Skip to content

Mini-guide: Bypassing HPE iLO advanced license for fan control

Dedicated Servers by garykwh 5 replies 366 views
13 #1

Got a DL380p Gen8 running inference on 4x Tesla P40s. ILO standard locks fan curves to "jet engine" above 35% load. Found a way to push custom PWM via ipmitool raw commands without the $400 license key.

The trick: iLO 4/5 exposes raw sensor data at 0x30 0x30. You can override the thermal daemon with raw 0x30 0x30 0x02 0xff 0x00 followed by your hex percentage. I run 0x1e (30%) at idle, ramp to 0x3c (60%) when GPU temp hits 75C via a 10-line Python loop.

VRAM stays at 82C under 24/7 LLM inference. Ngl saved me like $800 in license fees across three boxes.

Full commands in post #2 if mods allow. YMMV, don't brick your BMC.

CUDA cores are my love language
#2

To be honest this is exactly what we needed for the OVHcloud budget line.

Specs on our test unit:

  • DL360 Gen9, 2x E5-2680v4
  • ILO 4 v2.78
  • Raw command works as said, no license present

Bullet list of gotchas:

  • 0x30 0x30 0x01 0x00 disables automatic control entirely. You must manage ramp yourself.
  • Some firmware builds after 2024 patch this. Check before you buy.
  • Fan health polling still works, no iLO alerts triggered.

Dry part: this voids warranty if HPE finds out. They won't, but as said, documented for honesty.

One-liner: $400 for a PWM curve is insulting.

Containers before it was cool
#3

WARNING: opening IPMI to the network for this script is asking for pwnage!

What could go wrong:

  • Raw IPMI commands over WAN = plaintext credentials flying around
  • Python loop crashes, fans stop, thermal runaway, FIRE
  • Attacker with BMC access persists below your OS, invisible to fail2ban

You NEED:

  • Dedicated IPMI VLAN
  • Firewall DROP all 623/UDP from outside
  • Local serial console fallback
  • Physical watchdog timer, not software

I run ipmitool only from a racked Pi with serial connection. No network path. 👀

The license bypass is clever. The security posture of most homelabbers doing this is TERRIBLE.

airgapped, encrypted, faraday'd, still worried
#4

Tutorial very good, the garykwh! Is possible use this on server Dell? I have PowerEdge old, the fans is airplane noise lol.

How much cost the license HPE in your country? Here is very expensive, is why I ask.

The IPMI is dangerous if expose to internet, yes, but many people do this ¿why not¡ I think is okay if password strong.

My server good is R720, can or not work same method? I search already but not find.

#5

Wah this one very useful! I already try on my DL380 Gen8, work dong!

But I have question can or not: your Python script run where? In the server itself or separate machine? I scared if server hang, the script stop already, then fan stop also. Very hot my room, no aircon.

I think better put on separate Pi like the @olespete say. But Pi cost money also, for that money you get almost half the license already lol. How you all solve this one?

My setup: 2x E5-2660v2, 64GB RAM, running Proxmox (https://www.proxmox.com). Idle power 180W, very high. Want lower the fan noise at night.

#6

Fan control aside, the real win here is running these boxes silent enough to live with. I have three in a garage rack, temps swing 15C ambient summer to winter.

Specs that matter for thermal:

  • 1U vs 2U: 2U wins every time, bigger heatsinks
  • Aftermarket heatsinks from Supermicro fit with minor mods
  • Arctic P12 PWM fans in the bays, not stock Delta screamers

RAID note: P440ar runs hot. Pull it if you're doing ZFS on HBA anyway. Saves 8W and some exhaust temp.

License bypass is fine. HPE abandoned Gen8 support years ago. They got their money.

zfs send | zfs receive. repeat.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft