By:
On:
In: Certification
With: 0 Comments

I’ve been wondering about the differences between the (free) Microsoft-Azure Online-Training and the (paid) AZ-303 Instructor-Led Training. After having a quick look at the „AZ-303 Exam Skills Outline“ there seems to be an 1:1-Mapping between „Exam Skills Outline“ and the instructor led training. Exam Skills Outline According to https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4psD6 the exam is made up from 15 modules: The changes to the schedule starting at 25th of May 2021 are of cosmetic nature, Microsoft fixed some typos and removed some minor AAD-sub-topics… 1) Implement and Monitor an Azure Infrastructure (50-55%)1.1) Cloud infrastructure monitoring1.2) Storage accounts1.3) VMs for Windows and Linux1.4) Automate deployment and configuration of resources1.5)Read More →

By:
On:
In: awayfromevernote
With: 0 Comments

Background My WIFI is bound to my Internet-Router and it is seperated from my home-office by an routed stateful-firewall. Some WIFI devices (for example my printer) need access to this home-office ip-range. Pi-Hole DHCP Service The DHCP-Service of my pi-hole server usually offers just dhcp-option #3 – the default-gateway. Disable DHCP-Option 3 (Default Gatway) The pi-hole Web-GUI doesn’t allow to specify additional dhcp-options, so first disable offering the default-gateway-option: which is not allowed (my opinion: a bug since this is no feature) Stop here and use another dhcp-service? Use the „Router-Option“ as fallback for „old“ clients Fortunately RFC3442 („The Classless Static Route Option for DynamicRead More →

By:
On:
In: Azure, Cloud
With: 0 Comments

Certification Path According to https://docs.microsoft.com/en-us/learn/certifications/azure-solutions-architect/ two exams AZ-303 Microsoft Azure Architect Technologies AZ-304 Microsoft Azure Architect Design are required. Online Training Online Training, free of charge – sponsored by Microsoft – is available: Surprisingly the same 9 modules for both exams, i’ve been putting them in a slightly different order: Infrastructure 4 Modules Operations Applications 3 Modules Migration sharing a common module with Business Continuity / Recovery AZ303 Instructor-Led Training The official Microsoft Instructor-Led Training for AZ303 is made up of 15 Modules: Azure Active Directory Hybrid Identities Networking VMs Load Balancing and Network Security Storage Accounts NoSQL Databases Azure SQL Databases Automate Deployment andRead More →

By:
On:
In: automation, Scripting
With: 0 Comments

Background VMware wants us to prepopulate an Excel-Sheet with SSH-Keys and SSL-Thumbprints of all ESXi-Hosts, who have been freshly deployed minutes before, which effectivly protects against man-in-the-middle-attacks – maybe a problem in US-datacenters. Beginning with VMware Cloud Foundation Release VCF 4.2 the Cloud-Builder-App verifies the „CN“ of all ESXi-SSL-Certificates, which is in default-setup set to „localhost“ (to be overwritten when connecting to the vCenter so this is seemed to be no issue) – not accepted, CN has to be set to <server-fqdn>. Solution plink.exe „plink.exe“ from the Putty-Suite allows to be called from PowerShell in automated fashion without interactive Password-Prompt. (In May 2021 there seemsRead More →

By:
On:
In: awayfromevernote, stupid defaults
With: 0 Comments

Disclaimer I don’t think, „hiding“ a webserver behind a non-standard TCP-Port is a security feature („security by obscurity“) but on the other hand restricting access to non-standard Ports seems to not increase the personal security measure, it just wastes time of anybody who needs to access such a service – and – it’s absolutely allowed to run a web-server on any port which isn’t used by another service 😉 Solution (if you (think, you) know what you’re doing) As always Add as „String“ if it’s missing: Add the Service you want to acccessRead More →

By:
On:
In: homelab
With: 0 Comments

Business Case My QNAP-NAS (TS-431X2) is slow this must not be QNAPs fault, maybe the drives (4 disks, RAID5, between 147..167 MB/second for sequential read) are the root cause adding a SSD-Cache didn’t improve performance when I had a 3-disk RAID 5 many people around the world are troubleshooting this without success so I decided to use the QNAP-NAS as a Virtual-Tape-Library for Backup-Purposes etc use my ESXi-Host as Storage-Server „Storage Server“ VM I regularily use „Nested ESXi“-Hosts for Lab Environments which should access the storage, so I decided to first give NFS a try – ESXi has no built in NFS-Server, so a smallRead More →

By:
On:
In: Azure
With: 0 Comments

According to https://docs.microsoft.com/en-us/azure/best-practices-availability-paired-regions there is a Regional-Pair to „Germany West Central“ called „Germany North“ which is missing at https://azure.microsoft.com/en-us/global-infrastructure/geographies since access is restricted to support specific customer scenarios, for example in-country disaster recovery. These regions are available only upon request by creating a new support request in the Azure portal Germany North could be found in the list (https://azure.microsoft.com/en-us/global-infrastructure/geographies/#new-regions) so it might be coming soon for general availability. List available Azure-LocationsRead More →

By:
On:
In: Scripting
With: 0 Comments

Resize Page to Fit Contents, Set Zoom to Fit Page When the drawing is ready, the size of the page will be too large or too small – „fit to contents“ might be the solution. Additionally, I prefer the Zoom of the active Window to be set that it shows the whole drawing. ResultRead More →