similar to: tinc to create VPN between cluster nodes (at different datacenters) for High Availability

On Tue, May 09, 2017 at 06:24:55PM -0500, John Griessen wrote: > I've not really dug into testing tinc yet, but if you all will humor me in an uneducated blast of questions, > I'd appreciate it. > > What can you do to keep tinc going if your high availability comes from cluster nodes being dispensable? > Can tinc run on the cluster nodes? > That seems like chicken/egg

I'd like to hear from anyone using coreos to run a container with tinc for purpose of connecting containers. Sounds almost like a chicken/egg problem:-) I'm thinking of running a container with alpine linux and tinc installed there. John Griessen

I've read man ssh and man ssh-keygen and some howtos and still am not getting what I expect. I can do ssh john at 192.168.15.3 and login with a password OK. I want to be able to do that with keys in preparation for running rsync with keys, so I created a key on router1, the machine I want to ssh from. routem at router1:~/.ssh$ lla total 20 drwx------ 2 routem routem 4096 2009-03-08 09:55 .

Hello all, I am looking to run only 1 VM on this setup, don''t need to do live migration, although that would be nice, I just want to protect against hardware and datacenter/network failure. The VM is lightly loaded, not much disk I/O or CPU load. I have two machines, each one with 2 x SATA 250GB, and 1 SSD 128GB. (There is a simple RAID-1 SATA hardware controller on board). I am

Hi Everyone, Does anyone know of any ATAs that can do proxy failover without using SRV. I don't want to rely on dns if at all possible. Basically, I have Asterisk boxes in two different data centers and I need ATAs to be able to uses the server at DC2 if DC1 goes down. The servers are already in a HA setup at each datacenter. I am looking for added protection if one of the datacenters

If reducing the MTU is helping, you might look into turning on Path MTU Discovery. NFS can be fast for large transfers if you tune it. http://stromberg.dnsalias.org/~strombrg/nfs-test.html NFS is not terribly secure though - at least v2 and v3 weren't. Not sure about v4. On Wed, Mar 28, 2018 at 12:59 AM, Marc Roos via rsync <rsync at lists.samba.org> wrote: > > Kevin, Dan,

I still stuck with these errors packet_write_wait: Connection to 192.168.10.43 port 22: Broken pipe rsync: connection unexpectedly closed (534132435 bytes received so far) [receiver] rsync error: error in rsync protocol data stream (code 12) at io.c(605) [receiver=3.0.9] rsync: connection unexpectedly closed (27198 bytes received so far) [generator] rsync error: unexplained error (code 255) at

Note that if you do this you are stuck with --whole-file On 03/25/2018 04:36 PM, Dan Stromberg via rsync wrote: > You could try using an automounter, like autofs, in combination with > sshfs. It'll be slower, possibly a lot slower, but it should be more > reliable over an unreliable connection. > > I've been using: > remote

Hmmm, looks indeed like changing the mtu helps, strange thing is that with the bigger mtu sometimes I had no problems and often TB are copied without problems. Problem is I can't test the connection that much because the connection has been established by a third party and it is just some vlan without any hops. But thanks for the link to the nfs-test that looks interesting!

So I'm not running it on each individual container. Instead I'm running with a guarantee of at least one tinc container on each coreos host and then connect to other containers(currently have about 20 hosts running across the world with this setup) I find on the whole setup to work well, I'm not noticing any unusual overhead, but there is a lot of extra provisioning work I'm doing

Gerald Galster via dovecot schrieb: > mail1.yourdomain.com <http://mail1.yourdomain.com> IN A 192.168.10.1 > mail2.yourdomain.com <http://mail2.yourdomain.com>?IN A 192.168.20.1 > > mail.yourdomain.com <http://mail.yourdomain.com> ?IN A 192.168.10.1 > mail.yourdomain.com <http://mail.yourdomain.com> ?IN A 192.168.20.1 > > > mail1/mail2 is for

Hello Guus, is there a .deb somewhere for tinc 1.1 and ubuntu 15.10 available / instruction on howto build .deb files for ubuntu ? Then I could put something together with python or the shell, inotify of the tinc graph file and tinc info. Thanks+ BR Max. > On Fri, Jan 22, 2016 at 02:12:20PM +0100, Maximilian H. wrote: > >> I am using tinc's feature to dump a graph of the

Hello, I am using tinc's feature to dump a graph of the vpn extensively to view the machines which are currently part of the vpn. In my tinc.conf I have this: GraphDumpFile = /tmp/tinc-graph Then I have a desktop starter that executes /usr/bin/xdot /tmp/tinc-graph to open the graph. I would love to have the ip addresses of the vpn ips of the tinc nodes in that graph, e.g. if one tinc node

You could try using an automounter, like autofs, in combination with sshfs. It'll be slower, possibly a lot slower, but it should be more reliable over an unreliable connection. I've been using: remote -fstype=fuse,allow_other,nodev,noatime,reconnect,ServerAliveInterval=15,ServerAliveCountMax=40,uid=0,gid=0,ro,nodev,noatime :sshfs\#root at remote.host.com\:/ BTW, I'm not sure

I think RR DNS is the only viable solution under these circumstances. If you can cope with the fact that failovers won't be seamless, I don't think there's anything wrong with that though. On 07/21/2015 11:54 AM, Laz C. Peterson wrote: > The consensus seems to say no to RR DNS ? I am going to take that into serious consideration. > > With this proxy setup you describe, what

> Am 11.04.2019 um 13:45 schrieb Patrick Westenberg via dovecot <dovecot at dovecot.org>: > > Gerald Galster via dovecot schrieb: > >> mail1.yourdomain.com <http://mail1.yourdomain.com> IN A 192.168.10.1 >> mail2.yourdomain.com <http://mail2.yourdomain.com> IN A 192.168.20.1 >> >> mail.yourdomain.com <http://mail.yourdomain.com> IN A

On Tue, 21 Jul 2015 12:00:39 -0700 James Lott <james at lottspot.com> wrote: > I think RR DNS is the only viable solution under these circumstances. > If you can cope with the fact that failovers won't be seamless, I > don't think there's anything wrong with that though. > > On 07/21/2015 11:54 AM, Laz C. Peterson wrote: > > The consensus seems to say no to

The consensus seems to say no to RR DNS ? I am going to take that into serious consideration. With this proxy setup you describe, what would happen if HAProxy or Dovecot Proxy were to fail? I think there is no problem with many moving parts, as long as there is a backup plan in case something goes awry. My goal is slightly different, as I want to have HA available across datacenters without

On Wed, 2018-03-14 at 09:47 +0100, Guus Sliepen wrote: > On Tue, Mar 13, 2018 at 11:09:05PM +0200, ST wrote: > > > > > 1. What open-source VPN software would you recommend for such a case? We > > > > are considering [Tinc](https://www.tinc-vpn.org) as it seems to be > > > > rather flexible and provides an easy way to add new nodes thus helping > >

Hello, We have not so tech-savvy colleagues in different locations around the world who now use Windows 10 and need access to Linux (Debian 9). Linux will be provided in form of VirtualBox VMs. We, the technical support team, need to have access to the guest VMs (via SSH and occasionally as remote desktop) and to the host (through the guest while VM runs in bridged mode; via Windows 10 built in