kernel: sonewconn: pcb 0xc8d5b000: Listen queue overflow: 193 already in queue awaiting acceptance
Looks like I got DOS’d: I base that conclusion on the above messages and this post.
FreeBSD
Script for listing the latest ZFS snapshot – starting place for Bacula backups
This post has it all: backups deduplication snapshots ZFS Bacula ezjail Backups are essential for proper sanity, or at least, a reasonable facsimile. I strongly believe that doing backups right is the only way to backup. Go big or go home. I’ve been converting all my servers to ZFS. I like ZFS for many reasons, and I’m going to list two: data integrity snapshots In this case, instead of backing up the entire
Script for listing the latest ZFS snapshot – starting place for Bacula backups Read More »
FreeBSD jails on non-routable IP addresses
One of my goals with the server I’m setting up is putting non-public services into jails with non-routable IP addresses. Today, I’ve been working on getting PostgreSQL into a jail. The problem I have been grappling with is not putting PostgreSQL into a jail but routing. It took me a while to figure out where I was going wrong. Turns out, it was my NAT rules and, perhaps, my IP address strategy. The
FreeBSD jails on non-routable IP addresses Read More »
Accessing FreeBSD Jails over OpenVPN
With this new server, I am taking a new approach. Each jail will have at least three IP addresses: The public IP4 address, used by internet facing services (e.g. http or https) The public IPv6 address, similar to the above A VPN address, used for system administration and private services (e.g. nrpe) In this article, I will assume you are familiar with ezjail, FreeBSD jails, basic networking, OpenVPN, and ZFS. That is, this
Accessing FreeBSD Jails over OpenVPN Read More »
Bootstrapping a new FreeBSD jail host as an Ansible node
A few days I configured a new server to be an Ansible node. This will allow my Ansible configuration tool to configure and install software. Installing Ansible and getting it running is not covered by the post. All I show here is how I got a remote server ready to be configured by Ansible. The server in question was running FreeBSD 9.2 with ZFSRoot. Preparing the client for configuration by Ansible Key to
Bootstrapping a new FreeBSD jail host as an Ansible node Read More »
zuul
This is zuul, the server I’ve been setting up to be a new jail host. I like to store away this type of documentation, in case I need it later. The partitions: The ZFS file systems: The ada0 drive details: And ada1 drive details: And finally, dmesg:
Ansible versus Salt
Over the past few weeks, I worked with two different configuration tools: Salt and Ansible. I started working with Salt. I quickly created a setup for a Salt server and for a Salt minion. The modules I saw looked great. However, I had consistently had trouble converting from the documentation to a practical usage. The examples provided always seemed to be CLI. Taking that and converting it to a SLS file caused me
Ansible versus Salt Read More »
Routing with jails
Tonight I asked a question in the OpenVPN IRC channel on FreeNode. me: I’m getting ready to set up a new server, running an OpenVPN client. It will be running several virtual machines (FreeBSD Jails). Each VM will have both a public IP address and a non-routable IP address. I’m hoping to access all those VMs from within the VPN. Am I making sense with my objective here? reply: “clientlan” is (#1) for
Routing with jails Read More »
Exciting project ahead
I have an exciting project ahead of me. I will soon be configuring a new server. It will be ZFSROOT running a pair of mirrored 500GB disks. I plan to use a configuration tool for management of this server. The final choice of tools is yet to be decided. The services provided by this server will be primarily based on jails. The use of a configuration tool will simplify future redeployments. I’m doing
Exciting project ahead Read More »
Bootstrapping / installing pkg on FreeBSD unattended and without answering Yes
Sometimes you want to do things alone. Or rather, without intervention. Unattended. Bootstrapping the pkgng package management tool is one of those things. From the pkgng documentation, “FreeBSD 9.1 and later includes a bootstrap utility which can be used to download and install pkgng, along with its manual pages”. Let me show you how that goes: # pkg The package management tool is not yet installed on your system. Do you want to
Bootstrapping / installing pkg on FreeBSD unattended and without answering Yes Read More »