- 56
- 16 704
xByte Solutions
United States
เข้าร่วมเมื่อ 13 ก.พ. 2023
At xByte Solutions, we provide top-level environments for customers with mission critical sites and applications. We are a solution-oriented Enterprise Hosting provider, offering Managed Services, On-Premise and Off-Premise solutions. Our Team of experts has over 20 years of mastery in cloud solutions and are skilled practitioners in ColdFusion, Blockchain, Server Management, High Availability Solutions, Security and Application Management. We are your true full-stack IT Solution.
Ben & Ryan Show - Double Clicking into Cloud Hosting
Ben and Ryan Show Episode 5
In this episode, your hosts Ben Nadel and Ryan Brown are joined by xByte Cloud Chief Technology Officer, Dakota Clum, to double click into cloud hosting.
What are people doing to deploy dev code into cloud hosted servers
• RDP and make file changes directly on server
• FTP and apply updates to files one at time
• Azure DevOps - CI/CD (being adopted more)
• Agent can be deployed and have code deployed to traditional VPS
Load balancing on clusters
• Cloud based NAS shared storage between cloud servers
• Master - child replication
• SQL can load balance synchronization
• SQL can do active/passive for geo-failover
• Load balacing web servers needed before SQL needed most of the time
Deployment strategies
• Tradeoffs between efficiency and risk appetite
• You can evolve your processes over time
• No right or wrong answer
Scaling
• Depends on your needs
• Possible to run into issues where nodes not available on AWS
• Need to do reserved instances to get performance needs
• If you can predict when you need more load, you can do short term scaled servers
• Determine what needs scaled instead of entire application - or offload these to a separate service
Risk Appetite
• DR options - is it ok to be down for 15 minutes
• Cost of going from 4 9's of availability versus 5 9's
• For smaller deployments, do you need a separate dev server - non 0% chance that dev takes down production
Shared Hosting
• You get a website
• Share all RAM, CPU, Disk with everyone
• Noisy neighbor can take you down
• Generally shared hosting don't allow support for all ColdFusion hotfixes
• If just HTML files, it may not be an issue compared to also needing SQL
• Risk appetite of noisy neighbors
Most Common Security Issues We Have Seen In Other Environments
• Supporting file types not needed by your app allowing PHP executions
• Too many ports open exposing attack vectors
• SQL Injection when form input not sanitized
• File upload to default directories (don't use /upload)
• Allowing file executions in upload directories
In this episode, your hosts Ben Nadel and Ryan Brown are joined by xByte Cloud Chief Technology Officer, Dakota Clum, to double click into cloud hosting.
What are people doing to deploy dev code into cloud hosted servers
• RDP and make file changes directly on server
• FTP and apply updates to files one at time
• Azure DevOps - CI/CD (being adopted more)
• Agent can be deployed and have code deployed to traditional VPS
Load balancing on clusters
• Cloud based NAS shared storage between cloud servers
• Master - child replication
• SQL can load balance synchronization
• SQL can do active/passive for geo-failover
• Load balacing web servers needed before SQL needed most of the time
Deployment strategies
• Tradeoffs between efficiency and risk appetite
• You can evolve your processes over time
• No right or wrong answer
Scaling
• Depends on your needs
• Possible to run into issues where nodes not available on AWS
• Need to do reserved instances to get performance needs
• If you can predict when you need more load, you can do short term scaled servers
• Determine what needs scaled instead of entire application - or offload these to a separate service
Risk Appetite
• DR options - is it ok to be down for 15 minutes
• Cost of going from 4 9's of availability versus 5 9's
• For smaller deployments, do you need a separate dev server - non 0% chance that dev takes down production
Shared Hosting
• You get a website
• Share all RAM, CPU, Disk with everyone
• Noisy neighbor can take you down
• Generally shared hosting don't allow support for all ColdFusion hotfixes
• If just HTML files, it may not be an issue compared to also needing SQL
• Risk appetite of noisy neighbors
Most Common Security Issues We Have Seen In Other Environments
• Supporting file types not needed by your app allowing PHP executions
• Too many ports open exposing attack vectors
• SQL Injection when form input not sanitized
• File upload to default directories (don't use /upload)
• Allowing file executions in upload directories
มุมมอง: 33
วีดีโอ
Ben & Ryan Show - Adobe ColdFusion 2025 with Mark Takata
มุมมอง 5019 ชั่วโมงที่ผ่านมา
Ben and Ryan Show Episode 4 In this episode, your hosts Ben Nadel and Ryan Brown are joined by Senior Adobe ColdFusion Evangelist, Mark Takata, to talk about the upcoming Adobe ColdFusion 2025 release. This episode is packed with surprise announcements. Adobe ColdFusion 2025 • A lot of performance improvements • Big upgrade to charting - amazing themes are coming out of the box • Spreadsheet im...
Ben & Ryan Show - Freeforming IT
มุมมอง 819 ชั่วโมงที่ผ่านมา
Ben and Ryan Show Episode 3 In this episode, your hosts Ben Nadel and Ryan Brown just riff about whatever comes to their minds. Topics and tangents include disaster recovery beyond IT, scaling cloud servers, and strategies around email and video marketing. Disaster Recovery - just for IT teams • Staff in different locations • Keeping local staff online • Contingency plan for who to take over fu...
Why ColdFusion in the xByte Cloud
มุมมอง 595วันที่ผ่านมา
Here's why you should put your ColdFusion website or application in the xByte cloud Number 1 We are the ColdFusion server experts Adobe themselves asked us to speak at their conferences specifically about ColdFusion server performance optimization and security Number 2 Speed. An independent prospect performed a test and found his application was 20.7 percent faster running in the xByte Cloud co...
Ben & Ryan Show Shorties - Sessions
มุมมอง 514 วันที่ผ่านมา
In this excerpt from the Ben and Ryan Show, we talk about Justin Scott and Ben Nadel have handled session management in their ColdFusion applications. Redis Session Blog - blog.xbytecloud.com/optimizing-coldfusion-performance-reliability-and-scalability/ View the full-length video at th-cam.com/video/xV2FTlh9fX8/w-d-xo.html
Ben & Ryan Show Shorties - Roll Your Own Credit Card
มุมมอง 214 วันที่ผ่านมา
In this excerpt from the Ben and Ryan Show, I ask the question is ok to roll your own credit card processing. Surprisingly, the answer is.... it depends. Should you roll your own credit card processing • Almost always no • PCI-DSS requirements a lot lower • Even temporarily storing your info to pass to someone authenticating, your application is still in scope of PCI-DSS • Never store credit ca...
Ben & Ryan Show Shorties - Roll Your Own Auth
มุมมอง 514 วันที่ผ่านมา
In this excerpt from the Ben and Ryan Show, Ben Nadel asks the question is it really ok to roll your own Authentication (aka "Auth")? Justin Scott adds some context how customer requirements have changed their authentication. Should you roll your own auth? • You can do your own authentication (“auth”) • Businesses are often requesting to use existing single sign-on authentication (Microsoft/Goo...
Ben & Ryan Show Shorties - Passkeys
มุมมอง 4714 วันที่ผ่านมา
In this excerpt from the Ben and Ryan Show, the group talks about what happens behind the scenes with passkeys and why things are messy right now. Passkeys • Because everyone uses multiple devices, need methods to use passkeys other places • Not all applications share passkeys between devices • Many websites don’t allow multiple passkeys per account so you can only login on a single device - ca...
Ben & Ryan Show Shorties - Multiple Fields, Same String
มุมมอง 214 วันที่ผ่านมา
In this excerpt from the Ben and Ryan Show, Ben Nadel throws out an idea on taking the BCrypt and SCrypt concepts of hashing multple fields together and applying it to non-security data architectures. View the full-length video at th-cam.com/video/xV2FTlh9fX8/w-d-xo.html
Ben & Ryan Show Shorties - Migrating Hash
มุมมอง 414 วันที่ผ่านมา
In this excerpt from the Ben and Ryan Show, Justin Scott reviews his process for updating stored password hashes when you move to a more secure algorithm. How do you migrate to new password hashing algorithm • Implement code when setting password • Validate the password using old authentication • Store using new authentication • Note that the password was converted • After some set date, notify...
Ben & Ryan Show Shorties - Iterations
มุมมอง 614 วันที่ผ่านมา
In this excerpt from the Ben and Ryan Show, I ask security expert Justin Scott "why are the number of iterations variable? Why not just make them the highest possible?". Iterations for hashing • Allows you to do more as computers get better. • Tradeoff between performance and security. • Goal is to keep hashing to 500ms. • Create alerts if hashing starts to take less time so you can increase yo...
Ben & Ryan Show Shorties - Breaking Out of Prison
มุมมอง 614 วันที่ผ่านมา
Ben & Ryan Show Shorties - Breaking Out of Prison
Ben & Ryan Show - Cryptography with Justin Scott
มุมมอง 8921 วันที่ผ่านมา
Ben & Ryan Show - Cryptography with Justin Scott
Recent Adobe ColdFusion 2021-2023 Updates - Real World Experiences
มุมมอง 834 หลายเดือนก่อน
Recent Adobe ColdFusion 2021-2023 Updates - Real World Experiences
ColdFusion 2023 Update 7 and ColdFusion 2021 Update 13
มุมมอง 1138 หลายเดือนก่อน
ColdFusion 2023 Update 7 and ColdFusion 2021 Update 13
Server Clusters (Windows/Linux/ColdFusion)
มุมมอง 268 หลายเดือนก่อน
Server Clusters (Windows/Linux/ColdFusion)
Dell OpenManage Enterprise Integration with VMware vCenter
มุมมอง 1349 หลายเดือนก่อน
Dell OpenManage Enterprise Integration with VMware vCenter
Adobe ColdFusion Summit East 2024 and ColdFusion Online Summit with Mark Takata
มุมมอง 739 หลายเดือนก่อน
Adobe ColdFusion Summit East 2024 and ColdFusion Online Summit with Mark Takata
ColdFusion - Post Crash Root Cause Analysis
มุมมอง 389 หลายเดือนก่อน
ColdFusion - Post Crash Root Cause Analysis
ColdFusion - What to Collect When It Crashes
มุมมอง 269 หลายเดือนก่อน
ColdFusion - What to Collect When It Crashes
Using Live Optics as a Sys Admin Report Card
มุมมอง 989 หลายเดือนก่อน
Using Live Optics as a Sys Admin Report Card
3-6 months! Haha
Bye Bye VMWARE, welcome PROXMOX.
Very cool video, guys!! In today's world of various data handling certs and even "cyber insurance," does auth as a service shift some of the regulatory compliance and/or culpability from the customer to the provider of the service?
I've been working with ColdFusion for decades and am able to consistently deliver products faster than devs using other platforms and languages.
Always CF🎉
Super, ColdFusion makes development super fast.
Awesome!!
Thank you! Cheers!
I have a question regarding VMware's licensing policy. Previously, I purchased a perpetual license for VMware version 8, but recently VMware has changed its policy from perpetual licenses to annual subscriptions. I’m wondering if, with my current system, switching to a subscription license means I need to reinstall the entire VMware system, or can I just add the new license?
There should be no need to re-install vSphere. You simply add the new key to the host(s), or vCenter if present, then assign to the host(s). The key thing to ensure a smooth transition is to make sure the new subscription licenses you obtain have all of your currently enabled features and making sure the correct number of cores are tied to the license, including the 16C per socket minimum.
Rosella Greens
I'm honored to have been one of your favorite presentations at CF Summit. I'm also very introverted and generally don't do much conversing in the hallway track unless someone comes to me, but I have no problem when I'm "on stage" performing (ask me about my circus background sometime). To clarify the new encryption defaults, for CF 2023 update 8 and CF 2021 update 14, Adobe changed the default hashing algorithm from what they call CFMX_COMPAT (basically MD5 without support for iterations) over to SHA-256, and the default encryption algorithm from what they also call CFMX_COMPAT (a home-grown basic XOR algorithm with a 32 bit key derived from a developer-provided string) over to AES/CBC/PKCS5Padding (which can use a 128, 192, or 256 bit key generated by the generateSecretKey() function). Those are the new defaults if no algorithm is specified at all. If you specify "AES" as the encryption algorithm with no block mode then it will use AES/ECB/NoPadding which is far less secure than CBC mode. I recommend always specifying your algorithm and block mode (and IV for AES) so there is no confusion about what's coming out of those functions. On the quantum computing front, AES with a 256 bit key is currently considered "quantum safe" while other key lengths (128 and 192) are more prone to attack once quantum computers get mature (remember 128 bits is the default key length for AES when using the generateSecretKey() function if you don't specify a bit length). Great show and looking forward to more!
Yundt Point
Koby Tunnel
Buckridge Shores
Theron Lodge
Robb Gardens
Great talk, guys!! Very informative!
Its been fun. Hello Hyper-V
Absolutely NOT hyper-v loool
💕 'PromoSM'
Can I load VVF and VSS licenses into the same vcenter?
Good question - Pre-Broadcom, you could mix different tiers of vSphere licenses within the same vCenter for anything Standard and above; however, we can't find anything concrete post-Broadcom. We asked our distributor to see if they had an answer, but those answers have been extremely slow recently. We did find an argumentative Reddit post about the subject you can read for fun! • www.reddit.com/r/vmware/comments/1aen5uo/mix_of_vmware_by_broadcomlicenses_on_same_vcenter/
@@xbytesolutions according to two different vendors I work with you cannot mix licenses now. Talk about another dumb decision Broadcom has made. VMware will be missed.
