• 3 Posts
  • 133 Comments
Joined 1 year ago
cake
Cake day: July 4th, 2023

help-circle







  • That article is SO wrong. You don’t run one instance of a tier1 application. And they are on separate DCs, on separate networks, and the firewall rules allow only for application traffic. Management (rdp/ssh) is from another network, through bastion servers. At the very least you have daily/monthly/yearly (yes, yearly) backups. And you take snapshots before patching/app upgrades. Or you even move to containers, with bare hypervisors deployed in minutes via netinstall, configured via ansible. You got infected? Too bad, reinstall and redeploy. There will be downtime but not horrible. The DBs/storage are another matter of course, but that’s why you have synchronous and asynchronous replicas, read only replicas, offsites, etc. But for the love of what you have dear, don’t run stuff on bare metal because “what if the hypervisor gets infected”. Consider the attack vector and work around that.








  • the question is: why do you want to move on from the Rpi4? Also, how do you plan to handle video decoding 0f x265/av1 streams? Do those miniPCs have a video card with hardware transcoding capabilities? If you plan to do it on software (i.e. CPU transcoding) the CPUs will run hot most of the time.





  • Im_old@lemmy.worldtohmmm@lemmy.worldhmmm
    link
    fedilink
    arrow-up
    1
    ·
    21 days ago

    The fact that there’s no way to open those. The only way to remove them is to untie them from the hair on the head, and I doubt that a good yank it’s a) enough (without ripping out hair!) and b) advisable