August 19, 20187 yr I added a wd blue hdd to my unraid array, from that point, my VMs started to lagging(started i think before preclear the disk), can't even play a YouTube/local video on my vm. It is still lagging after UN plugged the disk. Things tried: Unplug disk Reboot machine
August 19, 20187 yr 3 minutes ago, TheBlueKingLP said: Unplug disk Reboot machine Did either of those cure the problem? A more logical approach would be to wait until the problem is happening and then grab your diagnostics zip and post here.
August 19, 20187 yr Author 2 minutes ago, John_M said: Did either of those cure the problem? A more logical approach would be to wait until the problem is happening and then grab your diagnostics zip and post here. No, it is the video lagging so much, it lag almost every 3 seconds And i have a Minecraft server on another vm(not on atm), the tps of the server is constantly dropping, which didn't happen before Edited August 19, 20187 yr by TheBlueKingLP
August 20, 20187 yr Author 10 hours ago, Squid said: Here is the diagnostics zip pegasus-diagnostics-20180820-0959.zip
August 20, 20187 yr It looks as though your server is being attacked with ssh connection attempts from a number of public IP addresses. I recommend you get it hidden behind a firewall as soon as possible and close all ports. Here's just one example of many: Aug 19 23:04:58 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:04:59 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:00 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:00 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:01 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:01 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:01 Pegasus sshd[1655]: error: maximum authentication attempts exceeded for root from 58.218.92.40 port 29106 ssh2 [preauth] Do you recognise the address? It's whois record confirms that it's held by Chinanet.
August 20, 20187 yr Author 3 minutes ago, John_M said: It looks as though your server is being attacked with ssh connection attempts from a number of public IP addresses. I recommend you get it hidden behind a firewall as soon as possible and close all ports. Here's just one example of many: Aug 19 23:04:58 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:04:59 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:00 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:00 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:01 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:01 Pegasus sshd[1655]: Failed password for root from 58.218.92.40 port 29106 ssh2 Aug 19 23:05:01 Pegasus sshd[1655]: error: maximum authentication attempts exceeded for root from 58.218.92.40 port 29106 ssh2 [preauth] Do you recognise the address? It's whois record confirms that it's held by Chinanet. I notice those when i just look at the diagnostic file too, thanks for the remind
August 20, 20187 yr Community Expert 8 minutes ago, John_M said: I recommend you get it hidden behind a firewall as soon as possible and close all ports. Seriously. Why is your server on the internet? Do you not know about bots? There are lots of totally automated things out there to attack your server repeatedly and relentlessly if you put it on the internet.
August 20, 20187 yr Author 40 minutes ago, trurl said: Seriously. Why is your server on the internet? Do you not know about bots? There are lots of totally automated things out there to attack your server repeatedly and relentlessly if you put it on the internet. I know the are bots, but i need to access the server without a vpn or proxy. I want to solve the lag problem first Edited August 20, 20187 yr by TheBlueKingLP
August 20, 20187 yr 1 hour ago, TheBlueKingLP said: I know the are bots, but i need to access the server without a vpn or proxy. This statement doesn't make sense. Exactly why do you need that? Note that "need" and "want" aren't compatible words, and bad things tends to happen when "want" gets upgraded to "need".
August 20, 20187 yr Author Does that caused the video playback lag?if not,i want to fix the lag first
August 20, 20187 yr 4 hours ago, TheBlueKingLP said: Does that caused the video playback lag?if not,i want to fix the lag first Maybe, maybe not. Not entirely implausible. Wouldn't it be easy to test by just temporarily block outside access and see if it helps?
August 20, 20187 yr Author 25 minutes ago, gubbgnutten said: Maybe, maybe not. Not entirely implausible. Wouldn't it be easy to test by just temporarily block outside access and see if it helps? Nope, still lagging
August 20, 20187 yr 8 minutes ago, TheBlueKingLP said: Nope, still lagging FIRST, put a Firewall infront of the Server - then fix the lag... Priority???
August 20, 20187 yr Author Just now, Zonediver said: FIRST, put a Firewall infront of the Server - then fix the lag... Priority??? I have already put a firewall after the upload of the diagnostic zip Edited August 20, 20187 yr by TheBlueKingLP
August 20, 20187 yr 2 hours ago, TheBlueKingLP said: Anyone can help me to solve this? I tried but your syslog is very difficult to read because of all the noise. Apart from the messages about the outside attacks, you have "bad csrf token" messages (close all stale browser windows) and the usual messages from the broken preclear plugin.
August 20, 20187 yr Author 1 hour ago, John_M said: I tried but your syslog is very difficult to read because of all the noise. Apart from the messages about the outside attacks, you have "bad csrf token" messages (close all stale browser windows) and the usual messages from the broken preclear plugin. Here is the updated diagnostic zip pegasus-diagnostics-20180820-1941 (1).zip
August 20, 20187 yr Author 3 hours ago, John_M said: I tried but your syslog is very difficult to read because of all the noise. Apart from the messages about the outside attacks, you have "bad csrf token" messages (close all stale browser windows) and the usual messages from the broken preclear plugin. Anyone can help me?
August 20, 20187 yr Looks like you're running a Windows 2016 Server VM, a Windows 10 VM, and you don't have a cache drive, have all 1TB drives (which aren't exactly speed demons), and are hosting the vdisks on the array. Slow and lagging is basically what I would expect
August 20, 20187 yr Author 5 hours ago, Squid said: Looks like you're running a Windows 2016 Server VM, a Windows 10 VM, and you don't have a cache drive, have all 1TB drives (which aren't exactly speed demons), and are hosting the vdisks on the array. Slow and lagging is basically what I would expect Why do I don't have this problem before I add the 6th drive to the system? It happen right after I just plug the drive in and start pre clear.
August 20, 20187 yr Community Expert 3 minutes ago, TheBlueKingLP said: Why do I don't have this problem before I add the 6th drive to the system? It happen right after I just plug the drive in and start pre clear. Does the problem go away if you remove the disk? You would have to New Config and rebuild parity without it if it is already part of the array.
August 20, 20187 yr Author 4 minutes ago, trurl said: Does the problem go away if you remove the disk? You would have to New Config and rebuild parity without it if it is already part of the array. It happen BEFORE I added it to the array (After I plug it in)
August 20, 20187 yr Community Expert 10 minutes ago, TheBlueKingLP said: It happen BEFORE I added it to the array (After I plug it in) OK, but I am asking if the problem goes away if you unplug the disk. But if the disk is now part of the array, in order to unplug the disk and not incur further performance degradation caused by emulating a missing disk, you would have to New Config and rebuild parity without the disk, then see if it performed like before.
August 20, 20187 yr Author 21 minutes ago, trurl said: OK, but I am asking if the problem goes away if you unplug the disk. But if the disk is now part of the array, in order to unplug the disk and not incur further performance degradation caused by emulating a missing disk, you would have to New Config and rebuild parity without the disk, then see if it performed like before. How do I remove a disk that has data on it? And I have another Linux VM running on a unassigned drive and it is lagging too. Edited August 21, 20187 yr by TheBlueKingLP
Archived
This topic is now archived and is closed to further replies.