I assume that the maturity of UFW is irrelevant because in the end it is just a front end for iptables...
But just in case, is UFW mature enough for production use on a web server?
I administer several web hosting (combined with mail relays and other services) production servers under Debian GNU/Linux. I began giving these public services two years ago via three boxes: the first is a gateway which controls traffic via iptables (it's attached to a DSL modem) between a public subnet (the DMZ) and a local network which connects several workstations. In the DMZ subnet I maintain two Pentium-III era boxes, they've grown in services since I set them up. Actually, I think I should buy new ones, but, you know, I want to save money and lenghten its life.
So, they've grown in data hosted, but I've never implemented a resilent backup system. I've set up some rsync tasks sheduled via cron jobs to copy the entire UNIX file system in each of the DMZ boxes, but I'd like to be prepared before an unexpected "real" crash of some HDD, I mean, some problem that renders a disk unusable.
AFAIK, sysadmins sync entire HD backups which are capable of recovering a system via swapping the unusable unit with the backup unit. Maybe the best fashion is to implement a RAID mirroring the unit, I'm I right? So, keeping my systems as they are, I mean, capable of using 4 parallel ATA units, what would you do? Use dump, rsync or some other way to have an operational second unit with an exact copy in a bootable second drive, in order to quickly swap it if the main unit fails?
Comes to my mind to partition a second unit (so making it bootable) and backup daily via rsync only those parts of the unix file system hierarchy which are necessary to boot a system properly. What do you think about this workaround?
We have several production machines serving our static content. I want an automatic operation where I would only need to upload to one of them and it will get replicated/mirrored to all machines.Either that or distribute automatically from local source to all machines. First option is obviously better since all machines reside on same LAN and remote to our office.
Another feature I am looking for is to get a full report on what got transferred and if any problems occurred immediately (since usually these deployments can mean downtime for us). Looking around I saw rsync.Using CentOS 5.4-5.5 btw.
This is my first time to set up a production web server and I got some few questions on our migrations:
1. Our website from the Web Hosting company already gaining 5000000 hits/month and 35000 unique visitors/month, problem is we only have 2x4mb dedicated line here in the office and one IBM x3650 m3 for our LAMP, you think guys its enough to handle that kind of traffic if we start moving our web server here in the office?
2. If I register www.example.com to GoDaddy for example, do I still need to setup a DNS (BIND) server on our side?
3. This is my current Apache config:
Apache/2.2.3 (CentOS) DAV/2 mod_fcgid/2.3.6 mod_auth_kerb/5.1 PHP/5.1.6 mod_python/3.2.8 Python/2.4.3 mod_ssl/2.2.3 OpenSSL/0.9.8e-fips-rhel5 mod_perl/2.0.4 Perl/v5.8.8 with PHP eAccelerator.
Anything to share to increase the performance of the web server?
i have a production server running RHEL 4.0 with 2x146 GB on a RAID 1 with OS and another storage with 2x300 GB on a RAID 1 with the application, it's the database and application.
No LVM was installing and configured before, and now the second array with mirror of 300 GB is running out of disk.
1. i have 2 new hdd to build another mirror 2 x 300GB.
how can i create a LVM to star using the vgextend anytime i need it?
My server [URL] goes down in some cases.
On general time load average is 0,15-0,2 Only http(with php) and mysql working on it.
Here are some screens when the server goes down: [URL]
Here are the same bug with mine described: [URL]
I"ve looked on the internet but is there a leading app under kde4?
View 2 Replies View RelatedMy J2EE application is deployed in Weblogic 9.2 MP3 in Linux box.The problem is "api response time in production system is higher that test system( test system has more data and load w.r.t production .)"we got large amount of page fault in production Garbage collection log ,where as in test system (with same load ) page fault is Zero.And this page fault making my production system slow.In respect of JVM(JrockIt)both the system memory settings(Xms1024m -Xmx1024m -Xgcprio:throughput) are same.
Meminfo for Production:
MemTotal: 3866724 kB
MemFree: 1131748 kB
Buffers: 52304 kB[code].....
any system/kernel parameter set is missing in production which might cause this large amount of page fault. If any more information is required let me know?
Linux Version in Prod:
Linux version 2.6.18-53.el5 (brewbuilder@hs20-bc1-7.build.redhat.com) (gcc version 4.1.2 20070626 (Red Hat 4.1.2-14)) #1 SMP Wed Oct 10 16:34:19 EDT 2007[code]....
Is it possible to setup software RAID on a current production server.
If so how would I go about doing so?
