[05:17] *** pyvpx is now known as sysvival [05:17] *** sysvival is now known as OMGKitteh [05:18] *** OMGKitteh is now known as Guest88910 [05:22] *** Guest88910 is now known as pyvpx [05:23] *** pyvpx is now known as Guest6369 [05:23] *** Guest6369 is now known as _click [05:26] *** _click is now known as pyvpx [06:19] *** nznzx2 has joined #arpnetworks [09:49] :p [09:52] I'm always surprised when I hear people still using apache. [09:52] and if you're already using php_fpm, why even use apache! [10:17] Precisely. [10:17] Only thing I find Apache useful for: home directories, eg. blah.com/~user/ [10:24] *** tabthorpe has joined #arpnetworks [10:42] lots of of people use it for htaccess [10:43] adding htaccess and ~ support would probably get a lot of people off of it :) [10:43] oh the htaccess support would have to support apache rewrite rules too [10:58] Yeah, though I can see why most webservers probably haven't picked up those features. They're very "multiuser" features (as in for systems with many users, where the users need some modicum of server configuration control) which seems to have largely fallen by the wayside these days. Either the user is the sysadmin and experienced, can modify the server configuration as necessary, host their files [10:58] wherever, or the user signs up for a {Tumblr,Wordpress,whatever} account. [11:00] well installation instructions are often easier to follow for apache [11:00] with the .htaccess [11:01] doas pkg_add nginx && doas vi /etc/nginx/nginx.conf && doas /etc/rc.d/nginx start [11:03] *** Seji has quit IRC (Ping timeout: 264 seconds) [11:24] Pretty sure mercutio was referring to the installation instructions given with projects like Wordpress or Drupal :P Not the server itself. [11:25] yeah i was [12:07] Some hosts use nginx as front end proxy with Apache backend [12:08] So htaccess works [12:43] *** joepie91_ has quit IRC (Ping timeout: 252 seconds) [12:54] *** joepie91_ has joined #arpnetworks [12:56] http://forums.hostgator.com/nginx-t305821.html [12:57] HTTP headers report nginx 1.4.7, but phpinfo() reports Apache. [13:51] *** joepie91_ has quit IRC (Ping timeout: 252 seconds) [14:05] *** joepie91_ has joined #arpnetworks [14:09] *** Seji has joined #arpnetworks [14:30] *** nathani has quit IRC (Quit: WeeChat 1.4) [14:33] *** nathani has joined #arpnetworks [14:33] *** Seji has quit IRC (Ping timeout: 272 seconds) [16:16] Would anyone be interested in simple hosted MySQL, PostgreSQL, Redis, MongoDB, etc... service that was super high performance because it's backed my the massive parallel read/writes afforded to us by a Ceph cluster? Thinking it would be a value-add to our VPS / dedicated servers and not even necessarily a thing we'd charge for (but a paid tier would probably exist for those that wanted more space than [16:16] the free value-added one would allow) [16:16] Just putting that out there... [16:17] backed *by [16:18] I would tweet that if it would fit LOL... [16:57] you could just ask about hosted databases on twitter [17:05] up_the_irons: As it happens, my employer would be interested in hosted Postgres. We were planning (tentative, few months out) to use Redshift/DynamoDB/etc for a "hosted, scalable and performant database" so if ARP had an offering, we'd be interested. [17:57] *** Nahual has joined #arpnetworks [18:23] brycec: so single hosted Postgres DB, any special requirements? [18:23] mercutio: how would you word it? [18:24] We're exploring interest for Hosted Databases. Who would be interested in such? [18:24] or something like taht [18:24] it's a bit weird having proper nouns before you have a name :) [18:25] maybe hosted MySQL, PostgreSQL, Redis, etc.. [18:25] got it :) [18:28] tweet sent :) [18:28] gizmoguy: your power monitoring looks cool [18:29] yeah i see it, and i saw gizmoguy's power graphs too :) [18:32] yeah it's quite cool! [18:32] http://power.sla.ac [18:32] i'm not sure how to hook it up [18:32] so you can tap into the mains power somehow at the base? [18:33] we're counting the pulses coming from the smart meter [18:33] oh so you need a smart meter? [18:33] something that generates pulses [18:34] do normal power meters generate pulses? [18:34] https://openenergymonitor.org/emon/opticalpulsesensor [18:34] this is the sensor we're using [18:34] mercutio: you'll have to go have a look at your power