Cool Presentation on capacity planning...

Have you ever wondered how people plan for the capacity of a system?  This presentation tries to explain how to do it.  It is definitely an art, but the tools used here will help you learn how to do it with logic and reason rather than hopeful optimism.  That should help you keep from under or over sizing the systems you build in the future.

Does your company run Redhat and do you have a local Repo?

If you company is running Redhat having your own local package repo is one of the best ways to control your environment.  It allows you to update the Repo on your schedule.  Then when you update your systems they are all updated to the same level. (Assuming you don't upgrade it in between servers.)  Since Redhat updates the repos multiple times a week.  You now can get everything upgraded without introducing new packages in the middle of your cycle.  This article gives you a quick walk through to get one setup.  Then the only thing you need to do is point your systems to use it rather than the main RedHat Repos.  This will also help speed up updates since your LAN speed will most likely exceed your Internet Connection. 

Creating A Redhat Package Repository

Episode 78 - Year in Review

1) Introduction

So what happened this year?

2) News

Windows 8 requiring Secure Boot will hurt linux... Or Not
Linux Fragmentation
Google bought Motorola
Rasphberry Pi
NVDIA Joins the Linux Foundation but their drivers still suck acording to Linus
XWindows is 25
Java give Linux it’s first real malware exploit
We learned that redundancy is hard and even with more than a weeks notice to get your stuff out of the way of a hurricane.

3) Conclusion

Recommendations for People to interview
E-Mail us at podcast@linuxinstall.net
Facebook Fan Page
Follow us on Twitter and Identica as @linuxinstall
Google +
Look for us and comment on iTunes, odeo

linuxinstall.net Episode 76 - Getting the band back together...

Running Time:

1) Introduction

What have we been doing?

Corey is Installing to check out...

What Brian has been working on?

2) News

Sandy takes out Data Centers in NYC...

Why its not a good idea to put your servers in a flood zone.

Mike's Post about his EC2 experience

Mega Upload is coming back.... In case you missed it...

3) Conclusion

Recommendations for People to interview E-Mail us at podcast@linuxinstall.net

Facebook Fan Page

Follow us on Twitter and Identica as @linuxinstall

Google +

Look for us and comment on iTunes, odeo

linuxinstall.net Episode 75 - Who needs Waldo...Where is Joe?

Running Time:

1) Introduction

What have we been doing?

2) News

10 Hidden dangers of the Cloud

Ubuntu is going to try to get you to pay them for their software?

Introducing openSUSE-ARM

3) Conclusion

Recommendations for People to interview

E-Mail us at podcast@linuxinstall.net

Facebook Fan Page

Follow us on Twitter and Identica as @linuxinstall

Google +

Look for us and comment on iTunes, odeo

Episode 74 - We are live check it out...

Running Time: 0:48:00

1) Introduction

What have we been doing?

 

2) News

 

Canonical integrate Amazon suggestions into Unity Dash

http://www.zdnet.com/shuttleworth-defends-ubuntu-linux-integrating-amazon-7000004674/
http://arstechnica.com/business/2012/09/ubuntu-bakes-amazon-search-results-into-os-to-raise-cash/

How to handle a 65Gbps DDOS Attack

Cool podcast from Jupitre Broadcasting about Burnout from a developer and Ops perspective

Crashplan rocks for Small to Mid-size businesses

A series of unfortunate problems cut this one a little short.  You just missed, like Brian did, Joes awesome closing to the show.  Brian recorded a new one.

3) Conclusion

Recommendations for People to interview
E-Mail us at podcast@linuxinstall.net
Facebook Fan Page
Follow us on Twitter and Identica as @linuxinstall
Google +
Look for us and comment on iTunes, odeo



Watch the Video on Youtube....


Listen to the Audio Version...

How CloudFlare dealt with a 65Gbps DDOS Attack...

