| *** rcernin has joined #openstack-operators | 00:02 | |
| *** ircuser-1 has joined #openstack-operators | 01:09 | |
| *** jamesmcarthur has joined #openstack-operators | 02:37 | |
| *** jamesmcarthur has quit IRC | 03:33 | |
| *** jamesmcarthur has joined #openstack-operators | 03:47 | |
| *** jamesmcarthur has quit IRC | 04:00 | |
| *** jamesmcarthur has joined #openstack-operators | 04:00 | |
| *** ekcs has quit IRC | 04:17 | |
| *** ekcs has joined #openstack-operators | 04:17 | |
| *** jamesmcarthur has quit IRC | 04:24 | |
| *** jamesmcarthur has joined #openstack-operators | 04:26 | |
| *** jamesmcarthur has quit IRC | 04:37 | |
| *** jamesmcarthur has joined #openstack-operators | 04:44 | |
| *** jamesmcarthur has quit IRC | 05:00 | |
| *** jamesmcarthur has joined #openstack-operators | 05:05 | |
| *** trident has quit IRC | 05:06 | |
| *** ekcs has quit IRC | 05:14 | |
| *** ekcs has joined #openstack-operators | 05:14 | |
| *** trident has joined #openstack-operators | 05:15 | |
| *** trident has quit IRC | 05:21 | |
| *** trident has joined #openstack-operators | 05:27 | |
| *** jamesmcarthur has quit IRC | 05:38 | |
| *** jamesmcarthur has joined #openstack-operators | 05:42 | |
| *** jamesmcarthur has quit IRC | 05:44 | |
| *** jbadiapa has joined #openstack-operators | 06:05 | |
| *** threestrands has quit IRC | 06:34 | |
| *** threestrands has joined #openstack-operators | 06:35 | |
| *** damien_r has joined #openstack-operators | 06:47 | |
| *** simon-AS559 has joined #openstack-operators | 06:56 | |
| *** rcernin has quit IRC | 07:17 | |
| *** threestrands has quit IRC | 07:19 | |
| *** admin0 has joined #openstack-operators | 07:21 | |
| *** takamatsu has joined #openstack-operators | 07:37 | |
| *** simon-AS5591 has joined #openstack-operators | 07:59 | |
| *** chxr has joined #openstack-operators | 08:00 | |
| *** simon-AS559 has quit IRC | 08:03 | |
| *** trident has quit IRC | 08:11 | |
| *** trident has joined #openstack-operators | 08:19 | |
| *** derekh has joined #openstack-operators | 08:34 | |
| *** tesseract has joined #openstack-operators | 11:15 | |
| *** mriedem has joined #openstack-operators | 12:57 | |
| *** ekcs has quit IRC | 13:26 | |
| *** ekcs has joined #openstack-operators | 13:26 | |
| *** VW_ has quit IRC | 13:58 | |
| *** VW_ has joined #openstack-operators | 13:58 | |
| *** dtrainor has joined #openstack-operators | 14:31 | |
| *** damien_r has quit IRC | 14:40 | |
| *** damien_r has joined #openstack-operators | 14:40 | |
| *** josephrsandoval has joined #openstack-operators | 15:01 | |
| *** macz has joined #openstack-operators | 15:03 | |
| *** jamesmcarthur has joined #openstack-operators | 15:19 | |
| *** gyee has joined #openstack-operators | 15:38 | |
| *** damien_r has quit IRC | 15:38 | |
| *** simon-AS5591 has quit IRC | 15:46 | |
| *** josephrsandoval has quit IRC | 15:52 | |
| *** jamesmcarthur has quit IRC | 16:11 | |
| *** tesseract has quit IRC | 16:35 | |
| *** ekcs has quit IRC | 16:36 | |
| *** jamesmcarthur has joined #openstack-operators | 16:56 | |
| *** derekh has quit IRC | 17:03 | |
| *** jamesmcarthur has quit IRC | 17:15 | |
| *** jamesmcarthur has joined #openstack-operators | 17:17 | |
| *** jamesmcarthur has quit IRC | 17:22 | |
| *** ekcs has joined #openstack-operators | 17:24 | |
| *** simon-AS559 has joined #openstack-operators | 17:36 | |
| *** simon-AS5591 has joined #openstack-operators | 17:38 | |
| *** simon-AS559 has quit IRC | 17:40 | |
| *** jamesmcarthur has joined #openstack-operators | 17:54 | |
| *** jamesmcarthur has quit IRC | 17:59 | |
| *** jamesmcarthur has joined #openstack-operators | 18:00 | |
| *** jamesmcarthur has quit IRC | 18:05 | |
| *** jamesmcarthur has joined #openstack-operators | 18:23 | |
| jproulx | Here's a fun one. DDoS on one of my user's VMs (which I can't just cut off) is running my hypervisor out of nf_conntrack slots. | 18:54 |
|---|---|---|
| jproulx | I've upped nf_conntrack_max to keep the hypervisor a head of the client but wondering if there's any better way to isolate this resource per VM or is it hopelessly shared? | 18:54 |
| *** jamesmcarthur has quit IRC | 19:08 | |
| *** dtrainor has quit IRC | 19:21 | |
| *** dtrainor has joined #openstack-operators | 19:23 | |
| *** mriedem has quit IRC | 19:29 | |
| *** mriedem has joined #openstack-operators | 19:30 | |
| spotz | jproulx: Could you migrate it to an isolated coompute? | 20:20 |
| *** jamesmcarthur has joined #openstack-operators | 20:28 | |
| jproulx | If it comes to it yes, I can probably manually frob iptables to set max connections on the tap device...as I think of it I'm about 100% sure security-groups can't help me here, but perhaps they should be able to. | 20:29 |
| jproulx | right now mitigation done my the tenant is keeping things in line so not "on fire" for me, but that's a bit upside down so may have a feature request brewing if my theories work out. | 20:31 |
| *** jamesmcarthur has quit IRC | 20:42 | |
| *** jamesmcarthur has joined #openstack-operators | 20:50 | |
| spotz | jproulx: Yeah unless something has changed recently security groups can't do that, not sure Octavia could help either | 21:03 |
| *** simon-AS5591 has quit IRC | 21:07 | |
| *** jamesmcarthur has quit IRC | 21:08 | |
| *** DinaBelova has quit IRC | 21:09 | |
| *** DinaBelova has joined #openstack-operators | 21:10 | |
| *** jamesmcarthur has joined #openstack-operators | 21:10 | |
| *** jamesmcarthur has quit IRC | 21:10 | |
| *** jamesmcarthur has joined #openstack-operators | 21:17 | |
| *** jamesmcarthur has quit IRC | 21:22 | |
| *** jamesmcarthur has joined #openstack-operators | 21:28 | |
| *** jamesmcarthur has quit IRC | 21:29 | |
| *** jamesmcarthur has joined #openstack-operators | 21:44 | |
| *** jamesmcarthur has quit IRC | 21:45 | |
| *** jamesmcarthur has joined #openstack-operators | 21:58 | |
| *** trident has quit IRC | 22:03 | |
| *** jamesmcarthur has quit IRC | 22:03 | |
| *** trident has joined #openstack-operators | 22:11 | |
| *** mriedem has quit IRC | 22:12 | |
| *** ekcs has quit IRC | 22:30 | |
| *** jamesmcarthur has joined #openstack-operators | 22:43 | |
| *** lathiat has quit IRC | 22:57 | |
| *** rcernin has joined #openstack-operators | 22:57 | |
| *** lathiat has joined #openstack-operators | 22:57 | |
| *** macz has quit IRC | 23:02 | |
| *** macz has joined #openstack-operators | 23:03 | |
| *** macz has quit IRC | 23:07 | |
| *** ekcs has joined #openstack-operators | 23:21 | |
| *** jamesmcarthur has quit IRC | 23:33 | |
| *** VW_ has quit IRC | 23:36 | |
| *** jamesmcarthur has joined #openstack-operators | 23:56 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!