I made the terrible mistake of upgrading my live Debian Lenny web server with the the dist-upgrade option in apt-get. I didn't realize this was actually an unstable upgrade and now I have had to make all sorts of choices of what configuration files to keep or upgrade ect. The apache conf files were actually bad after the upgrade and I had to replace them with the backups (phew) and the system is currently still up and running. However my virtualmin installation is no longer working due to a issue with perl ( but thats another question I guess to ask somewhere else maybe ). Anyways... I'm very scared to restart because my server is co-located somewhere else and Im the only one who has ever worked on this server so I would need to go there and fix it myself if it doesn't restart. Basically I have two questions.. is there an easy way to move back to stable packages..If so is this recommended?
And also I'm currently trying to fix some broken dependencies in the package manager but when I run "sudo aptitude -f install" It keeps telling me it is going to remove all of these packages (listed below), some of which I know are very important to the system and I cannot figure out why it would keep trying to do this. I get an error on "phonon-backend-xine" whenever it tries to upgrade just saying this
"(gtk-update-icon-cache:12343): GdkPixbuf-WARNING **: Cannot open pixbuf loader module file '/usr/lib/gdk-pixbuf-2.0/2.10.0/loaders.cache': No such file or directory"
I installed some desktop related packages a while back like gnome-desktop and I know the package is related to this, but all I really care about is making sure the server stays online and not about the desktop packages. I tried just removing kdebase-runtime and anything else that is dependent on it, but it wont let me do anything at all without fixing this broken package.
I really would just like to go back to lenny stable again but I know its probably too late since I already had it install a new kernel and grub 2 (auto configuring my new grub.list)..
[Code]...
what is Production IP address and Management IP address in Linux servers? What is the significance of these two? When to use what?
View 3 Replies View RelatedI have two servers on a vlan at my datacentre/colocation and previously both servers had public IPs on their eth0 interfaces. The servers are HP ProLiant DL360s - one is a G4 and one is a G5 The newer G5 is now the LAMP server and the G4 has been retired and I want to repurpose it as an iSCSI target using openfiler freenas or similar.
My G5 has public/static IPs lashed to the eth0 physical interface and the eth1 is not configured to do anything yet. The G4 will have both interfaces available - perhaps one for ssh access from one of my static public IPs and the other to be a private IP on the local vlan. Here is what I am trying to get my head around...
The G5
eth0 - Public IP - full LAMP services on two or three virtual interfaces
eth1 - Private IP 192.168.0.1
The G4
eth0 - Public IP for ssh
eth1 - Private IP 192.168.0.2
Because my traffic between eth1 on these boxes is via private IPs on the local private vlan it doesn't add to my quota for bandwidth. How do I go about configuring the routing and gateways and other aspects of this so that I can run a private IP space network between the eth1s and still serve the outside world from the eth0s...
I am afraid that if I assign the private IPs to the eth1 interfaces the routing may either not work or interfere with the access to the production internet facing interfaces (eth0s).
i have a small home network. i have laptops and workstations that my family (public) uses and an esxi box (private) that i use to test new apps for work.i need to have the public network separate from private. I have tried using two linksys routers but was unable to get the private network to access the internet. i was thinking i could use iptables with a couple of nics but I am not sure it would work. I know this could be a lot of work for someone that has never used iptables before but will give me a reason to learn it.i am sure setting up a public and private network has been done before i just don't to buy a bunch of hardware. I have a extra workstation and a bunch of nics so i would like to go that route. I am open to suggestions.
View 2 Replies View RelatedBrand new to Linux. Sort of got thrown in front of the bus if you know what I mean. The company I work for has a Linux server running CentOS 5.4 Company uses Linux for their Email, FTP and Web Server. Have been here a few years dabbling in and out of Linux and now that the old Admin has left the company.....I need to learn it ASAP. The server has run pretty solid until today.
The email server runs SendMail and SpamAssasin. Received lots of complaints today regarding extra SPAM. Noticed that SpamAssassin was not running. Tried to restart it through the WebMin tools and got the following error: Starting spamd: child process [3956] exited or timed out without signaling production of a PID file: exit 255 at /usr/bin/spamd line 2588.
well I switched from windows several years ago and never looked back. I wanted to use fedora (and I did for a while) but ended up using ubuntu studio (actually ubuntu with selected studio components) and to be fair it has worked out well. the thing is I am looking to keep my server skills up to date and I know at this time redhat is king and fedora has most of the stuff I need to keep current (files in same places, yum/rmp vs apt-get) for that elusive linux job I am looking for. but I need a real time kernel, jack, ardour, hydrogen and other assorted open source packages because, well because that is my interest. so...
1) Are these packages available in fedora via yum (I don't want to maintain tar packages)
2) Is there a real time kernel as well from yum?
3) kvm/qemu virtual machines did not work with the rt kernel on ubuntu 9.04 but DID in fact work on ubuntu 9.10. Has anyone used the rt kernel and run kvm/qemu on fedora? cause if I cant have a few vm's (opensolaris, centos and xp to be exact) I cannot come back.
ubuntu is nice but after a year I still keep starting to type yum install vs apt-get so I guess fedora never really left me... oh I should mention my computer is 64 bit...
