• 0 Posts
  • 13 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle



  • I had this issue when I used kubernetes, sata SSDs cant keep up, not sure what Evo 980 is and what it is rated for but I would suggest shutting down all container IO and do a benchmark using fio.

    my current setup is using proxmox, rusts configured in raid5 on a NAS, jellyfin container.

    all jf container transcoding and cache is dumped on a wd750 nvme, while all media are store on the NAS (max. BW is 150MBps)

    you can monitor the IO using IOstat once you’ve done a benchmark.






  • I’m running a PBS instance (plus networking containers) for 4years now, cc on file for the first 2 years, now on file, but my usecase is operating within the free-forever tier.

    My instance has not been deleted by them, though I’ve rebuilt the multiple times since.

    The region you are on might be struggling with capacity issues, I use middle east region and never encountered account/vm deletions (yet). For my case, latency isnt an issue so i dont mind having it ona far away region.




  • I agree with this, what I suggested is not a best practice, I should preface my post with that.

    And I feel your pain! I get calls that are extremes, like people putting too much security where the ticket is “P1 everything is down, fly every engineer here” for an nACL/SG they created.

    The other extreme is that deliberate exposure of services to the public internet (other service providers send us an email and ask us to do something about it, but not our monkeys, shared responsibility, etc).


  • apigban@lemmy.dbzer0.comtoSelfhosted@lemmy.worldIn over my head
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    1 year ago

    Edit: **this will make your oci instance less secure **and will break integrations with other oci services. Do not use this in production, but ONLY for testing if the host fw rules affect your app.

    I’m currently using oraclecloud for my bots. I work in the space (cloud/systems engg) and the first thing that got me was that the oracle ubuntu instances have custom iptables in place for security.

    I’m not sure if it still has, but last i checked a year ago I had to flush iptables before I was able to use other ports. I didint really want to deal with another layer of security to manage as I was just using the arm servers for my hobby.

    It might be something worth checking, it isn’t specific to lemmy though.

    I found it unintuitive because other major cloud providers do not have any host firewall/security in place (making it easier to manage security using SG/NACL, through the console).