I already talked about nftables and it has now been implemented in the 3.13 kernel ! For those who never heard of that, it’s a kernel built in replacement of iptables. All features are not there yet but should be implemented in 3.15. If you like Packet Filter, you’ll be happy. If you’re not sure of the advantages of it, simply read that short comparison and you’ll be convinced : https://home.

Continue reading

I’ve recently updated some of my tutorials : Optimizing Hard Drive performances : I’ve updated SSD subject Luks : added more information on how auto mount automatically at boot a crypted partition. Xtrabackup : corrected a non working command LXC : modified containers files to avoid boot issues APT-Pinning : Added the command to install a package from a designed repository Sed : forgotten to add -i option which is so important Vagrant : Added an example to the quick tutorial

Continue reading

Varnish is a real powerful cache solution for web servers. He is unfortunately not able to do it over SSL. Anyway, there is a solution by offloading it with Nginx. Here is a schema to get a better understanding : Nginx decrypt SSL, pass it in clear to Varnish. If Varnish got it, replies to Nginx which crypt back data to send to user. I’ve made a full documentation to get it working well, follow the link.

Continue reading

In addition of object storage, Ceph is able to provide block devices. Ceph’s RADOS Block Device (RBD) provides access to block device images that are striped and replicated across the entire storage cluster. For example this is used to store Virtual Machines on OpenStack. With that solution, you’ve got a real fault tolerance system for your VM and distributed. The RBD part is an easy task when you’ve already setup a Ceph cluster.

Continue reading

Be ready once again for FOSDEM 2014 ! I’m so exited to go there once again. Last year I missed some of you. If you want to meet me directly there, do not hesitate to contact me by mail. Thanks and see you there :-)

Continue reading

Following the previous post, on Ceph Storage, I’ve updated my documentation with informations to play with OSD. I’ve covered : Setup OSD Remove OSD Use Ceph Ojects Storage Using the object storage system is not complicated and easily scalable. It’s a real pleasure to work with that kind of solutions. If you’re already working with other objects storage solutions, you won’t be lost.

Continue reading