I imagine this question is hard to answer and will get very few takers but I am hoping someone will be able to help. Has anyone ever done a cost analysis of video production facilities that use Linux vs Windows vs OS X?
My company use Final Cut on OS X to edit video, Photoshop on Windows or OS X for photo editing and Nuke on Linux for visual effects composting. We have multiple computers running in this configuration but have not looked deeply into how to achieve maximum value for our money.
Mac's can cost up to four times as much as a comparable Windows machine but save on electricity over the course of their life and have better software for our workflow. Linux machines are even cheaper as they use the same electricity as Windows but the OS is free. Unfortunately, Linux does not have Photoshop, or a good video editor. Gimp does not support opening PSD files, which as used extensively in production environments. Basically my question is has there been any studies done on this subject?
Is it possible to use ubuntu 10.04 lts desktop version as a web host for a production site?. If it is possible, can anyone give me links on how to do it?
View 5 Replies View RelatedI am going to install Fedora server for production use so, i want to know which Fedora version is most stable for production use.
View 12 Replies View RelatedI have had a look round and so far the consensus seems to be that you cannot upgrade a 11.1 system to 11.4, is that right? I have a small server running for a charity, it runs Oracle Apex, Kerio Connect and acts as a file server using Samba. It has KDE4 on it. The reason for upgrading would be to continue to receive updates for the OS.
Has anyone any advice on where to start with this or whether it is a dead loss?
On a healthy production system, should it still be possible to overload the system resources with taking Sar reports with verbose information...let's say like 1 shot per a second? Or should a healthy production system be able to handle this?
View 1 Replies View RelatedI am using Fedora 11I have sound working for flash videos, audio files, and simple recording applications like Audacity and in general.I get tons of fatal error popups on the screen as well.Rather annoying but does anyone know what the source to the problem is?
View 4 Replies View RelatedI am using fedora 6 and i want to upgrade but i am not sure which version of fedora is more stable for production use.
View 3 Replies View RelatedI'm using Apache as a web server and mod_ssl to handle my certs. Everything was working fine on Fedora 11 running 0.9.8x of openssl until I updated to 12. Version 1.0.0beta4 of open ssl is full of bugs. It is basically incompatible with .net and php's implementation of SSL. Running wireshark actually shows it fails at handshake stages...
I'm not here to report the bugs relating to openssl but can somebody please explain why there is an unstable version of openssl in Fedora 12 as standard?
What are the precautions and procedure do i need to follow while upgrading the Kernel?
Please let me know the complete details of a procedure of upgrading a kernel in a production environment?
What types of request for Samba & NFS comes in production support?
View 4 Replies View RelatedI am proposing moving from the mainframe to Linux. Problem is that I am not aware of a scheduling product that is available to handle the production code. Currently using CA7. Is there anything out there that accomplishes the same thing? As you can tell, I am NEW to Linux!
View 1 Replies View Relatedi have problems with my failover machines and cant locate the cause. The last update is quite some time ago.So will it hurt my configuration when I do an yum-update? I have 5 Xen VM on each machine, also they replicate with drbd and heartbeat. Can I just update the dom0 and leave the VM untouched inside?
View 5 Replies View Related- Off a vanilla F11 livecd install, I stuck a 3 at the end of my grub line to boot into runlevel 3. I have been doing this for as long as I can remember (since Fedora 3). However now it seems to break and gives me a GRUB error. I press e to edit, and delete the 3. BUt it still throws and error?!?!?!?! Has this facility (ie sticking a number at the end of the grub line) been changed and why is my grub line now broken even though I've gone back and deleted the 3?
- If I install Fedora 12 beta now, will yum take me all the way into production when it goes live (assuming no killer bugs encountered), I'm guessing thats a yes?
I want to be able to open a file (support for .mp3 and .ogg a must) and add effects, change pitch and tempo, add beats (either default or midi created), mix with other songs (or clips from), be able to change levels of the high/mid/low, alter gain and frequencies ... all that fun stuff.
programs I already have are:
MixXx
LMMS (Linux MuliMedia Studio)
mhWavedit
-and-
gAlan
And it doesn't seem that any of those have the features I am looking for. I am running Zorin OS 4 (ubuntu 11.04 based) and Dreamlinux 3.5 (debian- unsure which release) on a fujitsu lifebook 5 series - S6240 (it's kinda old 2005).
i found this video, and i really want to do the same. *newbie needs to learn [URL]...my question is, what need to be installed and how?
is there any specific configuration to make it works?
and will it work if i want to connect from Ubuntu to Fedora ?
