@dashrender what if I just need a log of the visited websites? No content filter is needed, just logging. What can the USG do?

@gjacobse "beta program" is not what I could use in production…

@gjacobse can it do also Radius? I see that a Radius server is needed for guest wifi.
Can it also log any internet site visited by the users?

Addendum: can ubiquiti provides a captive portal and detailed log of any http request?

What about Aerohive?

Hi everybody, I have to deploy a wireless network that will span over 300 users for a house rental.
The customer want to implement an access control system that will provide any user unique credentials and that will log not only the access but also the traffic for legal reason (https proxy in here).

I'm searching for an all-in-one solution, easy to learn and deploy. Any advice is welcome!

12 clients? In this case, a VDI doesn't make any sense. For less than 10k$ you can setup a hell of office workstations, with far better performance (especially for latency) and reliability.

@scottalanmiller so… RDP with TLS enabled is also comparable to a VPN?

@scottalanmiller
Why a whitebox? Why don't just take an optiplex, new or used?

Why use similar protection for a disponsable machine? Fire an EC2 linux instance with minimum requirement (free tier is your friend), take a snapshot of its clear status with all your needed configuration, download everything you want… fetch the files from the machine, revert the machine to the golden master state and power it off for money saving.

@dashrender said in RDP to Azure AD joined machine:

you might have to disable NLM to get your RDP client to work.

Is it a server-side setting?

@alyragab said in CoreOS vs CentOS for Containers Deployments:

Hi All
Need to ask who worked with CoreOS and CentOS , is there any difference between building docker containers in CentOS and CoreOS , and what is the experience you got from using CoreOS ?.
based on a lot of aspects like " Security , Updates , Stability " and so on

Thanks

Are you talking about regular centos or centos atomic? The atomic one is the equivalent of coreos.

@scottalanmiller said in RDP to Azure AD joined machine:

From another Windows 10 machine?

No, from iOS/OSX/Linux. I don't use Windows in my personal machines.

As the title said, does anyone knows how to RDP to an AD joined Win 10 machine? I've tried any shape of username I was able to find online, but but luck.

I'm goind to replace an AD Domain with AAD an this is the lastest piece of the puzzle…

@fateknollogee said in Should backup and virtualization infrastructure be decoupled?:

I like the idea!
What are you proposing, can you give a little more detail?

Use bacula/borgbackup/veeam endpoint or just plain remote rsnpshot, plus database-specific tools… and, of course, take a full backup if the VM once in a while for quick disaster recovery, but without all of the fancy incremental-dedupe stuff.

I think the IT sector is going beyond the enthusiasm wave about vm-based backup, it's not a novelty anymore, in any sense.

I was a veeam-on-vmware fan and I still use it, but I have some thought to share with the community… do we really need this kind o backups for modern workloads?

• VM-based backup comes from a world of deeply stateful, snowflakes machine. The world is moving towards stateless software with even more clear separation between data and applications.
• In my experience, full-VM block-based backups takes longer to run (think about and ERP where only the DB change), are more resource intensive and takes more space.
• Every VM-based system is tied to the specific virtualization platform, so migrate between different environment becomes harder VS agent-based backup system where restore on another platform is trivial.
• VM-based software tends to be more costly and complex than the agent-based counterpart.
• Backups are usually stored in proprietary formats that cannot be read easily; many non-VM backup software just compress the extracted data into common format.

I'm trying to rebuild one of my customer backup infrastructure without leverage any VM-based backup suite, implementing both regular full snapshot export of the VM (golden master templates used to rebuild the VM) and tradition backup methods.

Also, I've the feeling that VM-based backups are more geared towards legacy workloads that cannot adopt a modern design like those of the modern cloud-based, microserver or serverless application, so I think I'll start to use more and more devops-style or virtual-agnostic backup tools just to remain in touch with the latest trends in industry.

What do you think about it?

