Slashdot Mirror


Ask Slashdot: Little Boxes Around the Edge of the Data Center?

First time accepted submitter spaceyhackerlady writes "We're looking at some new development, and a big question mark is the little boxes around the edge of the data center — the NTP servers, the monitoring boxes, the stuff that supports and interfaces with the Big Iron that does the real work. The last time I visited a hosting farm I saw shelves of Mac Minis, but that was five years ago. What do people like now for their little support boxes?"

60 of 320 comments (clear)

  1. Little boxes by Hatta · · Score: 5, Funny

    I make them with ticky tack.

    --
    Give me Classic Slashdot or give me death!
    1. Re:Little boxes by SDrag0n · · Score: 5, Informative

      You do realize that everyone who watched weeds will be humming along right?

      --
      I don't have time to make a sig
    2. Re:Little boxes by msauve · · Score: 5, Informative

      Are you sure about that?

      --
      "National Security is the chief cause of national insecurity." - Celine's First Law
    3. Re:Little boxes by TheGratefulNet · · Score: 5, Funny

      network boxes,
      made in china,
      network boxes that go sparky-spark
      network boxes
      exploding boxes
      dangerous boxes, all the same.

      --

      --
      "It is now safe to switch off your computer."
    4. Re:Little boxes by JazzHarper · · Score: 2

      or old farts who remember Pete Seeger.

    5. Re:Little boxes by JoeCommodore · · Score: 4, Funny

      Iv'e seen Windows 8, I know what ticky tack little boxes look like.

      --
      "Enjoy what you're doing! If it becomes drudgery, you're doing it wrong!" - Jim Butterfield
    6. Re:Little boxes by connor4312 · · Score: 2

      As an American school student, I can say that it has often been shown as part of middle-school-level history class. Maybe there's some note about it in the Teacher's Edition of the textbook or something.

    7. Re:Little boxes by Em+Adespoton · · Score: 5, Funny

      There are white ones
      And more white ones
      And they all have those blinky lights
      and they're all made out of ticky tacky
      and they all fail just the same.

    8. Re:Little boxes by ThunderBird89 · · Score: 2

      Little boxes?
      "The little boxes will make you angry!"

      --
      Hyperbole: I use it liberally!
    9. Re:Little boxes by Jeremiah+Cornelius · · Score: 3, Funny

      The song was written 'bout Daly City - a Philippine colony which forms the buffer-zone between San Francisco and the United States of America.

      --
      "Flyin' in just a sweet place,
      Never been known to fail..."
    10. Re:Little boxes by hackula · · Score: 2

      Why, are you my mummy?

  2. VMs by Anonymous Coward · · Score: 2, Insightful

    put them in VMs!

    1. Re:VMs by Art+Challenor · · Score: 2, Funny

      put them in VMs!

      Great Plan! If all your servers are virtual then you don't have to worry about diesel fuel when there's a hurricane!

    2. Re:VMs by Nutria · · Score: 4, Insightful

      Call me old school, but Unix/Linux are multi-tasking. Why not just run multiple services on one OS directly on the metal?

      --
      "I don't know, therefore Aliens" Wafflebox1
    3. Re:VMs by LordLimecat · · Score: 2

      VMWare (and, I understand, all of their competitors) have this notion of clustering where one "main server" can be rebooting without causing any of their guests to suffer interruption.

      You can stuff those services onto a separate guest, but as long as things are laid out properly and you dont have some dependency for your virtual infrastructure on that guest, you can virtualize it just fine. You can even virtualize the vCenter server, though it makes bringing the virtual infrastructure back up from scratch a little bit more painful (you have to manage the servers individually until vCenter is back up).

    4. Re:VMs by mlts · · Score: 3, Interesting

      There are good reasons to separate functions. Mainly security. That way, if someone hacks the NTP server, they don't get control of DNS, nor do they get control of the corporate NNTP server, or other functions.

