ThinkServer:News: Difference between revisions

Line 3:

We have moved the Asterisk virtual machine from a KVM/QEMU machine to a Xen Hypervisor. Xen is a bit closer to the metal and is now included as standard in the standard Kernel modules. We wanted to use Xen originally but the separate kernel had problems. Now it is integrated, it is a lot easier to set up and get going, with no negligible impact.

--[[User:Sam|Sam]] ([[User talk:Sam|talk]])

--[[User:Sam|Sam]] ([[User talk:Sam|talk]]) 02:53, 30 March 2017 (UTC)

== New Developments! ==

We have managed to ~~aquire~~ and enabled a domain main to the server. This is freddythechick.uk . This has allowed us to set and use more services than before. We have set up IPSec-IKEv2 connection for VPN connections to our phones. We have managed to put the website to be internet facing and have enabled TLS with Let's Encrypt so it is now trusted by all browsers, it is also ~~persistantly~~ encrypted and we have disabled unused old ciphers, only allowing AES-GCM with modern browsers. We are currently using ECDHE-RSA for key negotiation but will use ECDHE-ECDSA as soon as Let's Encrypt support it (support is coming soon). We have set up a local DNS server to redirect requests to our domain name locally to the server instead of through the Internet.

We have managed to acquire and enabled a domain main to the server. This is [https://freddythechick.uk freddythechick.uk] . This has allowed us to set and use more services than before. We have set up IPSec-IKEv2 connection for VPN connections to our phones. We have managed to put the website to be internet facing and have enabled TLS with Let's Encrypt so it is now trusted by all browsers, it is also persistently encrypted and we have disabled unused old ciphers, only allowing AES-GCM with modern browsers. We are currently using ECDHE-RSA for key negotiation but will use ECDHE-ECDSA as soon as Let's Encrypt support it (support is coming soon). We have set up a local DNS server to redirect requests to our domain name locally to the server instead of through the Internet.

Next to be sorted is possibly and e-mail server at some point - watch this space!

@@ Line 3: / Line 3: @@
 We have moved the Asterisk virtual machine from a KVM/QEMU machine to a Xen Hypervisor. Xen is a bit closer to the metal and is now included as standard in the standard Kernel modules. We wanted to use Xen originally but the separate kernel had problems. Now it is integrated, it is a lot easier to set up and get going, with no negligible impact.
---[[User:Sam|Sam]] ([[User talk:Sam|talk]])
+--[[User:Sam|Sam]] ([[User talk:Sam|talk]]) 02:53, 30 March 2017 (UTC)
 == New Developments! ==
-We have managed to aquire and enabled a domain main to the server. This is freddythechick.uk . This has allowed us to set and use more services than before. We have set up IPSec-IKEv2 connection for VPN connections to our phones. We have managed to put the website to be internet facing and have enabled TLS with Let's Encrypt so it is now trusted by all browsers, it is also persistantly encrypted and we have disabled unused old ciphers, only allowing AES-GCM with modern browsers. We are currently using ECDHE-RSA for key negotiation but will use ECDHE-ECDSA as soon as Let's Encrypt support it (support is coming soon). We have set up a local DNS server to redirect requests to our domain name locally to the server instead of through the Internet.
+We have managed to acquire and enabled a domain main to the server. This is [https://freddythechick.uk freddythechick.uk] . This has allowed us to set and use more services than before. We have set up IPSec-IKEv2 connection for VPN connections to our phones. We have managed to put the website to be internet facing and have enabled TLS with Let's Encrypt so it is now trusted by all browsers, it is also persistently encrypted and we have disabled unused old ciphers, only allowing AES-GCM with modern browsers. We are currently using ECDHE-RSA for key negotiation but will use ECDHE-ECDSA as soon as Let's Encrypt support it (support is coming soon). We have set up a local DNS server to redirect requests to our domain name locally to the server instead of through the Internet.
 Next to be sorted is possibly and e-mail server at some point - watch this space!