Category: RackSpace

Scalr 4.5 Install Notes For Cento 6.4

February 1, 2014

Last year we published an article on installing the open-source version of Scalr: http://blogs.reliablepenguin.com/2013/08/29/scalr-install-notes Now there’s a new 4.5 release of Scalr available so it’s time for an update. We’re installing on Cento 6.4 hosted on a RackSpace Performance 1 Cloud Server. The installation instructions have improved since the last time around but Scalr is till a complex install: https://scalr-wiki.atlassian.net/wiki/display/docs/Installing+Scalr+4.5 Follow these instructions one section at a time and make sure you’ve got the section complete and working before moving to the next section. We’ve provided notes below about each section. Before you start, select a hostname for the server and add a DNS A record. For this article we’ll use:

scalr.domain.com

1	scalr.domain.com

You’ll have problems later on if you don’t get the hostname setup in advance. Also I like to add some swap to the server:

dd if=/dev/zero of=/1GB.swap bs=1M count=1024
mkswap /1GB.swap
swapon /1GB.swap
echo "/1GB.swap  none  swap  sw 0  0" >>/etc/fstab

dd if=/dev/zero of=/1GB.swap bs=1M count=1024

mkswap /1GB.swap

swapon /1GB.swap

echo "/1GB.swap none swap sw 0 0" >>/etc/fstab

Create UNIX Users and Group for Scalr I setup a script at /root/env.sh

Vyatta VPN User Management

January 12, 2014

Here are the basic commands needed for managing VPN users on the Brocade Vyatta vRouter available in RackSpace Cloud. Add New User

config
set vpn l2tp remote-access authentication local-users \
username [USERNAME] password [PASSWORD]
commit
save
exit

config

set vpn l2tp remote-access authentication local-users \

username [USERNAME] password [PASSWORD]

commit

save

exit

Remove A User

config
delete vpn pptp remote-access authentication local-users username [USERNAME]
commit
save
exit

config

delete vpn pptp remote-access authentication local-users username [USERNAME]

commit

save

exit

Change User Password Same as adding a new user.

config
set vpn l2tp remote-access authentication local-users \
username [USERNAME] password [PASSWORD]
commit
save
exit

config

set vpn l2tp remote-access authentication local-users \

username [USERNAME] password [PASSWORD]

commit

save

exit

Error 850 When Connecting to Vyatta VPN With Windows 8

January 12, 2014

While setting up a Windows 8 workstation to connect to a Brocade Vyatta firewall on RackSpace Cloud, I got the following error: Error 850: The Extensible Authentication Protocol type required for authentication of the remote access connection is not installed on your computer. Turns out the fix is pretty simple – on the Connections Properties -> Security tab we need to explicitly set the authentication protocols as shown in this image: Credit goes to Brendan at SysadminSpot for providing this solution: Error Connecting to VPN – Error 850: The Extensible Authentication Protocol type required for authentication…

Scale Out For SharkTank

December 7, 2013

Recently one of our clients was featured on SharkTank, the critically-acclaimed business-themed show, featuring the Sharks and their continuing the search to invest in the best businesses and products that America has to offer. Fohawx is a line of cool accessories that can easily attach to any kind of safety helmet – instantly transforming annoying headgear into a fashion statement. The appearance on SharkTank was a great opportunity for Fohawx to showcase their product. Based on past experience we know that their web site could get 5000 or more simultaneous users. The small RackSpace Cloud Server on which they were hosted would be vaporized by this traffic. Due to the proprietary nature of their application server (ColdFusion) we could not add additional web servers. So a couple of days before the event we outlined measures to temporarily scale out their hosting capacity: 1. Re-sized the web server to 16GB of RAM. We

Configure Vyatta To Allow Incoming MySQL Connections

November 14, 2013

This article demonstrates how to configure a Vyatta firewall to allow incoming requests from a group of clients to an internal MySQL server. Assuming that you have three external MySQL clients with IPv4 addresses: [A:y.y.y.y] [B:y.y.y.y] [C:y.y.y.y] We’ll put these addresses in a group called [clientgroup]. You can name the group appropriately for your installation. The external address of the firewall is [x.x.x.x] and the internal address of the MySQL server is [z.z.z.z].

# enter config mode
config

# create address group
set firewall group address-group [clientgroup] address [A:y.y.y.y]
set firewall group address-group [clientgroup] address [B:y.y.y.y]
set firewall group address-group [clientgroup] address [C:y.y.y.y]

# select "untrusted" firewall - this it firewall rule set that controls
# traffic passing through the device
edit firewall name untrusted

# allow the mysql traffic from the source address group
set rule 505 action accept
set rule 505 destination port '3306'
set rule 505 protocol 'tcp'
set rule 505 source group address-group [clientgroup]

# add nat rules
set nat destination rule 15 inbound-interface eth0
set nat destination rule 15 destination address [x.x.x.x]
set nat destination rule 15 destination port mysql
set nat destination rule 15 protocol tcp
set nat destination rule 15 translation address [z.z.z.z]

# enter config mode

config

# create address group

set firewall group address-group [clientgroup] address [A:y.y.y.y]

set firewall group address-group [clientgroup] address [B:y.y.y.y]

set firewall group address-group [clientgroup] address [C:y.y.y.y]

# select "untrusted" firewall - this it firewall rule set that controls

# traffic passing through the device

edit firewall name untrusted

# allow the mysql traffic from the source address group

set rule 505 action accept

set rule 505 destination port '3306'

set rule 505 protocol 'tcp'

set rule 505 source group address-group [clientgroup]

# add nat rules

set nat destination rule 15 inbound-interface eth0

set nat destination rule 15 destination address [x.x.x.x]

set nat destination rule 15 destination port mysql

set nat destination rule 15 protocol tcp

set nat destination rule 15 translation address [z.z.z.z]

Reliable Penguin provides managed web hosting, systems administration, website and server migrations, and expert consulting.

Recent Updates

Fixing WP‑CLI “eval()’d code” Parse Errors on PHP 8.4 During “wp db import”

Force a 404 With a CloudFront Function (Always)

HTTP Basic Auth Is Dead

WordPress 6.8 Speculative Loading Can Break HTTP Basic Auth

Zero‑Trust for WordPress Admin with Cloudflare Access (Email One‑Time Codes)

Category: RackSpace

Scalr 4.5 Install Notes For Cento 6.4

Vyatta VPN User Management

Error 850 When Connecting to Vyatta VPN With Windows 8

Scale Out For SharkTank

Configure Vyatta To Allow Incoming MySQL Connections

Recent Updates

Categories

Get a free consultation from Reliable Penguin