Open Source Tools in Data Centers 97
An anonymous reader writes "There is a nice presentation on the L.A.S. Linux site entitled "Managing Data Center Functions with Open Source Tools" which was presented at Comdex 2003. It covers everything from IPtables to OpenNMS. As well as covering some less known but nice tools like NeDi, which lets you easily manage Cisco routers and swiches from a web browser."
Re:vservers (Score:1, Funny)
google for it, mighty isp owner
Re:vservers (Score:1, Interesting)
Re:vservers (Score:2, Informative)
http://vserver.strahlungsfrei.de/tiki-index.php
http://www.linux-vserver.org/
http://www.soluco
Re:vservers (Score:3, Informative)
UML has a number of differences when compared to chroot environments.
Re:vservers (Score:5, Interesting)
UML virtuals have the ability to log a bunch of stuff "outside" the virtual. This can include keystroke logging on devices (including the pty's that ssh allocates). Plus you have a 100% sniffable network from the outside and the "owner" of the UML can "give" the virtual to the hacker at almost no cost and watch and learn.
If you are concerned about a hacker launching a DDOS using your virtual, this can happen, but you can also stop or mitigate it without tipping your hand against the hacker. You can firewall the virtual from the host side and silently block all (or most) of the attacking packets. You can even rate-limit the damage that they can do with 'tc'.
The amazing thing about getting a UML hacked is that most hackers don't even realize they are being watched. While
Xen (Score:1)
Re:IPtables (Score:1)
My favorite use of OS (Score:5, Informative)
Re:My favorite use of OS (Score:2)
Simon.
Re:My favorite use of OS (Score:3, Funny)
They must be awfully busy putting paper in the printers! :^P (Yeah, you'd think most people should be smart enough to figure that out, but you'd be wrong.)
It does sound like a cool setup.
Here is Microsoft's competition: (Score:2)
Quote: "Here's the story of how they consolidated print servers from 30 servers running Windows NT Server to only four servers running Windows Server 2003 Enterprise Edition."
Re:Here is Microsoft's competition: (Score:2)
Re:My favorite use of OS (Score:3, Funny)
Remote print servers can take over controll of print queues quickly in the event of a print server failure and queues can be rerouted to a new print device should a physical printer fail all without client reconfiguration!
I can see it now...
Boss: Hey Lloyd! Where's that document I printed twenty minutes ago?
Lloyd: Umm, its not here--ah. the printer was broken and sent off for servicing
Boss: FIND IT!
Lloyd: Well, boss, I found the document--
Boss: Great! Where is it?
Lloyd: Well, that's the thing,
Re:Open Source (Score:1, Insightful)
Would always could but never did. I've seen this type of comment made so many times, but it's rare to see someone actually put money where their mouth is.
Re:Open Source (Score:1, Informative)
It has all your virtual server stuff and even has a web interface to manage everything as well, like the creation of new virtual servers, etc.
I don't see why the Open Source community couldn't pick up on it and update it for the last releases of Linux distributi
Samba is King of the Free Software World (Score:5, Interesting)
Without Samba, Linux et al would be in a much less pretty position.
Perhaps we should call it Samba/GNU/Linux?
Kudos to the Samba Team, Tridge, and all Samba developers/testers/users!
Re:Samba is King of the Free Software World (Score:5, Interesting)
Indeed, I predict that someone will write one should Microsoft succeed in shutting down Samba (via patents or whatever -- you know killing Samba is on their to-do list).
Re:Samba is King of the Free Software World (Score:4, Informative)
Don't kid yourself, NFS can be secure. (Score:2)
Lot more complicated than
Re:Samba is King of the Free Software World (Score:1)
Perhaps the next version of NFS will be better in this regard...
It is. [nfsv4.org]
Re:Samba is King of the Free Software World (Score:1)
Re:Samba is King of the Free Software World (Score:1)
Incidentally, with its first service pack, Windows Server 2003 is supposed to have a "feature" whereby it can check to see of connecting client machines conform to a patch/service pack policy, and deny them access if they don't. What do you suppose will happen when a linux machine tries to connect to one of these servers using smbclient or smbmount?
