LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 08-19-2015, 09:35 AM   #46
Slax-Dude
Member
 
Registered: Mar 2006
Location: Valadares, V.N.Gaia, Portugal
Distribution: Slackware
Posts: 528

Rep: Reputation: 272Reputation: 272Reputation: 272

Quote:
Originally Posted by Red Squirrel View Post
I have a single point of failure right now too anyway, so it would not change much.
Actually, you have 2 single points of failure at the moment: the nfs server and the esxi host (and I'm not counting the single switch you have connecting them).
You should "future-proof" your system as best you can.
It is better to have several lower end servers in a cluster than a single "enterprise" server.
 
Old 08-19-2015, 11:01 AM   #47
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,912

Rep: Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513
Quote:
Originally Posted by Slax-Dude View Post
Actually, you have 2 single points of failure at the moment: the nfs server and the esxi host (and I'm not counting the single switch you have connecting them).
You should "future-proof" your system as best you can.
It is better to have several lower end servers in a cluster than a single "enterprise" server.
It also depends on the server. Most enterprise servers have dual power supplies, dual network connections...
 
Old 08-19-2015, 12:26 PM   #48
Red Squirrel
Senior Member
 
Registered: Dec 2003
Distribution: Mint 20.1 on workstation, Debian 11 on servers
Posts: 1,336

Original Poster
Rep: Reputation: 54
I just thought of something, if I go the pxe route it means it's being done in software and not hardware (whether it's virtual or physical). This means the OS will see the nic that goes to the SAN. This is a HUGE security risk especially for VMs that are considered untrusted (ex: internet facing stuff, testing spyware/viruses etc). How would I mitigate that? NFS is not any more secure but right now it's only the VM hosts and VMs on main vlan that see it, not each VM.

And yeah my file server has redundant PSU. I have not gotten around to setting up network teaming yet but it's something I want to do. I could go all crazy and make everything redundant switch and all but I have to consider the best balance of cost, power usage and uptime as well as complexity. For a home setup I'll probably go as far as having multiple VM hosts and 1 file server.

I'm even contemplating just sticking with 1 VM host and 1 file server and not even worrying about finding a way to share the iSCSI. I probably wont be adding another VM host any time soon anyway and when I do I doubt I'll be able to match the hardware of my existing one as stuff changes all the time. So not like I'd be able to do live or even cold migrations or anything like that.
 
Old 08-20-2015, 04:14 AM   #49
Slax-Dude
Member
 
Registered: Mar 2006
Location: Valadares, V.N.Gaia, Portugal
Distribution: Slackware
Posts: 528

Rep: Reputation: 272Reputation: 272Reputation: 272
Quote:
Originally Posted by jpollard View Post
It also depends on the server. Most enterprise servers have dual power supplies, dual network connections...
It does indeed, but an OS failure on that server will leave you dead in the water, no matter how many PSUs or NICs it has.
Also, it has only one motherboard.
Sure: it has a much lower probability of going down than commodity servers... but if it does, so will your whole system.

I have a client that, despite our recommendation, went with a single enterprise grade server (my company counseled 2 of them).
Although the server had 2 PSUs, they were connected to a single UPS...
Can you guess what happened one stormy night over the weekend?
If your answer was "the UPS fried" you won a cookie

Quote:
Originally Posted by Red Squirrel View Post
I just thought of something, if I go the pxe route it means it's being done in software and not hardware (whether it's virtual or physical). This means the OS will see the nic that goes to the SAN. This is a HUGE security risk especially for VMs that are considered untrusted (ex: internet facing stuff, testing spyware/viruses etc).
That is a good point.
Yet one more reason to not expose the iscsi targets to the VMs.
I was only considering performance.
As I told you before, the network will always be your bottleneck, so I'd avoid using things like iscsi and nfs as much as possible on the VMs themselves (you kinda have to use it on the hosts if you want HA and migrations).

Quote:
Originally Posted by Red Squirrel View Post
For a home setup I'll probably go as far as having multiple VM hosts and 1 file server.
For a home test lab, you can have 2 hosts (don't do the file server / SAN) for about 250/300€. That is the price of a decent smartphone nowadays...
Sure, it will be commodity hardware that will run 2 or 3 VMs maximum per host... but still, it will be quite enough for testing things out before you deploy the system on production servers.
 
Old 08-20-2015, 05:51 AM   #50
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,912

Rep: Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513
The advantage of exposing iscsi and NFS to the VM is that when the VM moves (and you don't get the confusing problems like the OP had)... so moves the IP address used for both, in the same operation.

With only the host have access, then the IP addresses don't move. AND you get the additional overhead imposed by the host.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How do I get DBPedia References to stop crashing immediately after I start it? verynoobish Slackware 4 05-23-2011 10:34 PM
Whole system very slow and keeps crashing justinp526 Linux - Newbie 21 08-23-2010 06:39 AM
kde too slow or crashing when I have internet brasuca Linux - Networking 0 10-06-2005 04:20 PM
DISCUSSION: Howto stop your laptop from crashing when power source is changed. bufo333 LinuxAnswers Discussion 1 07-24-2004 03:11 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:15 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration