April 29, 201511 yr Ahh that is indeed very different. Kudo's for running veeam, I can't even get that at my work..... /sigh. SyncBack I think is a Windows product? So in your case the backups are occurring over windows shares. Interesting setup. I'm hoping my plans go smoothly. Does anyone know if I can do a DHCP reservation for the DD-WRT OpenVPN DHCP scope so I can reliably NFS mount the OpenVPN unraid client from my home network? The client will be able to mount my server NFS share no problem, was concerned about mounting it the opposite direction.
April 29, 201511 yr . First off I'm using pfSense on both ends for a site-to-site VPN. I am still using DD-WRT as an OpenVPN client on one end right now but that will be changed on Wednesday when I configure pfSense in a VM to replace it. Pfsense for point to point VPN. Care to share your experience in setting up a vm for pfsense? What is your mb, nic and how is it wired to your modem? (Google fiber will require me to kill my current ancient router and a pfsense VM is possible. I have a super micro x9scm. )
April 29, 201511 yr Author . First off I'm using pfSense on both ends for a site-to-site VPN. I am still using DD-WRT as an OpenVPN client on one end right now but that will be changed on Wednesday when I configure pfSense in a VM to replace it. Pfsense for point to point VPN. Care to share your experience in setting up a vm for pfsense? What is your mb, nic and how is it wired to your modem? (Google fiber will require me to kill my current ancient router and a pfsense VM is possible. I have a super micro x9scm. ) I'm actually in the process of finishing my network upgrade today at Site 2 of my home network so after I have everything completed I'll report back with how I have everything configured. Btw my VM box also has a SM X9SCM-F in it paired with a Xeon E3-1245v3 and 4 NICs (2 on board, 2 PCIe).
April 29, 201511 yr This is what I have on each of my unRAID Servers. in /boot/config/go I put this in place from /boot/local/etc/rsyncd.conf to /etc/rsyncd.conf fromdos < /boot/local/etc/rsyncd.conf > /etc/rsyncd.conf chmod 600 /etc/rsyncd.conf uid = root gid = root use chroot = no max connections = 4 timeout = 600 pid file = /var/run/rsyncd.pid log file = /var/log/rsyncd.log socket options = SO_SNDBUF=524288,SO_RCVBUF=524288 [mnt] path = /mnt comment = /mnt files read only = FALSE list = yes [boot] path = /boot comment = /boot files read only = FALSE list = yes I install rsync as a inet service with this in a shell or in /boot/config/go. if ! grep -q ^rsync /etc/inetd.conf ; then fromdos <<-EOF_INETD >> /etc/inetd.conf rsync stream tcp nowait root /usr/sbin/tcpd /usr/bin/rsync --daemon EOF_INETD kill -1 $(</var/run/inetd.pid) fi a I have much more advanced examples, but this is the simplest I could come up with. you can also have passwords on the rsync port as well as using tcp wrapper to lock it down more. I've been looking into rsync as daemon more lately... and I noticed something about this post that I think is dangerous. With modules not including the "authroized users" and "secrets file" options, aren't those modules open to anyone running rsync? Anyone would just need to know how to find your server on the internet to be able to connect and upload or delete files from those paths?
April 30, 201511 yr He's using a VPN for connectivity I believe which should exclude anyone on the net. Only people on his own LAN should have free access or the extended LAN over the VPN.
April 30, 201511 yr Author . First off I'm using pfSense on both ends for a site-to-site VPN. I am still using DD-WRT as an OpenVPN client on one end right now but that will be changed on Wednesday when I configure pfSense in a VM to replace it. Pfsense for point to point VPN. Care to share your experience in setting up a vm for pfsense? What is your mb, nic and how is it wired to your modem? (Google fiber will require me to kill my current ancient router and a pfsense VM is possible. I have a super micro x9scm. ) pfSense VM all setup. Was very easy to install and configure. I currently have one physical NIC (on it's on vSwitch in VMware) for my WAN connection. Then have one physical NIC (on a vSwitch with some of my other VM's) for the LAN interface. I also have 2 additional NICs that I plan to use in the near future when I redo my VLANs in a few weeks. One for wireless and one for my site-to-site OpenVPN connection to AirVPN to send certain traffic (media server, torrents, etc) through. Btw for reference my VM server has the following hardware: SM X9SCM-F Micro-ATX Mobo Xeon E3-1245v2 CPU 32GB Kingston ECC RAM 2 x 500GB SSDs in RAID1 for VM datastore 1 x 1TB WD Black HDD for data storage 2 x Intel PCIe NICs
April 30, 201511 yr Ah, so you have a separate esxi server for pfsense. I thought you were using unRaid VM for that.
