Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
On consumer internet contracts you won't be able to host your own DNS server which is open to internet, you need to either host that DNS on VPS like azure or AWS or setup VPN or proxy.
ISPs of most countries block incoming DNS traffic on UDP 53 to prevent people being able to mess up global DNS servers and DNS spoofing, outgoing smtp traffic on TCP 25 to prevent spamming and few other ports only hosting companies like google, amazon AWS, Microsoft and Eila Kaisla need, in fact some countries (for example Finland for one) even have laws which obligate ISPs to do that.
Unclear.
Do you mean you want to forward dns queries (port 53) from WAN to a specific machine on LAN , or within your LAN, or something else?
What needs to be flushed to disk will be flushed to disk. And ZFS never does in-place overwrites. So if you write every 5 seconds or 18 times the transaction groups every 90 seconds ...
If @tverweij running virtualised instances is indeed using ZFS that specifically is a bad idea. Due to its copy on write nature you cannot thin provision virtual disks (well you can, but it doesn't make sense) because ZFS will eventually write every single disk block and so blow up the disk to its configured maximum size.
For virtual disks it's much better to use UFS and manage snapshots and backups at the hypervisor host level.
A typical mSATA SSD used for embedded systems like the Transcend m370 series has got a TBW value of 180 for the 64 GB model.
At 120 kB/s write and using multiples of 1000 for calculation this means you can write to this disk for 1500000000 seconds = 416667 hours = 17361 days = 47.5 years before reaching the specified TBW.
Similarly your initial figure of 6 GB per day results in 30000 days or 82 years.
Did you also take a look at some performance improvements for OPNsense? Especially the Spectre and Meltdown mitigations? I've seen some major improvement on some systems when disabling these mitigations.
https://docs.opnsense.org/troubleshooting/hardening.html
Don't know offhand if there's a way to only update to s previous version, but I don't believe there was anything in 23.7.6 that would cause internet loss.
If you're using separate subdomains such as mail.example.com, ftp.example.com and www.example.com you can just run an ACME client on each of those servers for that subdomain specifically.
Do you mean restore the virtual disk that the virtual machine is using? and are you using zfs or ufs as the filesystem?
kup. Sorry but you haven't ruled anything yet in terms of environment.