      The ideal would be to run those functions as VMs on a host filesystem that uses deduplication. That way, the overhead of multiple operating systems is minimized.

      What would be nice would be an ARM server platform, combined with ZFS for storing the VM disk images, and a well thought out (and hardened) hypervisor. The result would be a server that can take one rack unit, but can handle all the small stuff (DNS caching, NTP, etc.)

    5. Re:VMs by jrmiller · · Score: 2, Informative

      Not really. NTP's such a lightweight service that it runs fine on a vm. As other posters have mentioned, you certainly don't want to use the system clock as your time source, but you shouldn't do that anyway. Hopefully you're syncing with an upstream provider that syncs from a non-computer-based source. See http://tycho.usno.navy.mil/ntp.html for a good sync source (among many others). We've successfully virtualized NTP servers serving a 6000-person university.

    6. Re:VMs by Anonymous Coward · · Score: 3, Insightful

      Uhhh. because the "little boxes" and individual servers run on unicorn farts and angel tears?

    7. Re:VMs by Ost99 · · Score: 2

      Why dedup? Those VMs should not require more than 500MB-2GB each.
      Deduplication (inline) only adds complexity and sources of latency you don't need or want.
      Any small pizza box with 2x146GB drives (or 2x256GB ssd) in RAID1 should be able to handle any number of virtualized small utility guests without any deduplication.

      --
      ---- Sig. gone.
    8. Re:VMs by marcosdumay · · Score: 3, Interesting

      Well, one of the reasos is that some services get hold of port 80 (or, a few times other ports), and don't want to share it. With virtualization you can share resources with those too... But yes, those services are a minority, and probably won't need a lot of resources...

      Another reason is that you may want to give different people permission to administrate different machines... But again, except for companies that sell hosting, that's an exception.

      A third reason is that you may want to replicate your environment for backups and testing... Except that you don't need a VM to do that on Linux. You just copy the files, add two devices to /dev and run the bootloader again. It's easier than backing-up a VM in Windows.

      And I've never heard about any other reason for virtualization. I can't also think about any other. I'm lost about why sudenly so much people wants it so badly... Ok, all datacenters added specialized machines for decades because of those first two reasons I gave you above, and get some benefit virtualizing them... But the core of a datacenter (the main databases, web servers - the machies that actualy spend the day working) should run on the metal, and altought I've met several people that arguee otherwise, I've never heard any argument for virtualizing them that holds any water.

      But now, I think, maybe the HA people should try to virtualize their clusters. They have a huge amount of redundancy, and consolidating several virtual machines in a single real one can help them reduce their costs. (Ok, if you are in doubt, no, I'm not THAT stupid, it's a joke.)

    9. Re:VMs by Nutria · · Score: 2

      I'm lost about why sudenly so much people wants it so badly... Ok, all datacenters added specialized machines for decades because of those first two reasons I gave you above,

      I thought it was because young geeks and proto-managers grew up with the Curse Of Windows, where you had to run one service per machine, and then brought that flawed mindset into the Linux world.

      --
      "I don't know, therefore Aliens" Wafflebox1
    10. Re:VMs by Anonymous Coward · · Score: 2, Interesting

      Well modern hypervisors like VMWare allow you to prioritize virtual machines so that they get a higher share of scheduling time in an overcomittment scenario. Assign your ntpd server a high priority so that it doesn't have to wait in a long queue to get run time.

      Yes running time-sensitive stuff on a hypervisor is tricky but not at all impossible. It's not stupid unless you don't know what you're doing.

  3. HP Proliant MicroServer N40L by steveha · · Score: 4, Informative

    I don't work in a data center. But I think you might want to look at an HP Proliant MicroServer.

    Basically it is an AMD laptop chipset on a tiny motherboard in a cunningly designed compact enclosure. The SATA drives go into carriers that are easily swapped (but not hot-swappable). It's quiet and power-efficient. It supports ECC memory (max 8GB) and supports virtualization.

    http://h10010.www1.hp.com/wwpc/us/en/sm/WF06b/15351-15351-4237916-4237918-4237917-4248009-5153252-5153253.html?dnr=1

    Silent PC Review did a complete review of an older model (with a 1.3 GHz Turion instead of 1.5 GHz).

    http://www.silentpcreview.com/HP_Proliant_MicroServer

    SRP is $350, but Newegg has it for $320 (limit 5 per customer).

    http://www.newegg.com/Product/Product.aspx?Item=N82E16859107052

    Newegg also has 8GB of ECC RAM for about $55, so you can get one of these and max its RAM for under $400.

    I just got one and haven't had time to really wring it out, but I did do the RAM upgrade. Despite the tiny enclosure, it wasn't too painful to work on it, and I was impressed by the design. The Turion dual-core processor has a passive heat sink on it, and the single large fan on the back pulls air through to cool everything. (There is also a tiny high-speed fan on the power supply.)

    I'm going to use this as my personal mail server. It's cheap enough and small enough that I plan to have at least one put away as a hot spare; if the server dies, I'll power it down, move the hard drives to the spare, and I'll have the mail server back up within 5 minutes. Not bad for a cheap little box.

    --
    lf(1): it's like ls(1) but sorts filenames by extension, tersely
    1. Re:HP Proliant MicroServer N40L by Mark+of+the+North · · Score: 3, Interesting

      It's not rack-mountable. No IPMI either. That should be a deal-breaker for anyplace serious enough to have a rack.

      We try to virtualize anything that can be virtualized. But for those few tasks that really need to run on bare metal, we've had good luck with little Atom D525 Supermicro rackmountable boxes. We bought a few complete boxes (minus ram and storage) that Newegg billed as fanless (which was a lie). Those ran hot enough to develope problems after a few months. Ever since we've built ours up from parts (SUPERMICRO CSE-510-200B 1U rackmount server case, SUPERMICRO MBD-X7SPE-HF-D525-O server motherboard, SUPERMICRO MCP-220-00051-0N single 2.5" fixed HDD mounting bracket, GELID Solutions Model CA-PWM 350 mm PWM Y Cable, RAM and storage). About $400 and have been really reliable. Only thing I don't like is that they don't have IPMI on a dedicated port.

      But honestly, if there is any virtualization going on, there shouldn't be much need for these.

  4. Re:virtualization is the game now by Zaelath · · Score: 5, Insightful

    Virtualized NTP is about the dumbest thing I've read on /.

    Yes, worse than various conspiracy theories and fanboi wars.

  5. ESXi by nurb432 · · Score: 2, Interesting

    No little unsupportable boxes here.

    --
    ---- Booth was a patriot ----
  6. Previous gen hardware by trandles · · Score: 5, Insightful

    Last generation's compute nodes. We keep some around for utility functions after decommissioning a large cluster.

    1. Re:Previous gen hardware by pboyd2004 · · Score: 2

      We tend to keep all of this type of stuff on a couple of smaller/older servers running as VMs. This way it's simple to move them to newer hardware when we retire them and they can be moved so that we don't suffer downtime if we need to service the physical machine.

  7. Get a real time server. by attemptedgoalie · · Score: 5, Interesting

    Go get a GPS satellite receiver/time server. Actually, get two. Don't screw with time.

    THEN, virtualize the rest of the stuff. Monitoring, syslogging, management, patchers, etc.

    We've virtualized everything except for
    - a Windows DC so that it stays up if the vmware datastores or SAN eats itself in a horrible way.
    - The NIS server we have to use on our UX environment due to an ancient regulation. I'm not willing to put up HP-UX VMs for this right now, otherwise it'd be safe in a VM as well.
    - Anything we can't virtualize due to licensing/contract/support issues. So our VOIP environments, phone call recording, access control systems for the doors,

    My datacenter is getting a lot nicer to look at, and a lot easier to upgrade. I can shift servers or volumes all over the room so I can do live maintenance during the day.

