-
jhertzHi, I have a SmartOS box that I want to connect to (the global zone) remotely using SSH username and password. But I am worried about SSH brute force attacks. Are there any default protection for this, and if not is there any protection that I can turn on in the global zone?
-
otisuse ipfilter to limit the hosts from which you can connect to the GZ.
-
jhertzotis: Thanks I will look into it
-
TheTim0Nat0rHi there folks! Got IPv6 up and running in SmartOS by writing a JSON config and inserting it into vmadm, but does Triton SDC provide functionality to provision vm's and containers with IPv6 addrconf through the API's?
-
danmcd@TheTim0Nat0r --> not yet.
-
TheTim0Nat0rdanmcd: Thanks for your answer. Is there some work in progress to implement it, has it been put on the roadmap or is there some kind of workaround?
-
danmcdIt's a nontrivial item AIUI, but it's on a roadmap. github.com/TritonDataCenter/rfd/blob/master/rfd/0011/README.md
-
Smithx10danmcd: any word about that nvme device?
-
danmcdAll I see was that it timed out, and that it faulted in the command-timed-out handler. My recommendation is to remove and replace it.
-
danmcdI know rm is busy right now with $DAYJOB, but he did mention he'd seen a case of reset fail/time-out. Unsure if he's had cycles to dig through his archives about it, however.
-
Smithx10yea, I'll get them to toss the spare in and keep it on the shelf just in case
-
danmcdSorry I couldn't give you more on this. OTOH it's nice to see your pool layout, FMA, and ZFS all working nicely to not screw you over. :)
-
Smithx10yea for sure
-
Smithx10Hot spares are useful, Glad most of our stuff is raidz2
-
Smithx10unless we need to change the layout for some perf, but nvme is just soo fast that its usually not the case
-
danmcdI don't use more than 4 drives in any one deployment I have. HDC has mirrored LARGE drives, and in Kebecloud CNs with 4 HDDs I've opted for mirrored-pair + mirrored-pair. It is slightly less survivable than a raidz2 group of 4 disks, but there (esp. with no slog) the perf win is nice.
-
danmcd(HDC has a mirrored PAIR of large drives.)
-
Smithx10so 4 wide raidz or mirror pairs
-
danmcdYeah... I opted for mirrored pairs on the Kebecloud CNs with 4 HDDs.
-
danmcd70mins strap-cached 0-SmartOS, or 2hr5mins 0-strap-SmartOS. Not gonna complain.