Society of Sysadmins

Topics for 7/27 (Nenad)

We awarded the contract for an HA cluster on hetzner bare-metal servers -- may we go over technical specs on https://pravka.bskol.com/ru/%D0%94%D0%B5%D0%BB%D0%BE%D0%B2%D0%B0_%D0%A4%D0%B5%D1%80%D0%BC%D0%B0 and get your critique? In addition, we consider substituting the third server with a higher-space-harddisk one in order to use that third server in other projects and experiments.
Nenad: Great, we can go through the specs, great that everything is documented.

We will need to set up a HA cluster on distributed VPS (they are on Contabo, one is in Germany, two are in the US), if it is possible, using HAProxy? Is this where we need SDN -- software defined networks that one suggested? or VPN? Back to networks, are you familiar with Microtik? Do we need it? Where should we start?
Nenad: Yes, i use mikrotik routers and switches, you don;t need it for this ,only usually for remote locations. You can use SDN or VPN which is simpler.

We plan to create VMs for our users automatically according some VM images. How would you recommend implementing that task?
Nenad: In proxmox there is an API for automating, and usually you can use ansible and terraform, but i don't have enough experience with terraform, only basic.

We tried to implement WSO2 IS for our identity service management, but got stuck -- are you familiar with that piece of software? If so, we use LDAP now -- may we keep LDAP while using WSO2 IS?
Nenad: i've worked with some WSO2, but i don't think for your use case. LDAP or AD in Zentyal,whatever you're comfortable with.

We will use Cloudflare for our Wordpress applications. However, we would like to consider our own implementation of CDN and Geocast for our cluster built on VPS distributed to different regions -- do you have any recommendations?
Nenad: No, usually cloudflare if i'm not mistaken.

We stopped using our instance of Jitsi video conferencing after having some troubles -- what would you recommend?
Nenad: Jitsi is open source, usually zoom for paying customers. I don't know why is jitsi working so bad. Maybe WebRTC ?