Abraham Williams on Google+ pointed us to an article over on the CloudFlare blog about how they dealt with a recent 65Gbps attack.  The article titled "How to launch a 65Gbps DDOS attack and how to stop one" gives some high level details about how they deal with such attacks and how someone can get 65 Gbps of bandwidth to even start one.  The article does a great job of explaining one method using Open Unrestricted DNS Resolver.  The basic idea is that since DNS can be done with UDP packets you can easily forge the from address and cause the Open Unrestricted DNS Resolver to reply to the targeted computers or network.  This is exploiting two flaws in the internet.  The first that UDP is a fire and forget protocol which doesn't require any proof of where you are coming from.  The second is that Open Unrestricted DNS Resolver exist or at the least allow UDP requests.  DNS can and should be required to be done over TCP which makes forging the information much harder and less reliable.

They have an article they wrote before this one that talks about and apologizes to their customers for the disruption in the first place.  It's found here and called "Post Mortem: What Yesterday's Network Outage Looked Like" .  It is a shinning example of what a company should do when an event like this happens.  It is very transparent, clear and easy to understand and most of all genuine.  While I know it's great PR it's not something I see a lot of companies like them doing.

 

Let us know if you have ever dealt with something like this in your job?

Do you think they took the proper response?

What do you think of the post mortem?

Update: Changed Open to Unrestricted becuase as pointed out in the comments below it seemed to imply the awesome DNS service by a similar name.  They, to our knowledge, were not part of the problem.

X11 turns 25 today...

The guys over at Phoronix reminded me that X11 turns 25 today.  That's pretty awesome news.  X11 has been the basis for Windowing on Linux since windowing began there.  Many have tried to replace it but so for no one has.  It's modular focus has let it last this long and makes it really hard to supplant.

Let us know what your worst X11 configuration nightmare was?

Episode 73 - Java exploits Linux and Apache ignores IE...

Running Time: 0:59:16.8


1) Introduction

He is back, Greg Martin returns will Corey ever return?

2) News

Apache HTTP Server set to ignore IE10's Do Not Track request
Java 0-Day Exploit Humbla

3) Conclusion

Recommendations for People to interview
E-Mail us at podcast@linuxinstall.net
Facebook Fan Page
Follow us on Twitter and Identica as @linuxinstall
Google +
Look for us and comment on iTunes, odeo

Turnkey Linux turns everything up to 12 on their 4th B-Day...

The guys over at Turnkey Linux have released version 12 of their awesome server appliance core platform.  They also added 60+ new appliances.  If you haven't given them a shot I highly suggest it especially if you are new to Linux.  Heck I am an old time Linux user and love the ability to just download an appliance like the one they that comes setup with the Redmine project management server and Git, Bazaar, Mercurial and Subversion SCM.  Everyone of them is setup and ready for you to use.  Just download the appliance in any of 7 formats from ISO images to OpenVZ VMs and so much in between.  The best feature I have come to love and rely on is their server back and migration tool.  They call it TKLBAM - AKA the TurnKey Linux Backup and Migration system.  It allows you to take any currently existing system and back it up to S3.  Then restore the backup to a new machine leaving you in the same state but on updated software.  All the benefits but none of the pain.  It's an awesome idea and works well.  Watch for a full review and description of my experience coming soon. 

One really import change is their migration away from Ubuntu to Debian.  Check out the article for a very clear description and explanation of why.  The reasons are sound and hopefully the right people are listening.

Most of all though we would like to wish them a Happy 4th B-Day.  Let's hope there are plenty more in their future.

Java Zero Day Attach and it affects Linux...

This comes from our guest host Greg Martin on Google+:

Java 0-day being exploited in the wild. There have been confirmed infections on Windows-based computers but it's possible to compromise a Mac or Linux system as well. Currently the only recommendation for mitigation is to completely disable Java.

Links for thought:

Ars Technica article: http://arstechnica.com/security/2012/08/critical-java-exploit-spreads/

In-depth breakdown of the exploit (technical with mildly poor English): http://immunityproducts.blogspot.com.ar/2012/08/java-0day-analysis-cve-2012-4681.html

Proof-of-concept for the exploit (actual source code): http://pastie.org/pastes/4594319/text

There are also some claims that Oracle have known about the vulnerabilities for some time. https://www.pcworld.com/businesscenter/article/261612/oracle_knew_about_currently_exploited_java_vulnerabilities_for_months_researcher_says.html

I'm currently testing this out on my system (Linux) to see if I can get it to work.