Timeline for Ransomware-resilient Linux Samba file server
Current License: CC BY-SA 3.0
14 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Mar 25, 2018 at 17:45 | vote | accept | user149408 | ||
Mar 17, 2018 at 19:06 | answer | added | user149408 | timeline score: 1 | |
Nov 22, 2016 at 15:39 | comment | added | Out of Band | I never took exact measurements. Like you I was taken in by the cow properties of the file system. An older version of Ubuntu used it to handle recovery after aborted system upgrades (e.g. by taking a snapshot beforehand and rolling back if necessary) and the system became very sluggish as a result, much more so than a comparable system which used ext4 or a slightly older one with reiserfs. I traced it back to btrfs not performing well under high load, but like I said, that was in the past (about 24 - 18 months ago), so it might have been a problem with a specific btrfs version. | |
Nov 22, 2016 at 14:50 | comment | added | user149408 | @Pascal can you elaborate (e.g. what kind of operations are problematic, how badly does performance decrease)? With a file server, the bottleneck tends to be the network connection, thus a moderate decrease in filesystem performance might not even have a real impact. | |
Nov 21, 2016 at 19:15 | comment | added | Out of Band | I've had some bad performance problems with btrfs in the past. Make sure its good enough for you before using it on a production machine. | |
Nov 21, 2016 at 19:12 | answer | added | Out of Band | timeline score: 2 | |
Nov 21, 2016 at 10:20 | history | tweeted | twitter.com/StackSecurity/status/800645070290448384 | ||
Nov 20, 2016 at 20:55 | comment | added | user149408 | Thanks, that was a good pointer. With periodic snapshots, I'd be somewhat worried about lots of redundancy – but digging down a bit deeper, the copy-on-write approach found in ZFS and Btrfs is indeed the core of what I had in mind. | |
Nov 20, 2016 at 20:15 | comment | added | tlng05 | Check out FreeNAS backed by ZFS. ZFS allows you to take periodic snapshots of the filesystem. If a ransomware attack occurs, you simply revert to a previous snapshot. | |
Nov 20, 2016 at 20:07 | history | edited | user149408 | CC BY-SA 3.0 |
typo
|
Nov 20, 2016 at 19:58 | history | edited | user149408 | CC BY-SA 3.0 |
added criterion for characteristics of known ransomware
|
Nov 20, 2016 at 19:36 | answer | added | J.A.K. | timeline score: 1 | |
Nov 20, 2016 at 16:35 | review | First posts | |||
Nov 20, 2016 at 16:44 | |||||
Nov 20, 2016 at 16:33 | history | asked | user149408 | CC BY-SA 3.0 |