    --
    My mom says I'm cool.
    1. Re:Get a real time server. by Anonymous Coward · · Score: 2

      Note: GPS timeservers can vary widely in quality. Don't assume that the most elegant package, slickest website or cheapest price equates to a solid box (remember, realtime OS's can crash too ;).

      Some of the most reliable and precise timeservers I've seen have been home-built PC based boxes.. YMMV.

  8. "Obsolete" hardware by beegle · · Score: 5, Interesting

    Those support tasks don't exactly push hardware to its limit, and most of those tasks are the kind of thing that demands a bunch of redundant servers anyway.

    Throw a bunch of "last generation" hardware at the task -- stuff from the "asset reclamation" pile. Leave a few more around as spares. Less disposal paperwork. Works just fine. By the time your last spare fails, you'll have a new generation of obsolete hardware.

    --
    --
  9. Re:virtualization is the game now by 0123456 · · Score: 5, Insightful

    To be fair, if someone cares enough about time accuracy to understand why that's a dumb idea, they should probably be using a GPS receiver instead of a PC.

  10. performance? by Chirs · · Score: 5, Insightful

    NTP server is all about consistency. If it's running in a VM and can be delayed at the whim of the host, do you think it's going to be a very good source of time?

    1. Re:performance? by profplump · · Score: 2

      I think it will be fine, so long as it's not using the CPU for a timing source.

    2. Re:performance? by TwineLogic · · Score: 4, Informative

      Exactly. The latency of response in an NTP server must be consistent in order for the algorithm to converge. It doesn't matter what timing source is used for a reference, if the network communication has variable latency, the NTP precision must degrade. It's revealing that VM proponents don't seem to understand this.

    3. Re:performance? by Anonymous Coward · · Score: 2, Interesting

      We use two of our Windows domain controllers for our time source. Those 2008 R2 machines are running on a 10 node ESX farm with about 450 other virtual machines. Those two domain controllers provide time services for about 2000 devices in our worldwide network (not just windows machine either, our switches, routers, SAN, etc). We have NEVER had a problem with NTP and synchronization.

      NTP is network time protocol. It is designed with random latency in mind. If you are going over a network, there is random latency. That latency inherent to any network is many orders of magnitude higher than any latency a virtual machine sees running on a hypervisor.

    4. Re:performance? by ls671 · · Score: 3, Interesting

      I have had best results on bare metal indeed.

      I run ntpd on bare metal along with other apps but I run ntpd in a jail (chroot like), just in case. I do reply to public requests but I do not allow queries, ntpdate and other stratum servers requests work fine but you can't ntpq -pn me for example.
      From ntp.conf:

      restrict default noquery

      By the way, I am a maniac but I am still satisfied at +/-5 ms. Please do not close my door to hard so it generates a gust of wind towards my ntp server and make it go above +/- 5ms error margin. Not maniac enough to buy a GPS although...

      --
      Everything I write is lies, read between the lines.
  11. Virtual Machines I suppose by MichaelSmith · · Score: 2

    I think its apalling that we do that. Its a horribly expensive way to work in hardware but we do it because we can't be stuffed to deal with operating systems. Most likely a single box and OS instance could do it for you if it was set up correctly.

  12. If you by JustOK · · Score: 5, Funny

    If you can't run it on your iPad, it's probably not worth running.

    --Management.

    --
    rewriting history since 2109
    1. Re:If you by TubeSteak · · Score: 2

      I'm picturing racks of overclocked iPads with a wall of box fans pointed at them.

      And then I'm imaginging the conversations that would inevitably ensue:
      "I know I fat fingered the fucking IPV6 address. YOU try typing on this goddamn touch screen"

      --
      [Fuck Beta]
      o0t!
  13. Personally at work for small things... by pjr.cc · · Score: 2

    I personally hate and despise people who put non-rackmount kit in racks...

