Преглед изворни кода

Merge branch 'master' of github.com:HON95/wiki

Håvard O. Nordstrand пре 5 година
родитељ
комит
02f393fd18

+ 25 - 19
config/linux-server/applications.md

@@ -90,31 +90,34 @@ export TMPDIR=/var/lib/docker-compose-tmp
 1. Prepare it for removal: `isdct start -intelssd <target> -standby`
 1. Reconnect the drives or restart the system.
 
-## ISC DHCP Server and radvd
-
-**FIXME**
+## ISC DHCP Server
 
 ### Notes
 
-- DHCPv4 uses raw sockets, so it bypasses the firewall (i.e. no firewall rules are needed). DHCPv6, however, does not. This includes the respective clients as well.
+- DHCPv4 uses raw sockets, so it bypasses the firewall (i.e. no firewall rules are needed).
+  DHCPv6, however, does not. This includes the respective clients as well.
+- The DHCPv6 server is typically used with [radvd](#Router Advertisement Daemon (radvd)) for router advertisements.
 
 ### Setup
 
-1. Install and enable `isc-dhcp-server` and `radvd`.
-2. Add config files.
-    1. DHCPv4: `/etc/dhcp/dhcpd.conf`
-    2. DHCPv6 (optional): `/etc/dhcp/dhcpd6.conf`
-    3. radvd: `/etc/radvd.conf`
-3. If using systemd-networkd, fix wrong startup order:
-    - **TODO**
-4. IPv4:
-    1. Configure DHCPv4.
-5. IPv6:
-    1. For SLAAC, configure only radvd.
-    2. For DHCPv6, configure radvd in stateful mode and DHCPv6.
-6. (Optional) Setup interfaces to listen to:
+1. Install and enable `isc-dhcp-server`.
+1. Setup config files:
+    - DHCPv4: `/etc/dhcp/dhcpd.conf`
+    - DHCPv6 (optional): `/etc/dhcp/dhcpd6.conf`
+1. (Optional) Setup interfaces to listen to:
     - This *may* (?) mute the "No subnet declaration for ..." verbose error on some distros.
     - In `/etc/default/isc-dhcp-server`, add the interfaces (space-separated) to `INTERFACESv4` and `INTERFACESv6`.
+1. If using systemd-networkd, fix wrong startup order:
+    - **TODO**
+
+### Configuration
+
+- Always specify the `authorative` statement in subnet declarations so that the server will reply with DHCPNAK for misconfigured clients.
+  This may significantly reduce reconfiguration delay when a client moves between subnets.
+- For `range6`, prefer using CIDR notation.
+  If using range notation, try to align the start and end on a CIDR block to avoid excessive memory usage.
+- DHCPv6 uses lease pools of 9973 entries, so using range sizes below this number may be preferable as a very general reference.
+  `/116` gives 8191 addresses.
 
 ## ntopng
 
@@ -210,9 +213,12 @@ export TMPDIR=/var/lib/docker-compose-tmp
 - It uses a ton of storage, between 20 and 30 GB last I checked. If you useless, the installer will fail with some useless error message.
 - Use app ID 730 in Steam Game Server Account Manager, regardless of which app ID the server was created with. If you use e.g. 740, the server will not be able to log into Steam.
 
-## radvd
+## Router Advertisement Daemon (radvd)
+
+### Setup
 
-See [ISC DHCP Server and radvd](#isc-dhcp-server-and-radvd).
+1. Install and enable `radvd`.
+1. Setup config file: `/etc/radvd.conf`
 
 ## TFTP-HPA
 

+ 3 - 1
config/linux-server/proxmox-ve.md

@@ -13,7 +13,9 @@ breadcrumbs:
 
 ## Initial Setup
 
-**TODO**
+**TODO** Initial setup
+
+**TODO** Notes from Google Docs
 
 1. See [Debian Server: Initial Setup](../debian-server/#initial-setup).
     - **TODO**: Differences.

+ 6 - 2
config/network/juniper-junos.md

@@ -6,6 +6,8 @@ breadcrumbs:
 ---
 {% include header.md %}
 
+**TODO** Reorganize and add missing basic stuff.
+
 ### Related Pages
 {:.no_toc}
 
@@ -101,7 +103,7 @@ Note: USB3 drives may not work properly. Use USB2 drives.
 ### Booting
 
 The devices have two partitions; the primary and the backup.
-One of them will be designated as active and that will not be reset when the device is rebooted.
+One of them will be designated as active and that choice will be remembered across reboots.
 When the active partition is damaged, the device will boot into the other partition.
 When the backup partition is the active partition, an alarm will be set and a banner shown.
 
@@ -112,9 +114,11 @@ Change active partition and reboot: `request system reboot slice alternate media
 The devices should be shut down gracefully instead of just pulling the power.
 This will prevent corrupting the file system.
 
-- Shell: `shutdown -h now`
+- Shell: `shutdown -h now` or `halt`
 - Op mode: `request system <halt|power-off> [local|all-members|member <member-id>]`
 
+Wait for the "The operating system has halted." text before pulling the power, so that system processess are stopped and disks are synchronized. The system LED turning off and the LCD saying "HALTING..." does *not* mean that the halting process is finished yet.
+
 ### The Configuration
 
 - Hierarchical.