4 ms·
I would like to see real statistics but my gut feeling from running read/write intensive data applications on SSD and ECC RAM is that both of them fail often en
by elif 3y ago
I would like to see real statistics but my gut feeling from running read/write intensive data applications on SSD and ECC RAM is that both of them fail often enough that this move is somewhat lateral in terms of resiliency.
But in terms of clawing raw performance decimals, I applaud the effort. This would be a fun redis project.
- stephen_g 3y agoThat's not the point - they promise to keep no logs, and the best way to demonstrate that they don't is to not even have any fixed storage in the servers at all (they presumably netboot from a read-only image). So they have done this with their VPN servers, now they are rolling out the strategy to DNS servers as well.
- elif 3y agoThat's fine but as long as it is connected to a network you cannot prove a system to be log-free. The majority of systems I've worked on used a message queue of some kind for logging rather than a file on disk. I suppose it could be useful to expedite downtime in the case that they are subpoenaed, but I doubt claiming to be diskless would prevent any subpoena.
- bragr 3y agoWith this kind of security, you're more guarding against your servers being seized or intelligence agency installing an implant. > I doubt claiming to be diskless would prevent any subpoena It does in Sweden. They've repeatedly squashed subpoenas > long as it is connected to a network you cannot prove a system to be log-free. Nothing is perfect. If you read their audits, it's clear admins could get at your traffic if they wanted
- ThePowerOfFuet 3y agoThis is why they have their architecture audited (and release the audit reports). https://mullvad.net/en/blog/2022/6/22/vpn-server-audit-found-no-information-leakage-or-logging-of-customer-data/ https://mullvad.net/en/blog/2022/6/22/vpn-server-audit-found...
- ziddoap 3y ago>but I doubt claiming to be diskless would prevent any subpoena. It has already. See https://news.ycombinator.com/item?id=38220769 https://news.ycombinator.com/item?id=38220769
- Thaxll 3y agoHow do they troubleshoot issues without logs exactly?
- waynesonfire 3y agoLogging doesn't require disks, the logs can be sent over the network.
- Lord-Jobo 3y agoYou've seen ECC fail often enough? Ours has been incredibly reliable, but we don't have enormous bandwidth. do you have a data sheet or anything showing failure rates?