Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- * xX0M3GAXx (~xX0M3GAXx@2600:1009:b155:6775:0:24:71e7:a101) has joined
- * xX0M3GAXxph has quit (Ping timeout: 240 seconds)
- * linuxthefish has quit (Excess Flood)
- * linuxthefish (~ltf@unaffiliated/edmundf) has joined
- * NorthAntrim has quit (Ping timeout: 245 seconds)
- * zune has quit (Ping timeout: 245 seconds)
- * zune (~zune_free@93-161-225-188-dynamic.dk.customer.tdc.net) has joined
- * NorthAntrim (~NorthAntr@unaffiliated/northantrim) has joined
- * pelox has quit (Remote host closed the connection)
- * dominic1134 has quit (Quit: This computer has gone to sleep)
- * Simson-san has quit (Quit: Bye!)
- * Keetonic (~keetonic@46.166.188.200) has joined
- * xX0M3GAXx has quit (Ping timeout: 240 seconds)
- * Keetonic has quit (Ping timeout: 245 seconds)
- * vquicksilver has quit (Ping timeout: 265 seconds)
- * HeavyMetal has quit (Quit: BNC Services Provided by The ASoTnet IRC Network.)
- * HeavyMetal (~HeavyMeta@heavymetal-freenode.users.bnc.aseriesoftubez.com) has joined
- * HeavyMetal has quit (Changing host)
- * HeavyMetal (~HeavyMeta@unaffiliated/heavymetal) has joined
- * sputnik0_m (~sputnik_m@m193-217-4-44.cust.tele2.nl) has joined
- * D-Boy has quit (Excess Flood)
- * D-Boy (~D-Boy@unaffiliated/cain) has joined
- * sputnik0_m has quit (Quit: good bye)
- * linuxmint2 (~linuxmint@CPE-58-174-140-13.mjcz1.woo.bigpond.net.au) has joined
- * linuxmint2 has quit (Client Quit)
- * linuxmint2 (~linuxmint@CPE-58-174-140-13.mjcz1.woo.bigpond.net.au) has joined
- * telex has quit (Remote host closed the connection)
- * telex (teletype@freeshell.de) has joined
- * Te3-BloodyIron (~Te3-Blood@S010600900b121d95.cg.shawcable.net) has joined
- * peetaur has quit (Quit: Konversation terminated!)
- * Liam` has quit (Ping timeout: 244 seconds)
- * Liam` (liam@liam.sh) has joined
- <Te3-BloodyIron> I have some questions about dynamic memory usage in proxmox for VMs
- <Te3-BloodyIron> when I set a VM memory range, say minimum 2048, maximum 4096
- <Te3-BloodyIron> when does the VM free up the memory to come back to 2048? (if it had previously moved up to 4096)
- <Te3-BloodyIron> so far my testing shows it doesn't, but don't know if I'm just not waiting long enough
- * pelox (~rail@gusl/staff/risturiz) has joined
- <hanshenrik> when uploading a ISO file to a disk, i got the message: 0 errors occured while uploading to disk
- <hanshenrik> but.. the file isn't there, so obviously SOME error occured
- * rogue_koder has quit (Read error: Connection reset by peer)
- * peetaur (~peter@ip25058822.dynamic.kabel-deutschland.de) has joined
- * [TK]D-Fender has quit (Quit: Leaving)
- * Haxxa has quit (Remote host closed the connection)
- * Flotho66 (~florent@2001:41d0:fe17:9f00:8ea9:82ff:feb4:447e) has joined
- * Flotho66 has quit (Ping timeout: 246 seconds)
- * Haxxa (~Harrison@CPE-124-189-140-77.cyzn1.lon.bigpond.net.au) has joined
- * telex has quit (Remote host closed the connection)
- * telex (teletype@freeshell.de) has joined
- * zapotah has quit (Remote host closed the connection)
- * zapotah (~zapotah@unaffiliated/zapotah) has joined
- * Simson-san (~Simson-sa@abh-simon.abh.uni-karlsruhe.de) has joined
- * sysadmin92 has quit (Quit: The early bird may get the worm, but the second mouse gets the cheese)
- * cuqa_ has quit (Ping timeout: 260 seconds)
- * Flotho66 (~florent@245-10-190-109.dsl.ovh.fr) has joined
- * vquicksilver (~nobody@gentoo/contributor/vquicksilver) has joined
- * vquicksilver has quit (Quit: WeeChat 0.4.3)
- * [TK]D-Fender (~joe@64.235.216.2) has joined
- * MindAndGo (~florent@2001:41d0:fe17:9f00:8ea9:82ff:feb4:447e) has joined
- * Flotho66 has quit (Ping timeout: 246 seconds)
- <Shadow__X> Te3-BloodyIron: afaik it doesn't actually release the memory
- <Shadow__X> hanshenrik: manually find the file, then track down in your settings where you have proxmox pointing your isos
- * hanshenrik has quit (Quit: Leaving)
- * donhw has quit (Ping timeout: 265 seconds)
- * MindAndGo has quit (Ping timeout: 244 seconds)
- * UmbraMalison has quit (Ping timeout: 250 seconds)
- * linuxmint2 has quit (Remote host closed the connection)
- * portalBlock|away is now known as portalBlock
- * UmbraMalison (~andy@host81-159-38-12.range81-159.btcentralplus.com) has joined
- * Jb_boin has quit (Read error: Connection reset by peer)
- * Jb_boin (~dedior@proxad.eu) has joined
- * sysadmin92 (~IceChat77@2.125.96.238) has joined
- * MinetestForFun (~Quentin@dmt69-1-88-180-172-161.fbx.proxad.net) has joined
- * telex has quit (Remote host closed the connection)
- * telex (teletype@freeshell.de) has joined
- * peetaur has quit (Quit: Konversation terminated!)
- * dominic1134 (~dominic11@unaffiliated/dominic1134) has joined
- * dominic1134 has quit (Quit: This computer has gone to sleep)
- * dominic1134 (~dominic11@unaffiliated/dominic1134) has joined
- * D-Boy has quit (Excess Flood)
- <[TK]D-Fender> Planning for a new CPU/MB/RAM combo to upgrade a system I'll be inheriting. I've been looking at AMD FX 8-core. This is going to be for a single ProxMox home server that'll also offer up file shares (hardware RAID, and non-virtualized Samba off the host)
- <[TK]D-Fender> And input from those having used the AMD FX's?
- <sysadmin92> from looking at reviews i would say buy intel...
- <sysadmin92> those AMD CPUs are hot and power hungry
- <[TK]D-Fender> Was considering cores for a few small VM's. I'm not sure what the overcommit load might be like as any Intel I'd use would only be 4-core
- * D-Boy (~D-Boy@unaffiliated/cain) has joined
- <sysadmin92> those 8 core AMDs are benched against i5 CPUs, iirc they didnt touch the i7s
- <sysadmin92> what VMs are you planning to run?
- <[TK]D-Fender> Really small stuff
- <[TK]D-Fender> 2-3 tesdt PBX's, web server (supoer low use), etc
- <sysadmin92> C2000 series Atom might work OK? only 10-14 watts
- <[TK]D-Fender> Not worried about power consumption...
- <sysadmin92> that C2750 is 8 core
- <[TK]D-Fender> that ranks as half of a FX-8320
- <[TK]D-Fender> at best
- <sysadmin92> what intel would you be buying if you did go for intel?
- <[TK]D-Fender> I might swap my desktop i5-3570k to it
- <sysadmin92> i5 are nice
- <sysadmin92> C2750 also has ECC Ram, and 4 NICs usually. probably cheaper as well...
- <[TK]D-Fender> that's just a chip\Yo seem to be implying a MB combo you didn't actually name here....
- <sysadmin92> the C2750 comes soldered onto boards
- <chris[]> i run a pair of 8 core xeons on my proxmox node, ran proxmox in the past off an 8 core 6212 opteron, run a stand alone server on an atom c2758, and my desktop is an fx-8350 which runs a few virtualbox vm's for testing. all are extremely capable vm hosts.
- <sysadmin92> supermicro do nice ones, asrock has one with lots of sata
- <[TK]D-Fender> Yeah, I saw the AsrockRack one
- <[TK]D-Fender> quite pricy though
- <[TK]D-Fender> Was thinking about that one for a FreeNAS setup
- <sysadmin92> for FreeNAS only the intel SATA work properly iirc
- <[TK]D-Fender> that's what I believe I saw.
- <[TK]D-Fender> but for my home server I'm thinking the Atom will be a bit weak
- <sysadmin92> i would go i5 then :) pity they are limited to 32GB RAM
- <sysadmin92> lga2011v3 doesnt have that limitation, not too much more expensive
- <[TK]D-Fender> Way beyond my spec needs regardless.
- <[TK]D-Fender> this is just for home.
- <chris[]> [TK]D-Fender: the 2758 is actually pretty impressive. obviously its not in the same league as a xeon/i7/i5, and its not marketed as such, but its no slouch.
- <[TK]D-Fender> http://www.cpubenchmark.net/cpu.php?cpu=Intel+Atom+C2750+%40+2.40GHz
- <[TK]D-Fender> http://www.cpubenchmark.net/cpu.php?cpu=Intel+Core+i5-3570K+%40+3.40GHz
- <[TK]D-Fender> Comparing to the old i5 I have NOW.. it is a slouch... and pricy...
- <[TK]D-Fender> Remember I don't need lots of RAM, or SATA.
- <chris[]> i dont need passmark to tell me things i see first hand. :)
- <sysadmin92> my home hypervisor is 1037u... does what i need :)
- <[TK]D-Fender> I've got a SATA raid setup in the box Id' be upgrading
- <chris[]> lg1: ~> cat /proc/cpuinfo | grep name | tail -1
- <chris[]> model name : Intel(R) Atom(TM) CPU C2758 @ 2.40GHz
- <chris[]> running cent 7, with a cent 6 lxc on this box running variety of services, it handles it all without a problem. one of those duties being samba file serving which you mentioned.
- <[TK]D-Fender> yup, it CAN do the job, but it is techincally weaker, and a good bit more expensive....
- <chris[]> again, im not telling you which to go for. just offering a suggestion based on first hand experience with all the platforms you mentioned. they're all capable and you're going to have to weigh your own needs and budget, but discounting any of them based on passmark (or any "benchmarks") is the wrong way to go about it.
- <chris[]> thats all im saying. :)
- <[TK]D-Fender> Which is kinda a lose/lose for me...
- <[TK]D-Fender> if I cared abot size & power then sure, it's an awesome little board...
- <chris[]> right, i agree with that. that c2758 system i installed was around $700 when all was said and done.
- <chris[]> you could hop on ebay and grab a nice dell r610 with a couple xeons and 32gb+ ram for that price
- <[TK]D-Fender> butI'm slapping this in an E-ATX FULL TOWER with an 8-port RAID card and drives
- <[TK]D-Fender> Remeber the context here. i'm upgrading a server im INHERITING
- <[TK]D-Fender> Really nice case. Nice card, nice drivers
- <[TK]D-Fender> drives
- <[TK]D-Fender> just want to swap out the MB/CPU/RAM
- <chris[]> if you're doing that then the 8350 should be fine. again, not on par with an i7, but i have no complaints with mine and the price makes it extremely attractive for a node thats 'good enough'. especially for home use.
- <[TK]D-Fender> the server has a supermicro with i7-950 in it already. RAM is harder to find as it's a picky board though.
- <[TK]D-Fender> I was thinking it better to invest in a new set and spin off the included bits I wouldn't want out of it
- <[TK]D-Fender> Otherwise I'm sure it would be enough if I up the ram forom the 6GB it has now.
- * tgunr has quit (Quit: My Mac has gone to sleep. ZZZzzz…)
- * portalBlock is now known as portalBlock|away
- * tgunr (~davec@cpe-76-172-41-171.hawaii.res.rr.com) has joined
- * Pryan|2 (~kvirc@213.254.107.114.dyn.user.ono.com) has joined
- * Pryan has quit (Ping timeout: 246 seconds)
- * dominic1134 has quit (Quit: Verlassend)
- * MinetestForFun has quit (Quit: Leaving / Je m'en vais)
- * dominic1134 (~dominic11@unaffiliated/dominic1134) has joined
- * RedRat__ has quit (Read error: Connection reset by peer)
- * RedRat__ (~Dev@201.80.17.85) has joined
- * rogue_koder (~quassel@207.204.117.126) has joined
- * iNs is now known as iNs_
- * iNs_ is now known as iNs
- * rogue_koder has quit (Remote host closed the connection)
- * rogue_koder (~quassel@207.204.117.126) has joined
- * dominic1134 has quit (Quit: Verlassend)
- * Pryan (~kvirc@213.254.107.114.dyn.user.ono.com) has joined
- * Pryan|2 has quit (Ping timeout: 256 seconds)
- * RaNa has quit (Quit: I'm Out)
- * tgunr has quit (Ping timeout: 240 seconds)
- * pawz (pawz@i.love.everything.moe) has joined
- * pawz (pawz@i.love.everything.moe) has left ("Palaver http://palaverapp.com/")
- * RaNa (~RaNa@107-146-207-26.res.bhn.net) has joined
- * Loaded log from Sun Aug 9 23:03:07 2015
- * Now talking on ##proxmox
- * Topic for ##proxmox is: Unofficial Proxmox VE Support Channel | Wiki: http://pve.proxmox.com | Video tutorials: http://youtube.com/ProxmoxVE | Google+ Community http://goo.gl/14p2W | Latest version is 3.4
- * Topic for ##proxmox set by stevenm (Mon Feb 23 05:01:10 2015)
- -ChanServ- [##proxmox] Welcome to ##proxmox! Please read the channel topic. If your IRC client is configured to autojoin #proxmox please update this to ##proxmox as the automatic divert won't stay forever.
- <ghoulmann> hi folks. I'm having problems with NAT, 3.4, and load balancing.
- <ghoulmann> anyone have time to help?
- * dominic1134 (~dominic11@unaffiliated/dominic1134) has joined
- <ghoulmann> (load balancing apache servers)
- <asyd> more easy to help when we have a question :)
- <ghoulmann> indeed. sorry.
- * Straa has quit (Ping timeout: 240 seconds)
- <ghoulmann> I'd like: 2 nat'd deb8 apache servers, 1 load balancer with nat and bridge
- <ghoulmann> i can't get the nat'd machines to see the network if I set a manual ip
- <ghoulmann> i'll send pastes
- <ghoulmann> proxmox host: http://pastebin.com/jxPvagpP
- <ghoulmann> not working: http://pastebin.com/PFrpKYSU
- <ghoulmann> ^guest, apache, deb8
- <ghoulmann> vm not container
- <asyd> i don't understand what are you tring to do. on the proxmox itself, ip must be on vmbr0 if you want to use a bridge
- <ghoulmann> they all work if they have the same ip, 10.0.2.15...but not with each other...
- <ghoulmann> OK, that helps.
- <ghoulmann> let me check again.
- <ghoulmann> wait, isn't this a bridge: http://pastebin.com/jxPvagpP on the host?
- <asyd> it is yes.
- <ghoulmann> i tried it with this config, at https://pve.proxmox.com/wiki/Network_Model#Masquerading_.28NAT.29, but saw no difference.
- <asyd> i really don't understand what you want. The proxmox itself is running, right?
- <asyd> s 6
- <jwd> yes that one works.
- <ghoulmann> let me explain: guest: apache, guest2, apache identical, guest 3 loadbalancer (test scenario only).
- <asyd> but how network is configured?
- <ghoulmann> all on one pve host.
- <jwd> how you plan to reach the webports on multiple nated machines without forwarding ?
- <ghoulmann> 192.168.1.0/24 is my physical lan
- <ghoulmann> 10.0.2.0/24 is where I want nat'd machines to be able to communicate
- <jwd> give them all a bridged ip first
- <ghoulmann> jwd, all, even the web hosts?
- <ghoulmann> jwd, i thought just the load balancer
- <jwd> i guess you use haproxy?
- <ghoulmann> jwd, trying, yes
- <jwd> the most easy setup. have all on the same network.
- <ghoulmann> by I have several options
- <jwd> client -> haproxy and then gets redirected to the real ip of a server
- <ghoulmann> OK, well, here's the difficulty. the purpose of this is to teach NAT and Bridged on the same network
- <jwd> in that setup all (haproxy port and webserver ports) must be reachable by client
- <ghoulmann> jwd, I see.
- <jwd> you try to do rather complicated things right away
- <ghoulmann> Is there some other legitimate use case with bridged and nat guests?
- <jwd> nat hides the existance of the internal network
- <ghoulmann> jwd, yes, that's what I explain.
- <jwd> but you have a small issue in this use case
- <ghoulmann> jwd, saw I thought this was effective demonstration. Yes, what is it?
- <jwd> all internal servers will hide behind 1 ip only
- <jwd> and you can only have the port bind to that external visible ip.
- <jwd> to reach the internal servers you need to masquerade that
- <ghoulmann> jwd, here's what I imagined: haproxy is visible, and then the web servers are accessible by haproxy only. clients access haproxy?
- <ghoulmann> I think I get it.
- <ghoulmann> the problem i mean.
- <jwd> haproxy as store and forward proxy. i never used that.
- <jwd> way to complicated and will not help if ist about balancing for speed
- <ghoulmann> i can use mod proxy-balance if it'll work the scenario i need
- <jwd> if you wana go for such a setup do this with more than 1 network configured.
- <ghoulmann> jwd, physical network?
- <ghoulmann> or on the proxmox host?
- <jwd> or internal bridges
- <jwd> a bridge can be just seen as a switch where you plug in your nodes network interfaces
- <ghoulmann> ok so a switch on each guest (bridge) interface?
- <jwd> a switch on proxmox. and the gues network interfaces get connected to the bridges
- <ghoulmann> so then, no NAT
- <jwd> vmbr0 for example for your outside network and vmbr1 for your internal
- <ghoulmann> as I understand
- <ghoulmann> OK that I get
- <jwd> for your use case i would use 3 external ips without nat.
- <ghoulmann> OK, then i run into a problem. How do illustrate authentic use for NAT? I understand it, but it seems then best suited to desktop virt app and not proxmox virtual servers
- * tgunr (~davec@cpe-76-172-41-171.hawaii.res.rr.com) has joined
- <jwd> its just to understand the use case?
- <ghoulmann> i'm writing an intro book on Proxmox for packt, and am having legit problem coming up with a justification for nat config for networking chapter
- <jwd> outgoing nat is a pratical use for nat
- <ghoulmann> so yes, it's all theoretical, but it has to be for a "real" use case.
- <jwd> hide alot of nodes behind a nat address
- <jwd> all can reach the outside but none is reachable directly
- <ghoulmann> for virtual workstations perhaps?
- <jwd> or servers
- <ghoulmann> jwd, or servers is what I'm after. What kind of scenario would I want servers hiding behind a single address? I thought load balancer, but apparently not
- <jwd> imagine you want to do software updates on servers without exposing them to the outside (oki in practice this would be done with proxies) but it would also work
- <jwd> an internal monitoring server that wants to monitor outside systems without exposing its existance
- <ghoulmann> OK monitoring is good.
- <ghoulmann> so then I have to forward port to see the interface?
- <ghoulmann> assuming wui
- <jwd> another example. a firewall with multiple internal dmz segments and 1 public visible network
- <jwd> yes to reach the server from the outside you could do a forwarding
- <ghoulmann> jwd, ok let me get that set up and see how it does for me. Firewall config I can discuss but will be to complicated for this audience, or possibly too complicated.
- * tjz has quit ()
- <ghoulmann> jwd, separate question: I see nothing in docs about NAT and containers. I've found some other sources. But is it just a case of manual configuration, or is it bad practice?
- <jwd> there are so many common/uncommon setups. its hard to say what is good/bad practice.
- <jwd> all depends alot on the situation
- <jwd> for example. i have lxc-containers with private addresses in a proxmox 4.0 beta system, this runs inside a vmware client box on a laptop with bonded wlan/ethernet interfaces :P
- <ghoulmann> i see.
- <jwd> all single parts are common setups but the total solution is to? :-)
- <ghoulmann> so with 3.4 nat with openvz container shouldn't be impossible at all, it just seems contrary to the management interface.
- <ghoulmann> does that jibe with your experience?
- <jwd> i never used 3.4 but it should work
- <ghoulmann> OK, thank you jwd.
- <jwd> np
- <ghoulmann> I've been on 4.0 but it was just released. Still traces of openvz were in it, didn't look like lxc was ready (example, the Turnkey templates were still there)
- <ghoulmann> thanks again.
- <jwd> i just use plain lxc debian templates and work on those.
- * MindAndGo (~florent@AMontpellier-653-1-341-176.w81-251.abo.wanadoo.fr) has joined
- * Flotho66 has quit (Ping timeout: 246 seconds)
- <jwd> all i need to find a way is to create my own or modify the existing
- <ghoulmann> gotcha. I'll update you on what I come up with
- <jwd> so if anyone here on this channel got any notes on that i would be thankfull :-)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement