danfra
Member
- Joined:
- Jun 2024
- Posts:
- 159
- From:
- Frankfurt, DE
Panel or CLI does not matter for DDoS response. What matters: can you null-route in under 90 seconds? Can you trigger upstream filtering without opening a ticket?
Anycast + automated RTBH > any panel. 340 Gbps attack last month, mitigated in 45 seconds. No GUI involved.
Your method is fine if your runbooks work at 3 AM.
mitigated 800Gbps before breakfast
pieter_rtm
Member
- Joined:
- Jul 2024
- Posts:
- 195
- From:
- Rotterdam, NL
Specs from our last migration:
- Panel environment: 4 GB RAM baseline, 120 second provision time
- CLI/ansible: 512 MB RAM baseline, 15 second provision time
- Team onboarding panel: 2 days functional, 2 weeks confident
- Team onboarding CLI: 2 weeks functional, 2 months confident
The cost is not preference. The cost is salary during ramp-up and error rate during learning. We use CLI for prod, panel for client-managed VMs. Dry humor: this way everyone is slightly unhappy, which is optimal.
Containers before it was cool
tomchan
Member
- Joined:
- Jul 2024
- Posts:
- 202
- From:
- Bristol, UK
It actually works.
# my entire "panel"
alias sites='ls /etc/nginx/sites-enabled'
alias logs='tail -f /var/log/nginx/*.log'
For my day job though? We require a panel. Not because the team likes it. Because our team lead got burned when the last senior quit and took three weeks of undocumented knowledge with him. The panel requirement is about bus factor and documentation, not personal preference. He told me this in a 1:1 after I pushed for CLI-only.
That changed my mind a bit. The panel enforces a schema. CLI enforces nothing without discipline most teams lack.
works on my bench ¯\_(ツ)_/¯
RAJ
Member
- Joined:
- Jul 2024
- Posts:
- 294
- From:
- Mumbai, IN
Ansible doesn't fix the vacation problem cleardmitri raised
your margin is my opportunity
mediaaustin
Member
Deliverability Nerd
- Joined:
- Jul 2024
- Posts:
- 276
- From:
- Austin, US
Panel enforces schema is a good point, I admit
SPF, DKIM, DMARC — holy trinity ✉️