Using Nginx as Load Balancer in Docker

-pull nginx

# docker pull nginx
# docker pull nginxdemos/hello

-run two nginx
because I want to set static ip to www1 and www2.
I need to create my own network

# docker network create –subnet= vlan10
# docker run –name=www1 –hostname=www1 –net vlan10 –ip -p 81:80 -d nginxdemos/hello

# docker run –name=www2 –hostname=www2 –net vlan10 –ip -p 82:80 -d nginxdemos/hello

-create nginx load balancer
# cat nginx.conf
upstream loadbalance {
server {
    location / {
        proxy_pass http://loadbalance;


# cat Dockerfile
FROM nginx
RUN rm /etc/nginx/conf.d/default.conf

COPY nginx.conf /etc/nginx/conf.d/default.conf

# docker build -t nginxbalancer .

# docker container run -p 80:80 -d nginxbalancer

-test accessing

it should show “Server address:”

-test shutdown both www1 and www2
# docker stop www1

# docker stop www2

test accessing

it should show bad gateway

-test run www1 again
# docker start www1
it should show “Server address:”

Replacing Acer E5-476G LCD

I have Acer Aspire E5-476G which the LCD screen has a white screen on a quarter of it.
It also has vertical lines.
It is a common problem in Acer.
I never encounter an LCD problem in Dell after using it for 6 years

After searching, I found that it has 2 types.
HD 1366×768 Glossy or FHD 1920×1080 Matte
The price difference on AliExpress is only $3, but I can’t wait for 1 month if shipping from China.

I try to fix myself because Repair Shop charges me double of the LCD price.
Which is in between $50-$70 range

After searching on Youtube, I think I can do myself.
But I have a backup plan too. Which is find a local store with the cheapest LCD price and cheapest installation fee.
Installation fee only $3.5
So I bought from a local store. HD type only $32
I have 2 options, which are doing it myself and save $3.5 or let the shop do it for me.

If I do it myself, I’ll have experience on it and will be useful if the same thing happens next time


-Phillips screwdrivers
-guitar plectrum ( a small triangle plastic). You can use any thin plastic actually (ATM or CC card)


Distinguish Original SanDisk

In Indonesia, there are 2 SanDisk Distributor. Previously 4 but now only 2 left

1. PT. Astrindo Senayasa
Mangga Dua Square, Ruko blok G No. 24-27, Jl. Gunung Sahari Raya no. 1 Jakarta Utara 10730 Indonesia
Tel: +6221 2938 2288 Fax: +6221 2938 2289

“GENUINE PRODUCT ASTRINDO” hologram on the package

2. PT. Datascrip
Jl Selaparang Blok. B-15 Kav. 9 Komp. Kemayoran Jakarta Pusat 10610 Indonesia
Tel: +6221 6544515 ex. 280 Fax: +6221 6544811-12

“DATASCRIP” hologram on the package

Hologram Datascrip
Made in China
Font thinner
2019-05-29 13_00_18-SanDisk.pdf - Foxit Reader.png
2019-05-29 13_02_27-SanDisk.pdf - Foxit Reader.png
-check Read/Write test with Android “A1 SD Bench” app
-check with Windows H2testw app
2019-05-27 22_22_13-H2testw _ Progress.png

Automatically backup config to scp or tftp when “write mem”

In Cisco, I can automatically backup config using scp or tftp to other location every time I issue “wr me”

How to achieve the same in other brand?

path scp://root:eve@$h










iDrac Network connection has been dropped

Using iDrac Virtual Console
‘The viewer has terminated
Reason : The network connection has been dropped.’