    We use various devices.. mostly all 1ru servers of various configs... for eg there are a couple of mini-itx 1ru servers we have that have e350 based mini-itx boards (i really love the e350/e450 boards)... not quite as cheap as the hp n40 microserver, but at least its a rack format.

    Then we have a few that run virtualisation here and there for some tasks using kvm (some of those too have e350's in them as the e350's do have the virt'n extensions unlike the intel atoms)... we also have a few that run intel based i3/i5/i7 mini-itx boards... they're quite nice when you need some extra grunt...

    some others are based on super micro boards as well though (which are quite cheap and run core i3/i5/i7 cpus rather the xeons). Then some others are old 1ru xeons we no longer need for server tasks...

    1. Re:Personally at work for small things... by green1 · · Score: 2

      While I agree that the proper solution for a rack is rack mount equipment, the fact that something is not rack-mount is not an excuse for it to be a rat's nest of cables. I have installed non-rack mount equipment, there's no reason the cords can't be just as neat and tidy as the rack-mount stuff if you do it right. That said, the better answer is to smack whoever decided to go with non-rack mounted equipment in the first place...

  14. What scale data center? by sxltrex · · Score: 2

    I can't imagine trying to perform network management with a few mac minis so I'm assuming you're referring to a very small facility? Our new data center was built on 10-gig infrastructure and our NM is appropriately scaled--NetScout Infinistreams connected to Gigamon matrix switches. While the Gigamons were quite expensive they allowed us to utilize fewer Infinistreams while also providing some very cool functionality.

    It look a long time for our upper management (those with the dollars) to come around to the notion that, in order to realize the full investment made in the data center, true network management needed to be baked in from the start.

  15. Re:ARM'd n Dangerous by mabhatter654 · · Score: 2

    That's true. My company uses IBM BladeCenter servers bundled into a VM cluster. The bang-for-buck at the Time were the 4-core Opterons... That easily scaled to 4-cPUS for 16-cores.. (That could probably be higher now). The beauty of AMD. Moving into this space is that the blades could be swappable with the current hardware.

    But rather than rowed of boxes, VM is the better way to go.

  16. Soekris by Xipher · · Score: 2

    We are using a couple Soekris boxes for some basic monitoring. They are lightweight atom processors with no active cooling and it's designed with networking in min. 4 Gig-E ports on the 6501, and you can get up to 8 more thanks to 2 PCI-E slots available in the rackmount version. Since we are using an mSATA SSD on the board we have no moving parts, so nothing mechanic to fail.

    --
    I don't know everything.
  17. NTP servers are NOT about consistency by tlambert · · Score: 3, Informative

    NTP servers are NOT about consistency, they are about making badly designed protocols, such as NFS, capable of limping, instead of just falling on their face.

    If the requests on these protocols used a client timestamp for the client's idea of the current time, then the server on receiving the request could look at its idea of the current time, and arrive at a delta before it actually did anything other than enqueue the request locally.

    Then when the server responded with a non-"now" timestamp in any client response, it could apply this delta to the response value, and as far as the client was concerned, it and the server would have synchronized ideas of "now", without resorting to all of this NTP BS or worrying about clock drift, or anything.

    I lobbied very strongly to try to get this fixed in NFSv4; maybe we will get our collective heads out of our butts by NFSv5.

    1. Re:NTP servers are NOT about consistency by Anonymous Coward · · Score: 3, Interesting

      NTP servers are NOT about consistency, they are about making badly designed protocols, such as NFS, capable of limping, instead of just falling on their face.

      If the requests on these protocols used a client timestamp for the client's idea of the current time, then the server on receiving the request could look at its idea of the current time, and arrive at a delta before it actually did anything other than enqueue the request locally.

