private server – TechBlog

My private server is hosted at a small company in munich. This server is currently running FreeBSD 11.0-RELEASE and has around 15 Jails running on it, most of them Apache Webserver with PHP application servers running some websites or blogs like this one and some other jails for major internet services like dns, mail, proxy server, shell server and some internal infrastructure jails (mysql, ssl/acme management, git, …)

From /var/run/dmesg.boot:

Copyright (c) 1992-2016 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 11.0-RELEASE-p1 #0 r306420: Thu Sep 29 01:43:23 UTC 2016
    root@releng2.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64
FreeBSD clang version 3.8.0 (tags/RELEASE_380/final 262564) (based on LLVM 3.8.0)
[…]
CPU: Intel(R) Core(TM)2 Duo CPU     E8400  @ 3.00GHz (2992.55-MHz K8-class CPU)
  Origin="GenuineIntel"  Id=0x1067a  Family=0x6  Model=0x17  Stepping=10
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  Features2=0xc08e3fd<SSE3,DTES64,MON,DS_CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,XSAVE,OSXSAVE>
  AMD Features=0x20100800<SYSCALL,NX,LM>
  AMD Features2=0x1
  VT-x: HLT,PAUSE
  TSC: P-state invariant, performance statistics
real memory  = 17184063488 (16388 MB)
avail memory = 16453406720 (15691 MB)
[…]

I won’t describe how to install a FreeBSD server here, just some basic facts:

This server uses ZFS only as local file system, it’s more or less the default zfs setup from the installer of 10.2-RELEASE: two hard drives and two SSDs for slog and l2arc.
On the host (unjailed context) only some very basic services are running (sshd, openntpd, syslogd, smartd, named (as resolver and as dns slave))
simple stuff to configure/run jails (but no ezJail or similar framework), some zfs maintainance scripts.
I have external /29 in IPv4 (“IP Legacy”) and one IPv6 /64, internal services are running on RfC1918 IPv4 /24 and soon on RfC4193 (“ULA”) IPv6 /48 on virtual lan interface (“loopback”). Expect some more detailed information about how to plan and run a setup like this.

Leave a Reply Cancel reply