The question really isn't "why not" but "why"? Given the ability to change the default UPN suffix and domain NETBIOS name to be "pretty" why would you ever choose split dns
But then you have two sets of disjoint servers authoritative for the same namespace
I understand that there are workaround a but why would split ever be preferred when there are zero-cost alternatives that conform to MS best practices and don't make a cluster fuck out of trusts for partners
@MDMarra That's the price you pay for wanting to have an internal and external presence. The other side of the coin is that you can have webserver serving web requests for a domain name of which it's not actually a member.
It's not that crazy... Public DNS for producecompany.com. Internal AD with domain name producecompany.com, with redirects to internal addresses for people resolving internally.
You have to maintain duplicate A records and train your user to do www. Internally to get to the external site. It decreases usability while adding nothing
And it really makes a mess out of trusts if you're doing it with other companies that are doing the same thing
The $1799 iMac took 96 seconds to copy a 6GB file from one part of the drive to another, while the WD drive in the $1999 iMac took 146 seconds, the same result as the high-end 2011 27-inch iMac
96 seconds to duplicate a 6Gb file? Is there something wrong with that?
@MDMarra Well you have a point in that internal users would not be able to access the company website at produce.com, and let's just rule out putting IIS on all the DCs because that's just crazy.
Oh dude. I'm not saying that people that have it deployed already should change. If people have it and its working then good for them. I'm talking specifically about new deployments
But split DNS also makes certain other things easier, such as certificates. You can access rdgw01.nubo.myotherpcisacloud.com (an RD Gateway) and it will give you a valid certificate, because that machines hostname is literally rdgw01.nubo.myotherpcisacloud.com. That's one example where split DNS shines.
Internal clients and external clients have no problems accessing the same host by name
Most companies don't have good IT support. And if they DO have staff and a new project comes along, the decision makers expect the staff that they pay for to know how to do things... even when a consultant makes more sense.
or you have staff that's chomping to get a new project because they're otherwise stagnant.
@MDMarra I'm willing to concede if MS really says "best practice is not to use split DNS" but I've beem googling while we've been talking and I can't find where MS says "don't use split DNS" in the context of general DNS/domain design. I'm not asking you to do my googling for me, I honestly can't find it
@MDMarra And in terms of RD Gateway at least, yeah, the computers hostname + domain must match the exact name on the certificate, or else Remote Desktop Client won't connect to it
When planning your DNS and Active Directory namespace, it is recommended that you use a differing set of distinguished names that do not overlap as the basis for your internal and external DNS use. As an example, assuming your organization's parent domain name is "example.microsoft.com"
For internal DNS names usage you could use a name such as "internal.example.microsoft.com"
For external DNS names usage you could use a name such as "external.example.microsoft.com"
By keeping your internal and external namespaces separate and distinct in this way, you enable simplified maintenance of con…
@MDMarra Well I've been thinking about this, and I've come to the conclusion that I think you're right, and it's made me question some of my past decisions. That said, there are also articles like this one, which I think is still in favor of a non-split DNS, but is still pretty wishy-washy on the issue: http://support.microsoft.com/kb/254680
@MDMarra But at the end of the day I have to give it to you
@MDMarra I think there might be a little merit to the idea that 98% of companies will not have a problem with split-DNS, but I understand that idealistically you're right and I'll most likely change my attitudes toward DNS design in the future. Sorry... I'm not trying to back-handedly compliment you, still just weighing the possibilities in my own head :)
And I think you're also right that proper delegations are key
@ewwhite Yeah I have no problems accessing myotherpcisacloud.com (without the www) internally. :\
And I'm a huge fan of Remote Desktop Gateway, which requires an SSL certificate, and it also requires that the RD gateway present a certificate that matches its actual hostname.domain.tld or else it simply will not work, and I'm not sure how to do that over the internet without split DNS
@RyanRies UCC/SAN cert, the same way exchange does should work right?
I wasn't trying to start an argument or anything, I really didn't know of any positive reason and I've been really adamant about it in the past, so I was worried I missed something big
@MDMarra No that's the main thing that I also just want to make clear is that the last thing I want to do is start some sort of internet flame war, I know we're both more mature than that, and above all I just love that there are people right here with whom I can engage in thought-provoking conversation, I really respect it all immensely
Really though, my main issue now is that we're split and a parter that we have a trust with and private fiber link with are split as well. And we both have ugly NAT setups. There are some nasty things we need to do to use the internal link for initial traffic and the external link for external traffic
@MDMarra Agreed - That's still today got to be the #1 cause of people not respecting Windows admins. The thing that attracts people to Windows (approachability, ease of use, etc.) are the same things that cause the space to be flooded with noobs.
Although I think that should hopefully be changing for the better now that Windows Server has come full circle and that they are realizing that there is no better way to create an automatable OS than through the command line
@MDMarra They do. You're right. I have an internet domain that I bought for myotherpcisacloud.com. My (internal) AD forest at home is actually nubo.myotherpcisacloud.com, so internal DNS requests for "myotherpcisacloud.com" get forwarded to the internet. I was confused and wrong.
I was trying various methods to implement a program that gives the digits of pi sequentially. I tried the Taylor series method, but it proved to converge extremely slowly (when I compared my result with the online values after some time). Anyway, I am trying better algorithms.
So, while writing ...
@RyanRies If you want that many upvotes you need to 1) Write a mundane but interesting question, 2) give it an interesting subject line, 3) get it to the top of the Hot Questions list
I got to the top of that list with a really dumb question I wrote
We just took delivery of a new Avaya 2500 48-port switch, that has 24 PoE ports. The problem is that all the PoE ports are on the left-hand size of the switch, and our PoE device cables can only reach the right-hand side of the switch (we're upgrading from an old switch to a new one, and the old ...
@ewwhite there's a hacky GPO profile to stop that from happening if you think it will happen to a lot of users, but I didn't think there would be anyone logging into anything with existing profiles
I called up a colo facility once after a server dropped offline unexpectedly. Power supply failed spectacularly. Hard drive survived (amazingly), everything else was a charred and melted mess.
@tylerl Never had one spouting open flames, but had them release their magic smoke...
@sabgenton One last thing. Maybe you can just avoid the problem entirely. If it's a configuration file, consider putting your server config in a git repo with etckeeper.
I think I want to do a canonical answer for all the "why is my server so damn slow" questions.
@MichaelHampton non of the things you have said I haven't dealt with version control etc and I haven't lost anything serious and that because I do believe in backing serious things up. Simply just wanted to know what's possible when you can't just shut down the machine. But yes it shouldn't happen your quite right you should never leave it to chance.
@sabgenton If you really need to protect against new files or recently changed files being deleted, consider a continuous backup solution. If it's just for your home machine, something like CrashPlan would do.
@MichaelHampton Founded in 1896, and proud of it. So... no, worse.
After that shit with the A/C last night, I'm starting to wonder if I'll make it through the resume-making infra refresh project, or quit in frustration first. :(
The Drupal documentation covers this.
Prefixing
If you want to have multiple Drupal installations share memcached instances, you need to include a unique prefix for each Drupal installation in the $confarray of settings.php.
<?php
$conf['memcache_key_prefix'] = 'something_unique';
?&...
I think if you treated "internet reference" as "product documentation" or its equivalent, it could work for us. I don't think it's a good fit for SF&F.
@Iain Oh, we'd have plenty of questions still. I'm after the really low hanging fruit. When the answer would just be a copy and paste of the docs, then it's a bit of a problem.
@MichaelHampton there isn't any point at all on mSO
I only answered that one because the OP had recently admitted to just voting to close -> migrate to SU because that seem like the place to send everything now ...
@Iain We should tell Journeyman Geek and whoever else is active enough on SU to do what I did: follow the migrations from SO and VtC the crappy ones. When I was doing it for migrations here, there were just as more old questions migrated to SU than SF
I need to build an Intel/AMD (64 bit) PC with Linux capable of receiving around 100 MegaBytes/sec UDP packets (peak).
I tried this with my i7 based Ubuntu 10.10, which crashed after about a second.
(Weird thing was that it DID NOT crash, if the packets were malformed (IP LEN/UDP LEN did not matc...
@Iain Ignorance. It depends on what the UDP stream it. It could easily be a trading workstation consuming trading market data... But there are sysctl settings that would help. NIC doesn't matter as much.
the heating is fucked here at work again. It's colder than a witches tit inside a brass bra in our reception area, which is where our helldesk is sited. Guess where I'm stuck having to cover because we're that short of staff today.
@RobM First job I had was in Woolworths over christmas as a temp. You were supposed to rota in a couple of hours on the tills, one on the door, and a couple in warehouse, although one day they "forgot" to do mine and I stood on the door for 6 hours with a piss-thin woolies jumper and "would you like a basket?" for entertainment.
I saw on the weekend an advert for a documentary on ITV2 about old bands regrouping for a reunion concert. B*Witched was one of them...I couldn't stop laughing.
@RobM Actually as I posted that they called me back and said they have the next size up in a shop near work (THey don't have many branches so quite lucky there) so it may be alright
@tombull89 "So, where have you been?" Bursts into tears
@RobM Successfully managed to blow >£500 on motorcycle gear. As I said to the missus, it's not that blokes hate shopping, girls just take us to the wrong places :D
Most of the people who know me well would agree with your original comment @dan ;-)
dan we have two counsellors. one for students and one for staff.
I can't believe it either
That makes about as much sense to me as actually letting one of the most cynical bastards in the place to do it just because some other idiot thought it would be an idea to send me on the courses for it one time.
The Drupal documentation covers this.
Prefixing
If you want to have multiple Drupal installations share memcached instances, you need to include a unique prefix for each Drupal installation in the $confarray of settings.php.
<?php
$conf['memcache_key_prefix'] = 'something_unique';
?&...
