Posts

Stunnel and Squid on FreeBSD 11

I don’t like to use untrusted networks. When I have to use such a network, e.g. an open WiFi network, I use a TLS encrypted tunnel connection to encrypt all web traffic that travels through the untrusted network. I’m using a simple stunnel/ Squid setup for this. My setup consists of three components: Stunnel (server mode) Squid proxy Stunnel (client mode) What is stunnel? Stunnel is an OSS project that uses OpenSSL to encrypt traffic.

How to set a WiFi connection as metered on Windows 10

I switched my mobile carrier and my new carrier doesn’t offer multi SIM (but hey, it’s cheap and sufficient for my needs). Now I have to use my iPhone as WiFi hotspot. No big deal, works perfect. Except one thing: When I was using the built-in 4G modem in my laptop, Windows 10 knew that it was using a mobile (metered) connection, and suspended some services like OneDrive sync, download of Windows Updates etc.

Wrong iovDisableIR setting on ProLiant Gen8 might cause a PSOD

TL;DR: There’s a script at the bottom of the page that fixes the issue. Some days ago, this HPE customer advisory caught my attention: Advisory: (Revision) VMware - HPE ProLiant Gen8 Servers running VMware ESXi 5.5 Patch 10, VMware ESXi 6.0 Patch 4, Or VMware ESXi 6.5 May Experience Purple Screen Of Death (PSOD): LINT1 Motherboard Interrupt And there is also a corrosponding VMware KB article: ESXi host fails with intermittent NMI PSOD on HP ProLiant Gen8 servers

Creating console screenshots with Get-ScreenshotFromVM.ps1

Today, I had a very interesting discussion. As part of an ongoing troubleshooting process, console screenshots of virtual machines should be created. The colleagues, who were working on the problem, already found a PowerCLI script that was able to create screenshots using the Managed Object Reference (MoRef). But unfortunately all they got were black screens and/ or login prompts. Latter were the reason why they were unable to run the script unattended.

Secure your Azure deployment with Palo Alto VM-Series for Azure

When I talk to customers and colleagues about cloud offerings, most of them are still concerned about the cloud, and especially about the security of public cloud offerings. One of the most mentioned concerns is based on the belief, that each and every cloud-based VM is publicly reachable over the internet. This can be so, but it does not have to. It relies on your design. Maybe that is only a problem in germany.

vExpert 2017 - My 2 cents about the increasing number of vExperts

Last Wednesday, VMware has published a list with the vExperts for 2017. The wait is over, vExpert 2017 has been announced at https://t.co/lNE1KzAG3n. Thank you to everyone who applied. pic.twitter.com/N466wz1p29 — VMware vExpert (@vExpert) February 8, 2017 I’m on this list. I’m on this list for the fourth time, which makes me very happy and proud. I was surprised that I’m on this list. I have written only a few blog posts last year.

Checking the 3PAR Quorum Witness appliance

Two 3PAR StoreServs running in a Peer Persistence setup lost the connection to the Quorum Witness appliance. The appliance is an important part of a 3PAR Peer Persistence setup, because it acts as a tie-breaker in a split-brain scenario. While analyzing this issue, I saw this message in the 3PAR Management Console: Patrick Terlisten/ vcloudnine.de/ Creative Commons CC0 In addition to that, the customer got e-mails that the 3PAR StoreServ arrays lost the connection to the Quorum Witness appliance.

Single Sign On (SSO) with RemoteApps on Windows Server 2012 (R2)

A RemoteApp is an application, that is running on a Remote Desktop Session Host (RDSH), and only the display output is sent to the client. Because the application is running on a RDSH, you can easily deliver applications to end users. Another benefit is, that data is not leaving the datacenter. Software and data are kept inside the datacenter. RemoteApps can be used and deployed in various ways: Users can start RemoteApps through the Remote Desktop Web Access Users can start RemoteApps using a special RDP file Users can simply start a link on the desktop or from the start menu (RemoteApps and Desktop connections deployed by an MSI or a GPO) or they can click on a file that is associated with a RemoteApp Even in times of VDI (LOL…), RemoteApps can be quite handy.

Horizon View: Server certificate does not match the external url

Patrick Terlisten/ vcloudnine.de/ Creative Commons CC0 Certificates are always fun… or should I say PITA? Whatever… During a small Horizon View PoC, I noticed an error message for the View Connection Server. That’s right, Mr. Connection Server. The certificate subject name does not match the servers external URL, as this screenshot clearly shows. Patrick Terlisten/ vcloudnine.de/ Creative Commons CC0 But both settings are unused, because a VMware Access Point appliance is in place.

Tiny PowerShell/ Azure project: Deploy-AzureLab.ps1

One of my personal predictions for 2017 is, that Microsoft Azure will gain more market share. Especially here in Germany. Because of this, I have started to refresh my knowledge about Azure. A nice side effect is that I can also improve my PowerShell skills. Currently, the script creates a couple of VMs and resource groups. Nothing more, nothing less. The next features I want to add are: add additional disks to the DCs (for SYSVOL and NTDS) promote both two servers to domain controllers change the DNS settings for the Azure vNetwork deploy a Windows 10 client VM I created a new repository on GitHub and shared a first v0.