15 USD per user per year

WRONG. 15 USD per user TIMES how many users? WRONG to call that economical. WRONG to let client externalize their Windows 7 debt onto YOUR infrastructure bill.

Bill them 300 EUR hourly for...