      Then when the server responded with a non-"now" timestamp in any client response, it could apply this delta to the response value, and as far as the client was concerned, it and the server would have synchronized ideas of "now", without resorting to all of this NTP BS or worrying about clock drift, or anything.

      I lobbied very strongly to try to get this fixed in NFSv4; maybe we will get our collective heads out of our butts by NFSv5.

      Are you all mad? What does improving NFS have to do with intentionally letting PC clocks drift?

      Could I go out on a limb and suggest there are reasons besides NFS to keep clocks in sync? Wow.

    2. Re:NTP servers are NOT about consistency by GeniusDex · · Score: 2

      So you say that it is best to solve this problem in each application inidividually instead of, say, running one process on each system which makes sure that the clocks stay in sync for all applications?

    3. Re:NTP servers are NOT about consistency by adolf · · Score: 2

      But if the protocol's time-dependency issues are fixed by an application, along with every other application/protocol's time-dependency issues, then fixing the protocol is superfluous because a functional system will already have a stable sense of what time it currently is courtesy of NTP. One cure for a thousand ailments.

      Would you feel better about it if NTP were wholly integrated into the kernel? Why, or why not?

  18. Why seperate boxes for tiny resource requirements? by dbIII · · Score: 2

    Why even have a dedicated server for NTP? It's not as if it's the bad old days of Win NT and one service per box due to memory leaks. If you've got special hardware for an external time source that can be hooked up to an existing server, because the actual software to hand out time consumes buggerall resources. It consumes so little that redundancy is a matter of just configuring whatever machines you've already got to be as many NTP servers as you want just at a lower stratum than whatever you really trust. They'll keep time reasonably well for a fairly long time while the custom time source is off.

  19. If you can't rack it... by funkboy · · Score: 5, Informative

    ...I don't want it in my datacenter. If you have no budget for non-revenue-generating boxes for services like DNS, NTP, etc. then upgrade the server hardware you tore out of production after the last upgrade cycle with SSDs and low-wattage processors & put it back into service for your internal needs.

    Otherwise get a few Dell R210s or some other small cheap rack server with an IPMI 2.0 BMC and get on with your business. Any money saved by buying "mini-PCs" (or whatever you want to call them) for any datacenter computing hardware you plan to rely upon at all will be burned the first time you have to drive to the datacenter and physically babysit some cheap machine because it didn't have IPMI.

  20. SOLVED: Little Boxes by Jeremiah+Cornelius · · Score: 4, Insightful

    Answer: VMware VMs.
     

    --
    "Flyin' in just a sweet place,
    Never been known to fail..."
    1. Re:SOLVED: Little Boxes by philip.paradis · · Score: 3, Insightful

      I use KVM on Debian hosts for all my production stuff, but yeah, my first thought was "those servers are all virtualized now."

      --
      Write failed: Broken pipe
    2. Re:SOLVED: Little Boxes by A+bsd+fool · · Score: 3, Interesting

      Right on the NTP virtualization (which is irrelevant), but wrong on the "bootstrap problem". I run a two private mini-DCs, one fully virtualized, the other almost. In the "almost" DC, only the pfSense box is not virtualized. It handles DNS caching, firewall duties, VPN access, and DHCP. In the second DC, even pfSense runs in a VM. The "trick" is to use the tools you have -- set the VM startup order so the VMs responsible for DNS are started first, or at least soon enough to be up before the VMs that rely on them. The ESX servers themselves do not need DNS for anything. NTP on the VMs is irrelevant. The hypervisors will do NTP to keep themselves synced, and the VMs sync through the (always installed, right?) VMWare tools (or open-vm-tools) since even running an NTP *client* in a VM is problematic and ultimately pointless.

    3. Re:SOLVED: Little Boxes by Anonymous Coward · · Score: 2, Interesting
      vSphere needs DNS if you install it with an external database server (Which I have). Yes you can get away with never requiring DNS to start your VMWare cluster, and I've done it, which is why I've decided it's just less effort and pain to have two physical DNS servers instead, which makes it a non-issue entirely.