@@scotimus What other vendors are you thinking about moving to?
VMware goodbye
Thanks for the shout out, guys. Apologies for my missing these until now. Looking forward to catching up on the rest. :-)
Guys, helpful stuff...but on the discussion of Zabbix, as you and some viewers may know, it's not available to install on Windows servers. While it can MONITOR a Windows instance, you have to have it on a Linux or other *nix machine. Did I miss nit, or do you have a recommendation to get the same sort of server monitoring of windows servers? Whether in the cloud or on prem?
Great observation - Zabbix does offer Docker containers which you could run on windows if you needed. Here is a link in case anyone needs it: www.zabbix.com/container_images. Zabbix can monitor any environment. If you are looking for short term performance monitoring, there is a free tool called Live Optics (app.liveoptics.com/signup/xbyte). We use it a lot to size our OnPrem server proposals. We even did a video about sysadmins can use it as a report card (th-cam.com/video/0qtaFlgGKBY/w-d-xo.html).
Are you maintaining CSP partner level with VCF ?
If we are understanding your question - if you have to be a CSP for VCF? If that is what you are asking, you can get VCF without being a CSP. However, if you're a CSP you only get the VCF option
Funtional difference between Essentials Plus and Standard version is a Storage vMotion and basic 2 vCPU Fault Tolerance features, which you didn't mention. Small set of funtions, but still it's included in Standard.
Yes, thank you for pointing that out. We did not include all the missing features - Per-VM EVC (Enhanced vMotion Capabilities) is another feature not in Essentials Plus. If you want the full breakdown of all the features, you can checkout www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/docs/vmw-datasheet-vsphere-product-line-comparison.pdf
@@xbytesolutions Per-VM EVC (Enhanced vMotion Capabilities) -> Is this the ability to vMotion across CPU generations by setting a minimum gen limit that all CPU would support, or is this an additional feature on top of being able to do that? We were using Enterprise Plus before on 10 hosts, that we replace every few years on a cycle, so EVC vMotion becomes critical to our ability to manage a cluster, if Standard doesn't support this and we need foundation, the quotes I just got basically doubles our cost from last year. So it becomes an important feature if we need to maintain that feature. Also, Standard doesn't have Distributed Switches, which we use, but we can reconfigure around it if we have too.
@@brianhayes2863 Unfortunately that is only available in Foundation. Here is a handy chart that shows the features and the compatibility - Please reach out if you need any assistance navigating options - www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/docs/vmw-datasheet-vsphere-product-line-comparison.pdf
Broadcom have just said goodbye to us and many more partners without doubt.
The big question is where is everyone going to go?
@@xbytesolutions I saw one one study referred recently which had about 600 respondents of which, IIRC, 77% were going to open source solutions, mostly KVM (probably via RedHat/Canonical/SUSE), and about 12% to Hyper-V... I don't remember the source unfortunately, or whether this was "will go/are in the process" or "thinking of...". I know one customer which is hit pretty "hard", in that they have quite a few two-node vSAN-based clusters running mostly on ROBO licenses... maybe more or less a worst case scenario with respect to the recent changes.
If you are looking for alternatives, here is a recording of a Q&A we just held talking about options for customers: www.xbyte.com/vmware-qa/
Just a suggestion...why not include the MSRP of each option? The Essentials Plus with its 96 core minimum is a very expensive option for a small shop that has say 1 or 2 Servers with 8 cores on each. In this case it would be must more cost effective to go with Standard even though the price per core is more.
Good suggestion - We'll get with the sales team and post the MSRP (assuming we are allowed to)
Here is a link to a Veeam Blog post that does a good job of walking through the financials of the new packages. With the minimum core count of 16 per processor and Essentials Plus only sold as package per 96 cores, you have to do a little mathing to make sure you are choosing the best option for now and near-term growth. community.veeam.com/blogs-and-podcasts-57/decoding-the-new-broadcom-vmware-vsphere-licensing-packages-for-small-deployments-6398
Here is a link to a follow-up video we just did that focuses on pricing - th-cam.com/video/H0f_p6-QgAs/w-d-xo.html
@ishkabibble6719 Tagging you so you can see the replies with more information on pricing (links in comments)
😴 'promo sm'
great information!
Very insightful!