HN user

fefferkorn

12 karma
Posts2
Comments29
View on HN

i hope that encourages the good ones to come to europe sometimes to see how a more friendly, not so competitive and democratic environment could be, with great social security and healthcare systems. Yes we have our flaws, and sometimes the clocks are ticking slower, but we have a stable and more transparent ground at least.

[dead] 1 year ago

Keep americans stupid, so they dont know howto do get taxes returned?

Love it, but aggregating different connections (latency, LTE vs Adsl, fiber) is hard. Tried different algos, but always had network hogs or even higher ping that slowest connection.

What made it work best (and rock stable) was using LTE only, or ADSL only connections having same ping to aggregator (VPS) and have the VPS as near as possible. (latency wise)

I did not had the time to set up multiple redundant aggregators, so my SPOF was the VPS some times. Maybe there is a solution out there.

So far my experience a year ago. Our provider then offered a way cheaper managed solution, thats why we stopped using it.

Thats tricky, maybe hire an DB engineer or ask professionals and partner with them, to train Devs? Restricting them after letting them run loose will make em mad anyway, so what are your concerns? security? performance?

I mean u can put layers on top, like ORMs or graphql stuff like hasura tonabstract access to DBs,or use external managed systems like neondb, supabase or aws/azure own stuff.. to enable restriction on tables and DBs. but this things make management worse if there is no discipline.

Im no DB engineer, just a sysadmin also dealing with same issues, but there is no holy grail. In the company i work for, one Dev who really was into DB engineering took the Owner role and he is discussing engineering, giving access to them and rolling out changes with the the DEVs, when they need something, but not the devs itselfs. He also writes migrations. But he is also a very skilled Dev.

Ahwe used them a lot, when lasers were expensive.They also could be used with special endless carbon paper (Durchschlagpapier) to get immediate copies (even 4), one for you, one for the customer and one for the archive as backup and so on. Cleaning those heads and exchanging the tapes everyday while having a chat with the people in the office, was a fun thing. They were quite robust. Some of them also could print 2d barcodes (for archiving or using with scanners which emulated key presses to feed order id's and stuff fast to the erp)

But what you need to consider often is, having a consistent state in those snapshots, this can be a nasty thing for examble with all sorts of databases or configuration as database (boltdb, sqlite,...)

Yeah i can also recommend, i even use it to push incremental backups to ssh (nas is to old to install minio), other servers use s3.

I have it included in timescale image.. so full restore is: spinning up a temporary image, restore, restart compose. So do i with with incremental. File based restore is pretty fast.

For me its a setup and forget thing.

For etc i use gitkeep sometimes (machines who are also configured by devs itself), to have an audit like thing, with a central gitea repo in the project cluster to see changes.

For files i use restic to ssh, also s3 possible. i like the deduplication they do.

And otherwise i use proxmox, doing snapshots on HDDs at night, and at the day i move those sliwly to external nas again, keeping the last few snaps on ssd,hdd to be able to recover fast. and if the machine got dead, i have the external backups.

I also do this the same way on hetzner with my bare metals, storing an encrypted backup (restic deduped and encrypted) to external storage. Server is also proxmox with encrypted disks, so to boot up, you need to send encryption keys via secure ssh.

Also another aproach with configs is, having a clean deployment/infra config (ansible, pyinfra, terraform...), and then only restoring data, so everything is reproducable and consistent.

I think a simple linux box with docker/kvm/proxmox would be quite sufficient to start with. You can just add bridges between VMs / Containers,... advance to SDN, setup your own Firewalls and LoadBalancing VMs... and for watching network traffic you can use wireshark/tcpdump.or whatever, you csn even plug in monitoring or tracing proxies in between. When using LXC containers with proxmox the system should be quite sleek.

I would recommend to stay as open source as you can. (using pfsense, nginx... not commercial firewalls), play around with wireguard,... also use a IaC configuration tool like ansible or pyinfra do configure your stuff from.the beginning (so you can easily reconfigure stuff and make changes in scale)

Have fun!

its actually another cable pair where some are connected and some are not. so i can use one wire for that. Its a telephone cable, so i wont be able to push high amps or current through, but yes, i can connect aome generator on our end and use an antenna, i know where the end terminates but incan not access it (its behind a wall plate with a key). someone already gave the hint with a fluke intellitone, which has the abillity to use the sensor as antenna, but i dont know the detection range (i probably need a.few.meters, but it has not to be milimeter accurate)

i can not open the cable in between, its not ours, i just want to use it on howto find out where and how it is layed

yeah we already had an electrician / telecom technician here with such a device, but they only were working close range (1-3 centimeters) and had too much noise after a few centimeters of distance to the cable. But yeah, thats a good searchterm, i just came up with cable tracer or cable finder. Tone generator is also good.

thaaats true ;), but the problem is, i want to add another cable but im stuck in between and dont know where, and i dont know why, its a few hundred meters of cable, they go into different holes and walls, split and come together..i can not turn off all of them, different flats or offices. I know the electric tracers, but i need to trace a special one without disturbing the others too much. There are also lots of different cables (old telephone with data, fiber, cat with data, power with current, all together). Thats why i had the idea with a modulated signal. Any other thoughts?

this piece is quite old (latest release is sept. 2020), so i assume they sont maintain it anymore. what would be a suitable alternative (which is also configureable via puppet, ansible,...)

i know vyatta, openwrt, opensense, ipfire?