@Jimmy_K said in How to select right router for 100 users or more?:

Dear Friends, 
I am looking for router which can load up to 100 Users (IP Phone) with 50 to 60 concurrent calls. Is there any suggestion? I have found this product, however, I haven't heard much about this product

https://help.ubnt.com/hc/en-us/articles/219652227--EdgeRouter-Which-EdgeRouter-Should-I-Use-

How do I know that 100 users using how many packet per second?

100 user are not a big number, any of those should be ok.
The average user don't require more than ~1mbit of sustained traffic, on average. Much less, usually.

@matteo-nunziati said in When to use VMWare over free hypervisors?:

@scottalanmiller said in When to use VMWare over free hypervisors?:

@matteo-nunziati said in When to use VMWare over free hypervisors?:

@scottalanmiller said in When to use VMWare over free hypervisors?:

@matteo-nunziati said in When to use VMWare over free hypervisors?:

@DustinB3403 said in When to use VMWare over free hypervisors?:

The cost of the solution isn't expensive if your business requires those features.

example?

Fault Tolerance with vendor support for it. Technically not limited to Vmware, but essentially limited to it. I believe Suse with Xen is the only other vendor who offers OEM vendor support for that.

Agree 100%. It is one of the cheapest supported solutions. Issue is if you can afford it! Usually not here.
Of course exceptions can be around. But are exceptions imho in the small business.

Not sure it is the cheapest. Compare to Red Hat, I bet RH is cheaper. I've not compared, I'm just guessing.

Not really. If you want live migration and other stuff you have yo go rhve or how the hell they name ovirt.

Plain KVM has done live migration from the very beginning…

@matteo-nunziati said in open source hypervisors: do we really have them? do we really need them?:

@scottalanmiller said in open source hypervisors: do we really have them? do we really need them?:

@matteo-nunziati said in open source hypervisors: do we really have them? do we really need them?:

Our "previous" system, the one we are going to phase out this winter, has been operated by an external supplier which used Xen + XO for this purpose -> quick readiness (less costs for the customer).

It is works, why replace it?
HV. Technically speacking I would had gone XenServer + XO from a tech perspective. Hyper-V has been the choice for other reasons.

OK Xen base is good.

KVM is ok at management level but backups are terrible. Xen could be better but most of the way incrementals are done is via XAPI, ASAP. Actually "bare metal" (maybe virtual metal?) restores would make it more viable as solution.

Why do you care that much about the hypervisor backup capability? In my experience, agent backup permits cross-environment restore and is at least as fast and often more space efficient than the hypervisor-based backup.

It don't depends on the underlying hypervisor and often is offered for free… Linux has relax-and-recover for baremetal restore and a lot of tools for standard backups, namely rsnapshot, urbackup, the glorious bacula, attic, obnam, borg, pcbackup etc. I know there are also many tools for windows, maybe not oss but free like veeam.

Sometimes I used and hybrid approach that has proven to be very effective: backup the whole VM with a dumb system like whole machine export once a month, and backup just the data.
This way I can restore the full-blown machine that usually change very little apart of the data, and push the fresh data after the restore.

I found this strategy very resource and space effective, and it can be executed with open source or at least free tools in any environment that I'm aware of.

@matteo-nunziati here is a Xen wiki link about the Xen toolstack that you can use to manage Xen.

@matteo-nunziati Xen can be fully used without XAPI, that are also an OSS project.
XenServer is the Xen package with XAPI, but any enterprise distro provide Xen WITHOUTH XAPI, namely SuSe and Ubuntu. You can use it effectively with libvirt or the xl toolstack.

At the moment I don't see any risk associated with Xen being dropped by anyone, because it's the widely used hypervisor in the world. Almost any public cloud use that. Just the fact that AWS is built on Xen it's a guarantee that it cannot became abandonware in any way. Amazon alone could support the entire Xen development with 0.1% the revenues from the AWS cloud. They have all the interest in maintain Xen healthy.