Edit C:\Program Files (x86)\Java\jre1.8.0_181\lib\security\
jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, DES40_CBC, RC4_40

Recovery partition shown up on my Desktop

Since update windows 10 to update 1803, recovery partition shown up as drive D on my Desktop.
Here how to hide it
-run cmd as Administrator
> diskpart
DISKPART> list vol
  Volume ###  Ltr  Label        Fs     Type        Size     Status     Info
  ———-  —  ———–  —–  ———-  ——-  ———  ——–
  Volume 0     E                       DVD-ROM         0 B  No Media
  Volume 1     D                NTFS   Partition    450 MB  Healthy
  Volume 2     C                NTFS   Partition   1862 GB  Healthy    Boot
  Volume 3                      FAT32  Partition    100 MB  Healthy    System
DISKPART> select vol 1
Volume 1 is the selected volume.
DISKPART> remove letter=d
DiskPart successfully removed the drive letter or mount point.

Fiber Cable

2018-05-17 10_54_38-Fiber Cable - Evernote










OM1,OM2,OM3 and OM4 Multimode Fibers
* Color – Orange
* Core Size – 62.5um
* Data Rate – 1GB @ 850nm
* Distance – Up to 300 meters
* Applications – Short-Haul Networks, Local Area Networks (LANs) & Private Networks
* 62.5/125 Multimode Duplex Fiber Cable
* Color – Orange
* Core Size – 50um
* Data Rate – 1GB @ 850nm
* Distance – Up to 600 meters
* Generally used for shorter distances • 2x Distance Capacity of OM1
* Applications – Short-Haul Networks, Local Area Networks (LANs) & Private Networks
* OM2 Fiber Optic Multimode Cable

OM3 – Laser-Optimized Multimode
* Color – Aqua
* Core Size – 50um
* Date Rate – 10GB @ 850nm
* Distance – Up to 300 meters
* Uses fewer modes of light, enabling increased speeds
* Able to run 40GB or 100GB up to 100 meters utilizing a MPO connector
* Applications – Larger Private Networks
* 10 Gigabit Laser Optimized Aqua OM3 Fiber Optic Cables

OM4 – Laser-Optimized Multimode
* Color – Aqua
* Core Size – 50um
* Data Rate – 10GB @ 850nm
* Distance – Up to 550 meters
* Able to run 100GB up to 150 meters utilizing a MPO connector
* Applications – High-Speed Networks – Data Centers, Financial Centers & Corporate Campuses
* OM4 50µ – Multimode 10Giga/550m optimized Cables

What Is OM5 Fiber?
According to the ISO/IEC 11801, OM5 fiber specifies a wider range of wavelengths between 850nm and 953nm. It was created to support short wavelength division multiplexing (SWDM), which is one of the many new technologies being developed for transmitting 40Gb/s and 100Gb/s. In June 2016, ANSI/TIA-492AAAE, the new wideband multimode fiber standard, was approved for publication. And in October of 2016, OM5 fiber was announced as the official designation for cabling containing WBMMF (Wide Band Multimode Fiber) by ISO/IEC 11801. From then on, OM5 may be a potential new option for data centers that require greater link distances and higher speeds.

SC to Ethernet Converter

SFP to Ethernet Converter
A simplex fiber cable consists of a single strand of glass of plastic fiber. Simplex fiber is most often used where only a single transmit and/or receive line is required between devices or when a multiplex data signal is used (bi-directional communication over a single fiber).

A duplex fiber cable consists of two strands of glass or plastic fiber. Typically found in a “zipcord” construction format, this cable is most often used for duplex communication between devices where a separate transmit and receive are required.

APC (Angled Physical Contact)
APC connectors feature a fiber end face that is polished at an 8-degree angle
APC connectors are green
APC can only be connected to APC
APC has better performance than UPC
UPC (Ultra Physical Contact)
UPC connectors are polished with no angle
UPC connectors are blue
Single Mode
Single Mode fiber optic cable has a small diametral core that allows only one mode of light to propagate. Because of this, the number of light reflections created as the light passes through the core decreases, lowering attenuation and creating the ability for the signal to travel further. This application is typically used in long distance, higher bandwidth runs by Telcos, CATV companies, and Colleges and Universities.
Multimode fiber optic cable has a large diametral core that allows multiple modes of light to propagate. Because of this, the number of light reflections created as the light passes through the core increases, creating the ability for more data to pass through at a given time. Because of the high dispersion and attenuation rate with this type of fiber, the quality of the signal is reduced over long distances. This application is typically used for short distance, data and audio/video applications in LANs. RF broadband signals, such as what cable companies commonly use, cannot be transmitted over multimode fiber.