April 30, 201511 yr Author Ah, so you have a separate esxi server for pfsense. I thought you were using unRaid VM for that. Correct. My UnrAID box is it's own standalone server as you can see in my sig. However I don't see why there would be an issue running pfSense on the same VM box as you are running UnRAID. I'm running pfSense along side my media server VM.
April 30, 201511 yr Author But I haven't found enough success stories with pfsense on unRaid yet. So you have a current VM box running UnRAID in a VM now or just considering turning your physical UnRAID box into a VM box to run UnRAID along with (potentially) pfSense?
April 30, 201511 yr UnRaid is bare metal, and was hoping you had successfully installed pfsense in a VM. It needed to be proven though and I need to see more success by the pioneers before I try it. I'm not a techie.
April 30, 201511 yr Author UnRaid is bare metal, and was hoping you had successfully installed pfsense in a VM. It needed to be proven though and I need to see more success by the pioneers before I try it. I'm not a techie. Oh I see. Well pfSense has worked in a VM for a lot of people. I mean they have their own Wiki on the pfSense website documenting how to install it in ESXi. It's really not all that different from a bare metal installation. There are also plenty of good guides out there showing how to do it but it obviously helps to have some VMware experience.
April 30, 201511 yr And you need a VMware server. UnRaid is supposed to eliminate the need for VMware.
April 30, 201511 yr Author And you need a VMware server. UnRaid is supposed to eliminate the need for VMware. I'm not sure I agree with that statement. I mean sure you can add a lot of plugins to UnRAID to increase the amount of things you can do with your UnRAID server, but that does not give it the flexibility and feature set of full fledged server with an underlying hpervisor. But for someone who's main priority was a storage/media server who decided to go the UnRAID route, I can see why just adding plugins/dockers to automate a lot of the additional features you need may seem like the best way to go.
April 30, 201511 yr Pfsense to my knowledge can't run in a docker. But it can under an unRaid KVM VM. It's just not well tested yet. Once unRaid can host these kind of needs, it will really be useful.
April 30, 201511 yr Author Pfsense to my knowledge can't run in a docker. But it can under an unRaid KVM VM. It's just not well tested yet. Yea that sounds a bit risky to me. I don't think I'd want my router/firewall being run on top of any OS that isn't a legit hypervisor.
April 30, 201511 yr I may have to grab a standalone router with enough power to do a Google fiber gigabit VPN.
April 30, 201511 yr Author I may have to grab a standalone router with enough power to do a Google fiber gigabit VPN. You'll need to build your own for that unless you want to spend $1,000+ on an enterprise router. I just built a very good standalone pfSense box for the other end of my site-to-site VPN which cost me about $400 to make. But even that couldn't do a gigabit VPN unless you're talking IPsec instead of OpenVPN. It's mainly the CPU you have to be concerned with. My pfSense box has a C2558 in it which has AES-NI and Quick Assist. The CPU hits about 12-15% when I peg my 75Mbps connection. However if I was using IPsec instead of OpenVPN my CPU utilization would likely be less than 5%.
April 30, 201511 yr And my unRaid is idling away with a Xeon. It would have the power to do it. But I need to see several success stories before committing to that path.
April 30, 201511 yr Author And my unRaid is idling away with a Xeon. It would have the power to do it. But I need to see several success stories before committing to that path. Have you considered just installing ESXi on your server and running UnRAID in a VM along with pfSense and/or any other VM's you might want to use? I'm not familiar with how well UnRAID works as a guest VM though. EDIT: From what I'm seeing, a lot of people are running UnRAID as a guest VM just fine provided you pass through your storage to it. So I don't see any problems with that.
April 30, 201511 yr It has been done successfully. See the atlas thread. But unRaid 6 does away with some hw pass through issues for the hard drive controllers. Maybe I need to revisit it. Would the free esxi still work?
April 30, 201511 yr He's using a VPN for connectivity I believe which should exclude anyone on the net. Only people on his own LAN should have free access or the extended LAN over the VPN. Yes that explains it. Makes more sense now. I am going to warn people against using the rsync daemon without using a VPN or some other method to protect your connection.
April 30, 201511 yr Author It has been done successfully. See the atlas thread. But unRaid 6 does away with some hw pass through issues for the hard drive controllers. Maybe I need to revisit it. Would the free esxi still work? Yup. There are very few limitations with regard to ESXi 5.5 or later. They increased the max memory support from 32GB to 4TB. The only limitation I know of is with regards to doing backups. You can't backup the free ESXi VM's with any kind of enterprise software.
Archived
This topic is now archived and is closed to further replies.