dmj

Take those wasabi comparison figures with a pinch of salt, they seem to be comparing multi-region hot storage prices from AWS/Azure/GCP. For backup you would typically want archive/cold storage without the multi-region options. We're already backing up to GCP buckets, but looking to more the backup to AWS for DR because we're hosting in GCP. It kind of makes sense to back up to a provider that doesn't host the infrastructure. We restore a 950GB database from nothing to up and running in about 20min on GCP. (including building the database server itself)

It's the security layer your paying for with these services, not the DNS, and running multiple public facing DNS servers isn't trivial for most school sysadmins.

Just a headup tp be aware that Cloudflare do have a rather sketchy history when it comes to them facilitating far right content associated with supporting mass shootings, terrorism neo-nazi groups etc. They have pretty 'liberal' views on access to this type of material. I can't critisise their technology, which is awesome, just be aware that that there could be backlash for paying cloudflare when it comes to schools and there are other providers around offering similar services.

I've been hearing some *really* good things about TP-Link Jetstream series of enterprise switches, the price vs features looks quite compelling.

Or route it via a third party such as cloudflare

This thread got me thinking about building my own system, and this hackaday looks almost exactly the thing https://savjee.be/2019/07/Home-Energy-Monitor-ESP32-CT-Sensor-Emonlib/ Looks like it would be really extensible.

Consider that the clip on sensors measure the electrical field induced by the wire, so if you have a positive and negative together in a single cable they will cancel each other out. Your fuse boxes may already have individual positive/negative cables exposed but you need to check, and you might be required to get an electrician to install it in any case.

Do we get a holiday/day of mourning ?

Wow that's much less than I was expecting, but if they're not being used it all adds up.

Wifi AP's would be a good addition. I bet those things cost a few quid to run. An Ansible script would be the way to do this on cron IMO. Software defined Networking

One of my projects right now is to do exactly that, to scale down certain server clusters to zero at night and weekends. Customer facing servers automatically shut down when the load is low already, but they always have something to take a load and scale up as necessary, we've just never tried scaling to zero before!

Set the DHCP as static if you need, but configs for everything should be centrally managed, esp network equipment like cctv.

Confirmed, the Android/Chrome is working for me too.

Think of if it as nostalgia, like in 2005 when we had to use a different browser for every website.

the problem is back again

All working again on my android, perhaps it was a cloudflare blip

I would approach this by decoupling the storage and the servers: using Ceph setup a CRUSH map so that older system is a failure domain of the first then have the 'servers' run as pods in a kubernetes cluster serving the SMB. The only slightly tricky thing about this setup is that you'll probably want to use the new gateway api instead of an ingress controller to serve the smb. We had a similar setup at my previous job serving 25,000 users at a university - it was based on ZFS but with the smb servers as vm's. The general principal is the same though.

Seeing this on Android/Chrome but not with Chrome on Desktop. edit: The desktop (working) is Version 104.0.5112.79 (Official Build) (arm64) - macos

Absolutely love it. I'm not even a 'mac person' but bought an M1 air with the educator discount in early 2021. The battery life is insane and it's faster than my £2000 work Lenovo carbon X1. My only 'gotcha' was it doesn't support multiple external monitors, but I think that might be fixed with M2. All the major software I need works natively now, although there was a lot that needed the rosetta emulation early on. Some of the work stuff I need to do is build x86 docker images as our servers are all x86 still, and docker building multiarch images is still a bit sketchy but I generally use my work machine for that.

Google vault should cover those things against deletion.

Unless you want the traffic to be bi-directional (which you will in this case), it's not as simple as you're making out unless you already own the target ISP.

Even with 100% cloud services there will be situations where you'll need to run a service that doesn't need public access, or want to run another service through a different cloud provider to keep costs down, provide redundancy etc. VPN is still a good option, infact I'd go as far as to say its great option now that wireguard has got such mainstream support now.

We're fully cloud bases (not in a school anymore) and still need to VPN into servers.... The problem doesn't disappear because you are using someone elses computers.

All the good tech is free if you have time to implement it yourself

Not on there way out, just evolving. It's all VPN meshes for the future. https://www.zerotier.com/ https://tailscale.com/