meter [18:34] ahh and then google it? [18:34] if it's a digital (non-smart) meter it should still do pulses [18:34] oh cool [18:34] basically if it has a flashing red light on it [18:34] you should be good [18:35] hah shit [18:35] it's raining hard [18:35] that caught me by surprise [18:35] i'll wait 10 minutes :) [18:35] hahaa [18:36] i suspect it is digital non smart [18:36] but who knows [18:37] they've actually wanted to install smart meter for ages [18:37] but we told them weren't interested [18:38] if smart meters had graphs like this i'd go for them [18:39] so they do [18:39] but from talking to my friends who work for power companies they usually can't be bothered to store the fine grained data [18:39] so genesis will only store hourly data for example [18:39] even though they get it 5-minutely I think [18:39] yeah it's a lot of data [18:40] oh they get every 5 minuntes [18:40] on the smart zigbee ones it's something like that [18:40] since we're counting pulses we get it instantly, but we're binning by minute [18:40] can you do more than once a minute? [18:41] yip [18:41] we could move down to 30 second or 10 second [18:41] damn [18:41] it stopped raining :) [18:41] I'm not sure how accurate the RTC on our sensors are though [18:44] yeah it's not even digital [18:44] s200.31 [18:45] funny how you can google anything now [18:45] and find youtube videos :) [18:50] Yeah so that will be fun to monitor [18:50] Your pulse is that spinning wheel [18:50] wouldn't it be easier to monitor one jackpoint or something? [18:51] You can get the clamp on monitors [18:51] it'll be quite expensive though [18:52] just get a smart meter [18:52] ahh maybe when i move [18:52] nearly everywhere has them anyway [18:53] so how hard is it monitor 10amp circuits etc? [18:54] * mercutio hasn't even started monitoring his ups yet [18:58] https://www.sparkfun.com/products/11005 [18:58] looks cheap [18:59] oh wow [18:59] damn [18:59] now i'm getting tempted :) [19:03] wow shipping prices aer ok there [19:07] *** Nahual has quit IRC (Ping timeout: 272 seconds) [19:56] That it not suck :P In all seriousness though, nothing "special" I don't think. It would be nice if the traffic stayed on-net (privacy concerns, and avoiding using our bandwidth quota), and highly ("guaranteed") available. Or were you looking for a different "special requirements" answer? 18:23:16 @up_the_irons | brycec: so single hosted Postgres DB, any special requirements? [19:57] brycec: nope, that's perfect, thanks :) [19:58] "on-net" is interesting... I'm thinking about how that would be done [20:02] without having to manage rfc1918 space amongst all customers using the service [20:08] it could be like the backup service [20:08] ^ [20:09] I mean, I imagine the connection would be TLS-wrapped in the first place, but keeping it on-net is an extra bit of warm-fuzzy security. [20:10] i'm a little paranoid about mysql's security [20:10] so on-net only seems preferable to me [20:10] well fuck MySQL :P (just my personal preference) [20:11] brycec: you know people will want it [20:11] People don't know what they want... [20:11] https://www.cvedetails.com/vulnerability-list/vendor_id-185/product_id-316/Mysql-Mysql.html [20:12] define on-net? [20:12] at the same datacenter? [20:12] local network [20:12] although on-net doesn't mean "private" [20:12] so no routers [20:12] layer 2 network? [20:12] so it could be over normal internet ip addresses but be acl'ed, and still be on-net [20:12] Not crossing/touching the public router. [20:13] Though I would accept VPN'd traffic [20:13] oh brycec has a different idea of on-net to me :) [20:13] wouldnt TLS or VPN be a huge performance hit for database traffic? [20:13] (Ooh there's a thought, use VPN for extra added ACL to the database stuff) [20:13] tls is no concern at all now days [20:14] TLS/VPN a huge performance hit? Next you'll be warning me about Y2K. [20:14] its a question, I dont really know [20:14] Like mercutio, modern computers handle that like they handle blinking an LED, no significant overhead. [20:15] brycec: it was a huge overhead in apache [20:16] How do you mean? (As someone that works from home 100%, all my traffic including to an Apache server at work is VPN'd with no noticeable issues.) [20:16] Like, are we talking adding a millisecond? Seconds? [20:17] it used a lot of memory, back when memory was epensive [20:17] the overhead of adding ssl onto sites increased memory requirements a lot [20:17] Ohhh you mean Apache as the SSL endpoint. [20:17] yeah [20:17] (I was mentally stuck on VPNs) [20:17] openvpn isn't as efficient as it could be [20:18] but for most uses straight tls is fine [20:18] (And TLSv1.3 is looking promising for reducing latency/improving connection times) [20:19] yeah i read about that from microsot implementing tcp fast open [20:19] tls quickstart kind of failed before [20:19] CloudFlare just announced TLSv1.3 terminations/endpoints. [20:20] https://blog.cloudflare.com/introducing-tls-1-3/ [20:20] oh wow [20:20] is chrome doing it yet [20:20] (no idea) [20:20] i find cloudflare kind of slow :( [20:21] Firefox 49 does, according to Googling [20:21] but they're definitely doing a lot of innovative interesting things [20:21] "Experimental, disabled by default" [20:21] and getting a lot of market share [20:21] https://en.wikipedia.org/wiki/Template:TLS/SSL_support_history_of_web_browsers [20:21] Template:TLS/SSL support history of web browsers :: Notes ➔ Back to article "Transport Layer Security" References... [20:22] firefox 49 hmm [20:40] I would imagine it being something like the backup service, but probably not require an extra NIC... [20:40] I thought ceph was designed for storage. Does it handle highly available databases too? [20:40] I mean, your VM NIC is already VLAN tagged... on the "other" end (hosted DB box), it would terminate your VLAN, among other customers who also have the service [20:41] mnathani: no it doesn't, but your DBs can use an rbd volume for their storage [20:41] it has a generic object store [20:41] An rbd volume from Ceph can be faster than a single disk, b/c it stripes the volume over the cluster [20:41] so the compute portion of the database would be tied to an individual ceph host [20:42] or other db host that uses ceph for storage [20:42] yeah [20:42] "other db host that uses ceph for storage" is the right answer [20:43] that makes it high performance, not highly available [20:43] and *that* DB host can be a very large VM too, which has the ability to be live migrated around the cluster, if needed or in the case of hardware failure [20:43] it could migrate between hosts [20:43] it makes it HA in normal HA speak [20:43] It would be more highly available than a DB on a single host [20:43] but not active/active ha [20:43] b/c that DB would be stuck to that host [20:44] high available to me means it can survive a node going down [20:44] survive means how much downtime mnathani ? [20:44] none [20:44] it would have to be behind a load balancer [20:44] so HA means to you active/active [20:44] and active active [20:44] yea [20:45] load balancer ain't a bad idea [20:45] haha [20:45] https://www.google.co.nz/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=0ahUKEwii28LnlrbPAhVJ6oMKHdb2B5MQFggcMAA&url=https%3A%2F%2Fwww.ibm.com%2Fdeveloperworks%2Fcommunity%2Fblogs%2Fmhhaque%2Fentry%2Fconfigure_two_node_highly_available_cluster_using_kvm_fencing_on_rhel7&usg=AFQjCNH21Ebq2hUmT10-NWYh95P5BNeWfA&sig2=L3t8gg8JNEBIBM3snE7LWA [20:46] oh i thought it was a normal url [20:46] but no it's a tracking url [20:46] I get Sorry! developerWorks is offline [20:46] exactly [20:46] but look at the url [20:46] yea it is funny [20:47] even active/passive would be highly available [20:47] well with ceph active/passive is easy [20:47] if host goes down can start on another host [20:47] as long as the passive node promotes itself to active upon failure [20:48] would you track cpu usage by the database? [20:49] like bill for more recurring complex queries [20:49] or perhaps by i/o bandwidth [20:49] i don't think we'd go that granular [20:50] fair use policy applies I guess [20:50] should not impact other users [20:52] would you require ARP VPS or Dedicated to access the database, or allow external hosts as well [20:53] perhapas as secondary users inspecting the database and running routine queries, but not the primary user - that would be the ARP VPS or Dedicated box [20:55] since access would come through account VLAN (most likely), I imagine it could be accessed through either a VPS or dedicated server [20:56] i mean, that would be a good way to do it [20:56] and not have complicated access rules [23:30] *** Seji has joined #arpnetworks