While I am a proponent of alternatives to x86, I think Intel has finally gotten to a point where they can compete head-on with Ampere Altra and AmpereOne processors.
I'm holding final thoughts until proper testing and benchmarks can be done to see how it compares with AMD's Zen 4c (and soon 5c)-based EPYC processors and Ampere processors.
ServeTheHome: Intel Xeon 6 6700E Sierra Forest Shatters Xeon Expectations
Interesting to see Microsoft referring to data centers as “AI infrastructure,” further abstracting what they are and the resource demands that come with them.
「 Arm may be set up for a good decade long run in the datacenter, at the edge, and in our client devices, but watch out for RISC-V. Ten years from now, we might be writing the same story all over again, with one more historical ring wave added. In fact, it is hard to imagine any other alternative on the horizon 」
"We must think more deliberately about which technologies are necessary to build a better world and where it actually makes sense to roll out digital tech or AI tools. Those democratic deliberations can’t just be based on the marketing claims of tech companies, but need to account for the real impacts and material footprints of those technologies."
Une étude conclue à la hausse du nombre d'appareils uniques (Wikimedia ne peut évaluer le nombre de visiteurs uniques du fait de sa politique de respect de la vie privée) suite à l'ouverture du datacenter singapourien
@technotim As a pure overlay VPN with some DNS smarts, Tailscale really is set it and forget it simple.
It is also really easy to set up exit nodes if you want your outbound traffic to head out elsewhere (be it for geo-restrictions or privacy concerns). It'll take more effort and configuration wrangling to get it working with WireGuard.
Getting Tailscale set up on a mobile device is so much easier than it is with WireGuard (no private, public or pre-shared keys to juggle around).
For my use case and trying to work with what I already had, it grew more into a pain than it was worth. Also, I just don't like the way ACLs are done and I don't like the overhead of having to run a tunnel and other software on each node to reach another node seemlessly.
I would still recommend giving it a go to see how well it works in your scenario, see what hurdles arise, and how easy/difficult it is to work around them. You'll probably have similar experiences and headaches with Headscale and NetBird (plus the fun/pain of self-hosting the controller).
@technotim I have a side business where I colocate a server. I run ESXi on it (for now) and virtualize pfSense on it. All the other VMs are behind that firewall. Then for remote access, I have an IPsec VPN from my homelab pfSense to the colo instance of pfSense.
I have a separate VPN to a router at the datacenter to give me separate access to the management interfaces. If I didn’t have that, I would probably find some kind of separate hardware firewall like you ended up with.
One customer, Criteo in France, was actually able to close a #datacenter by switching to #Aerospike.“They’ve gone from thousands of nodes to hundreds of nodes, and that’s allowed them to get real savings,” Hensarling said. That’s not just a financial benefit but a #sustainability benefit as well. “They’re actually more able to comply with the demands to be greener, to be conscious of energy usage, and be mindful that you can accomplish more while doing that,” he said.