tech.sweetnam.eu

Over at Tiernan’s blog he asks “what’s your setup?” I’ve decided to take him up on his question and although being unemployed for the past two years means my setup is nowhere near as powerful as his, nonetheless it’s not pretty bad either so here we go:

Primary Webserver:
Sun Blade 2000, 2 x 900Mhz UltraSPARC IIIi, 146GB disk space, 2GB RAM running Solaris 10

Second Webserver:
PentiumD 2.8 Ghz, 120GB disk space, 2GB RAM running Ubuntu 8.04.3

Third Webserver:
Pentium IV 3.0Ghz, 80GB disk space, 2GB RAM running Windows Server 2008

Fourth Webserver:
Xeon 2.4Ghz, 76GB disk space, 512MB RAM running Windows Server 2003

Primary Workstation:
PentiumD 2.8 Ghz, 768GB disk space, 3GB RAM, 512MB nVidia QuadroFX4400 running XP

Primary Fileserver:
Pentium IV 2.66Ghz, 500GB disk space, 1GB RAM running Windows Server 2008

E-mail/Groupware server:
Xeon 3.0Ghz, 146GB disk space, 1GB RAM running Ubuntu 6.04LTS and Zimbra

E-mail Gateway:
Celeron 2ghz, 40GB disk space, 1GB RAM running CentOS 5.0. Physical server converted from virtual appliance.

Reverse Proxy Server:
Pentium III 700Mhz, 40GB disk space, 512MB RAM running OpenBSD 4.5 and Squid 2.7

Outgoing Proxy server:
Sun Netra T1-120, 500Mhz UltraSPARC II, 36GB disk space, 2GB RAM running Solaris 10 and Squid 2.7

Primary Laptop:
Apple MacBook, 2.16Ghz Core2 Duo, 120GB disk space, 2GB RAM running OS X 10.5

Secondary Laptop:
Toshiba, 1.2Ghz Celeron, 40GB disk space, 384MB RAM running Ubuntu 9.10 for WiFi testing.

I have a few more odds and ends that are only occasionally in use. I have two more Sun Netra T1s, An HP 9000, L2000 (rp5420) and a couple of Pentium IIIs that are occasionally used for testing.

At the moment I would kill for a Core i7 setup but sadly funds are low at the moment and will be for the foreseeable future unfortunately!

Way back towards the end of August I inherited some fairly half decent equipment. Among them were two Symantec  5420 Security Appliances. I took them despite not knowing what it was that I was going to do with them. After a while I simply forgot about them until I decided yesterday to do something.

As the licenses had expired they weren’t much use as a security appliance so first things first was to take the cover off and have a gander inside. As I suspected an €8,000 from Symantec would of course be made from the cheapest parts available. The motherboard was from a company I had never heard of in all my years called iWill. Any references on the web point to them no longer existing. The CPU is a 2Ghz Celeron and it had 512MB RAM and a 40GB Maxtor hard disk. Connectivity wise there are 6 10/100Mbit Intel ethernet ports, two USB and one RS-232 ports. Inside on a riser board is a PCI slot however fitting a normal PCI card such as a display adapter s out of the question as the IDE cable would block even the shortest ones and besides, VGA cards are not supported! In the second IDE slot is a 16MB SSD.

So what was I going to do to get a new OS up and running on it? I came across a forum post from a guy who managed to get pfsense (FreeBSD) installed on it but unfortunately his instructions were a bit lacking. Out of curiosity I hooked a console cable up to the RS-232 port and opened a terminal where I was quite pleased to be greeted by a login prompt. I logged in using the username admin with the password I got from the LED panel on the front and lo and behold I was in a root shell. I guessed that Symantec’s software probably ran on one of the BSD’s or Linux from experience with Nokia Checkpoint which ran NetBSD I think.

Anyway I guessed correctly, the 5420 was running RedHat Linux 7.1. From the console I was able to garner a bit more about the hardware. In addition to the basic stuff I mentioned earlier there is a Broadcom Cryptographic Accelerator CPU on board. But back to my immediate problem. How to get another OS on it. After pondering for a few moments I decided to try and see if taking the disk out and sticking it into a spare PC and setting it up from there would work. I dusted off my trusty Optiplex Gx1 circa 1999 and proceeded to install Ubuntu 9.10 on the disk.

Before I stuck the disk back in the 5420 I made sure that I could access a shell via console cable. Thankfully there is some excellent documentation on the Ubuntu help site and in no time I was able to access the Dell via console cable and have access to the Grub boot menu on boot up as well.

Back into the 5420 did the disk go, console cable hooked up, terminal open and time to power up. To my absolute delight there was the Grub boot menu. I hit enter and up it loaded. Perfect! Except for one thing. I had no network access. Half way through diagnosing this the whole thing just froze on me so I rebooted. Not long after rebooting it froze again. It was then I remembered that the guy who installed pfsense on his one mentioned problems with ACPI.

Unfortunately as it would freeze up so quickly I was unable to fix it from a terminal so I had no other choice but to take the disk out and shove it back into the Dell again. Ubuntu 9.10 has a lot of things moved about and the new version of Grub had me a bit confused for a while but finally I got ACPI disabled and everything is working perfectly.

Being headless they aren’t much good for anything other than possibly their original intention as a security appliance. However I decided to set up one of them as a dedicated monitoring server running ntop and Munin. For that it is absolutely perfect!

I was out in Lidl a few months back and picked up a pair of powerline ethernet adapters for €40. Our house is a couple of hundred years old and has walls that are around half a metre thick. This means that my wireless access point is inaccessible in some parts of the house so I figured that the powerline adapters would be perfect to setup an access point at the other end of the house. My cunning plan worked much better than I hoped for.

A quick bandwith test with my laptop connected directly to the adapter gave transfer rates of 40Mbit when copying an iso image from one of my file servers. I hooked up the access point and all was well. Latency is quite good too and the transfer rates have been consistent. All told I was pleased.

However as I now have so much equipment crammed into such a small room here at home, things have been getting a little toasty and with the addition of a Dell Poweredge 1750 humming along with my Poweredge 2800 things have been getting exceptionally noisy as well. There is only one course of action and that is to move them out of my computer room to somewhere else. Unfortunately there is nowhere else in the house to put them as the noise is very hard to escape from.

The only option I could think of is a garage that we own which is about 250m from our house. It is nice and dry, secure and more importantly cool so it would be pretty safe to install a rack in there. Unfortunately it is too far to run an ethernet cable too and I don’t  have line of sight to set up a wireless connection. But the garage is connected to our domestic electricity supply so I figured I would do a quick test to see if my cheap powerline ethernet connectors would work up there.

Armed with my laptop and one of the adapters I headed off to the garage and plugged in. Almost instantly the adapter found its partner back at home and my laptop picked up its IP address and lo and behold I was now connected to my LAN.

Browsing the net seemed very snappy indeed but if I was going to install a rack there I needed to find out if I would have enough bandwidth there to make it worth my while. So I downloaded the same iso image that I used for my first test and was mildly surprised with the results. The transfer rate as I thought it would had dropped significantly but it is a solid 12Mbit which is quite usable indeed.

My plan is to move my web and mail servers up there and keep my file servers back in my home office. All I need now is a rack!

It’s been absolutely ages since I last wrote here and I had been meaning to do so for some time. Since my last entry I have been tinkering away with my setup as I do on a regular basis and plenty of things have changed here on the back end. I suppose I will begin with my my connection and move up the chain from there.

First up is a new router. I picked up a nice Cisco 837 for a very reasonable price. I had a bit of fiddling to get it up and running with eircom broadband but I got there in the end and I have documented the procedure over on my wiki.

Next up is my reverse proxy. It is still running on the same hardware but I decided to move from Linux over to OpenBSD. My primary reason for this is that I was getting sick and tired of Linux iptables. In addition I concluded that Squids performance wasn’t optimal either. A move to OpenBSD seems to have resolved both those issues for me. PF on BSD is very configurable and easy to understand as well. Needless to say I have documented my experiences with PF over on my wiki also.

I’ve also gotten my hands on some new hardware. Well new hardware to me that is. I picked up three Sun Netra T1 servers, a Dell PowerEdge 1750 and two Symantec 5420 Firewall appliances.

So far I have been busy setting up the three Netras. They don’t have CD-ROM drives or display adapters so I had to install them over the network which was a process that was actually relatively simple. However it was only simple in that I already have a couple of other Sun machines here one of which I was able to use as an install server. Of course I have this process documented on my wiki also.

I haven’t decided what I will use the Netras for yet. One of them seems to have CPU problems and has been cannabilised to increase the specs. of the other two. They have 500Mhz UltraSparc IIe CPUs so by todays standards are not at all that powerful but they do draw very little power, certainly less than a Pentium IV machine so I may set them up as file servers. Initially I was hoping to install OpenBSD on one of them to use as my reverse proxy but unfortunately an OpenBSD network install does not seem to be as straight forward as Solaris.

The Poweredge 1750 I had hoped to set up as a webserver running either IIS or Apache. Unfortunately it only has 512MB of RAM so until I get some more for it that rules out Server 2008. However it is incredibly loud and that rules out keeping it running in my computer room. I am currently planning on setting up a dedicated computer room as it were in another part of the house so check back here for update on that.

Came across this video from a link on the Inquirer. Some Samsung marketing types have made a rather humourous video showing how fast 24 SSD’s would be in a RAID array. Well the answer is that it can shunt data at 2GB/s. Yep, 2 gigabytes a second!! Anyway the video itself is pretty funny.

I have a disk that is about to fail on my Active Directory domain controller. The system event viewer is rapidly being filled with bad block errors and it does indeed look like that I will have to replace the offending disk. That is no major problem, however I only have one domain controller so I’ve just finished configuring another Windows 2003 server here as a secondary controller for when I take the other one off line. As soon as replication is complete I will promote it to become the primary and take the other off-line.

There are a few annoyances though. My PDC is also my DNS server and primary file and print server too. It is configured with two disks, one 160GB and the other 40GB. It is the 40GB disk that is on its way out and that is also the system disk. Luckily it only has one share which I’m currently moving the data off of as I type. The DNS is going to throw me slightly I think so it looks like I might have to replicate that over as well. Ah well, rarely a dull moment.

Update – Using Norton Ghost, I have successfully cloned the dying disk to a new 160GB one. Only took an hour

In it’s original incarnation this site was runnning on a virtual Windows 2000 server. However since the hardware it was hosted on has been nothing but unreliable, I have moved it over to a Windows 2003 Server. Reliability should be much improved and hopefully I will manage to update this on a more regular basis.

I’m still playing around with themes too so it may take a while to settle on one that I like