Hello It’s me I’m the problem
Today I finally made a business case to start moving away from Openstack for just running simple infra VMs to XCP-ng.
I was also tasked with creating a “Virtual SCIF using VDI” for running high risk software that even the CTO is not comfortable with in our DC, so I proposed the XCP-ng insanity I did two years ago and is still running but with XOA Enterprise.
Basically employee logs into XOA with LDAP, XOA is connected to the host via VPN, pfSense fully isolating the VMs, ACL gives the employee permission to only touch the stranger danger VM’s virtual console and they can do the work without the risk of something coming crawling back through the VPN tunnel.
CTO and our cloud specialist loves the setup because I demoed it working and it being battle hardened by ingesting 100GB+ of traffic monthly and it surviving a DDoS attack. Everyone else in management just don’t like the cost.
I’m upgrading the secondary site with 4x shiny new Dell PowerEdge R6525 with AMD EPYCs to replace 30x AMD Bulldozer desktop nodes and saving shitton on electricity bill, replacing a dying desktop (it’s a 3rd desktop that it lives on now) acting as a pfSense router with a refurbished Dell PowerEdge R240, getting a 3k VA UPS to the rack and a TrueNAS R20 server with 80TB of raw spinning rust shipped yesterday.
Then I’m finally getting an MDM solution put in place, we just had a demo of VMWare Workspace ONE demoed today and CTO loves it, also I forced everyone in the company to cough up their laptop’s serial number and got asset management working in ServiceNow. Oh and also annual security awareness training.
Oh and I have closed several pages of high risk issues on our last year’s security audit report by just unceremoniously shooting our last windows server in our infra in the head an hour ago
I’d do more but my body keeps insisting on crumbling down every two weeks like a jenga tower