      I also never "power on" the servers. They were powered on the first day, and except for memory upgrades, have been powered on ever since.

      I tend to plan for the worst case scenario, which is a restart from a dark data center. Given that a hurricane just passed awfully close by one of them, that seems like a valid assumption for me to make.

      Regarding NTP, I still "don't get" what you mean I guess. My ESX hosts sync to the normal NTP pool, and they are the only machines that need to use NTP. All the others are virtual and so sync via the vmware tools and not NTP.

      I have a couple of thousand physical servers. They very much need to sync their hardware clocks via. NTP. I need reliable NTP servers. NTP running on a virtual host is not reliable (the clock drifts horribly, although ESX5i is better in this regard).

  21. Re:virtualization is the game now by green1 · · Score: 2

    If you care enough to use a GPS receiver instead of a network time source, you should also care enough to get the antenna on to the roof... We have many such time sources controlling timing in the basements of buildings, but the antenna always ends up on the mast.

  22. Why not hypervisors? by SignOfZeta · · Score: 3, Interesting

    I don't operate a datacenter, but for virtualized servers in an office, I always enable the NTP server functionality in the hypervisor, have it sync to a stratum-1 time source, then advertise that address via DHCP and DHCPv6 for my guests and workstations (and visiting cell phones) to use. Being the definitive time source, I also tell the hypervisor to automatically set the clock on the guests, then give a virtualized AD domain controller (if any) the PDC FSMO role to set the Windows domain time. I have sites with two or three hypervisors running NTP, and it seems to work well. Not sure if it will scale to your environment, OP, but it may be worth mulling over.

  23. Re:old and arm by tsalmark · · Score: 2

    I wont dare tell you how much you pay per KWh but 38 watts at 9 cents per KWh would cost me just shy of $30 per year: http://www.citytrf.net/costs_calculator.htm

  24. Shouldn't even want to virtualise everything. by Let's+All+Be+Chinese · · Score: 2

    Virtualisation is great, but there are a few things that cause horrible chicken/egg problems if you virtualise them.

    So I'd reserve at least two separate boxes to "do infrastructure". DNS, NTP, remote logging, trap receiving, bastion, and so on. You simply plunk a unix on them and put the individual services in jails or the local equivalent. Don't even need much in the way of performance, so any old 1U box will do fine. Heck, a soekris or an alix board will do. Those are short enough that you can stick'em in any old wiring closet too. Great for geographically dispersing.

    If you're stumping up for infrastructure that can host hundreds of VMs, then of course that is enough capacity to also run "little boxes", but it'd be stupid to not also shell out the little extra to make your infrastructure robust, instead of risking hypervisor dependencies on not-yet booted VMs in your private cloud, or whatever you'd call it. "Seems to work" is not enough: Turn off the entire datacentre and then try and cold boot it, remotely. If it's fully virtualised including necessary basic supports, it'll take more time and trouble than if you don't virtualise the pillars on which you built up the rest.

    If all I had was exactly two boxes, I'd still run NTP and local DNS next to the hypervisor, not under a guest. NTP in particular; I've had my fill of (windows) boxes claiming to be stratum two yet being off by two minutes because they only update once a week. Of course, on a virtualised unix it'll be much less, but I don't want to find out the hard way the VM distorted the timekeeping in unexpected ways later, so this is one thing that needs its own box. There are similar scenarios for the other basics, but I'll leave them as an exercise. The gains of virtualising, saving a bit on hardware and power, simply do not outweigh the trouble when you can least afford it.

    1. Re:Shouldn't even want to virtualise everything. by larppaxyz · · Score: 2

      Heck, a soekris or an alix board will do.

      I know this is not related, but failure rate for soekris boards are close to 100% in three years. I'm not sure if problem is with power unit that they use, but very soon everything starts to fail and magic smoke comes out of soekris.