Re:Samba is King of the Free Software World (Score:1)
SCP is the way for me.
Re:Samba is King of the Free Software World (Score:1)
Missing software (Score:4, Informative)
Re:Missing software (Score:1, Informative)
So with limited time he was only trying to give people unfamiliar with Open Source tools a tasting of what there is to offer. . .
Re:Open source in the data center? (Score:5, Informative)
With all the recent security issues surrounding open source (Debian, anyone), I would think twice about using open source in my data center.
Please get a clue. The Debian compromise was because of a lost password. Every OS/App is equally vulnerabne to this.
When it comes to centralized management of your IT assets, Microsoft products are unbeatable. An excellent reason to be an MS only shop, IMHO.
Now I get it, you're trolling. MS may have some good tools, if you need point-and-drool and don't try to do anything the system or tool was not explicitly designed to do.
In my case, I admin a research lab with 12 workstations and two servers, all running GNU/Linux. I spend no more than 15 minutes per week on routine admin tasks, all of it from home. I can also remotely install any software the researchers need. The only reason I ever need to physically go there is to replenish the office supplies (toner, paper, bsank CDs). That sort of a setup would be difficult, if not impossible, with an MS-only setup.
Ugh... IPTables.... (Score:2, Redundant)
OpenBSD has PF - a really cool packet/nat/authentication/bandwidth limiter/port forwarding system that is really, really, cool
You can do clever things, like allow a certain amount of bandwith for sombody, but if they log in, the bandwith limit disappears.
Or parse the spam blackout litsts and block all incoming packets from them (spam trype networks have more that their fair share of crackers)
All withouht crypic config files.
I *REALLY* hope, for Linux's sake, that after FreeBSD ports PF (to replace thei
JFFNMS (Score:5, Insightful)
It can monitor TCP Ports, Network cards, CPU, Memory, Disks, all using standard SNMP, with no client side scripts.
You can integrate it with your OSS using various RPC methods, everything is stored in MySQL or PostgreSQL.
Its very extensible too...
Javier
It's my own project.
HP OpenView (Score:4, Informative)
Another tool of use is the Cisco Transport Controller...we use this to monitor a fiber network up in MA.
Re:HP OpenView (Score:3, Informative)
I used to work as an SE for Cisco, ran a mid-sized ISP's network, owned a computer store, and have run a couple of corporate networks(not bragging, just qualifying my experience, Cisco SE's are highly techni
Re:HP OpenView (Score:3, Funny)
Even WorldCom (formerly UUNET) doesn't use OV for its hosting datacenters. Too expensive. They use open source tools on linux.
NMIS (Score:2, Informative)
Link Looks awful in Mozilla (Score:1, Offtopic)
Did anybody else find that?
(Was Ok with IE, but rather ironic finding a site on open source tools displays correctly only for a closed source browser.
Re:Link Looks awful in Mozilla (Score:1, Funny)
Re:Link Looks awful in Mozilla (Score:2)
OpenNMS v. Nagios (Score:1)
Re:OpenNMS v. Nagios (Score:3, Informative)
We started using Nagios just over a year ago as something quick and simple while we were building our infrastructure (was still beta in those days). It does the job if you have a small site, but does not scale well. We've just switched over to OpenNMS. It does take a lot more effort to configure and get up and running (especially as we're not running it on Linux), but it's worth it for the additional flexibility and features you get. It helps if you have someone who understands Java for the imp
OpenNMS (Score:1)
Re:OpenNMS (Score:2)
Open Source Network Administration (Score:2, Interesting)
Just my $.02 on the subject.
more scanning tools (Score:1)
amavis - http://amavis.org/
qmail-scanner - http://qmail-scanner.sourceforge.net/
dspam - http://www.nuclearelephant.com/projects/dspam/
MRTG? Upgrade to Cricket (Score:1, Interesting)
Which is a much evolved performance trending system. For those looking to trend data from routers, switches, firewalls, servers, sensors, files. Cricket offers a very flexible configuration method. It is all in perl, so very easy to support, extend and integrate. It includes a grapher, a collector and a configuration system.
It does what it does well.
The system also offers easy integration with event management systems open-source or not. It scales well
backup utilities (Score:1)