Upgrade Brocade or Qlogic BR-1020 in ESXi

-Download from

Upgrade firmware
-download “Multi-Boot Code for BR- Series Adapters LiveCD” from
and boot from it
# bcu boot –update brocade_adapter_boot_fw_v3-2-7-0 -a

# unzip
# esxcli brocade bcu –command=”boot –update brocade_adapter_boot_fw_v3-2-7-0 -a”

to install network driver
# unzip
# esxcli software vib install -d /tmp/
# reboot

to install fc driver
# unzip
# esxcli software vib install -d /tmp/
-Geting WWN’s for all storage adapters with ESXCLI
# esxcli storage core adapter list | grep -i fc | awk ‘{print $4}’

-to uninstall fc driver
# esxcli software vib remove -n scsi-bfa
# reboot
-to connect BR-1020 twinax, we need Brocade, Cisco or EMC active twinax

Brocade Basic Configuration

-to skip pagination on every show command
> skip-page-display

-to set hostname
> switchname SAN1

-to set ip address
> ipaddrset

-to set dns
> dnsconfig

-to show current date
> date

-to set ntp server
> tsclockserver

-to show current timezone
> tstimezone
Time Zone : US/Pacific

-to change timezone
> tsTimeZone –interactive
Please identify a location so that time zone rules can be set correctly.
Please select a continent or ocean.
1) Africa
2) Americas
3) Antarctica
4) Arctic Ocean
5) Asia
6) Atlantic Ocean
7) Australia
8) Europe
9) Indian Ocean
10) Pacific Ocean
11) none – I want to specify the time zone using the POSIX TZ format.
Enter number or control-D to quit ?1
Please select a country.
1) Algeria 18) Gabon 35) Rwanda
2) Angola 19) Gambia 36) Sao Tome & Principe
3) Benin 20) Ghana 37) Senegal
4) Botswana 21) Guinea 38) Sierra Leone
5) Burkina Faso 22) Guinea-Bissau 39) Somalia
6) Burundi 23) Kenya 40) South Africa
7) Cameroon 24) Lesotho 41) Spain
8) Central African Rep. 25) Liberia 42) Sudan
9) Chad 26) Libya 43) Swaziland
10) Congo (Dem. Rep.) 27) Malawi 44) Tanzania
11) Congo (Rep.) 28) Mali 45) Togo
12) Cote d’Ivoire 29) Mauritania 46) Tunisia
13) Djibouti 30) Morocco 47) Uganda
14) Egypt 31) Mozambique 48) Western Sahara
15) Equatorial Guinea 32) Namibia 49) Zambia
16) Eritrea 33) Niger 50) Zimbabwe
17) Ethiopia 34) Nigeria
Enter number or control-D to quit ?1
The following information has been given:
Therefore TZ=’Africa/Algiers’ will be used.
Local time is now: Wed Oct 28 15:01:38 CET 2015.
Universal Time is now: Wed Oct 28 14:01:38 UTC 2015

-to show domain ID
> fabricshow
Switch ID Worldwide Name Enet IP Addr FC IP Addr Name
2: fffc02 10:00:00:60:69:e0:01:46 “ras001”

-to set domain ID
1. Connect to the switch and log in on an account assigned to the admin role.
2. Enter the switchDisable command to disable the switch.
3. Enter the configure command.
4. Enter y after the Fabric parameters prompt.
Fabric parameters (yes, y, no, n): [no] y
5. Enter a unique domain ID at the Domain prompt. Use a domain ID value from 1 to 239 for normal operating mode (FCSWcompatible).
Domain: (1..239) [1] 3
6. Respond to the remaining prompts, or press Ctrl-D to accept the other settings and exit.
7. Enter the switchEnable command to re-enable the switch.

-to change hostname
> switchname SAN1
The prompt does not change to the new switch name until after you log in again

-to save config
> cfgSave

-to upload config
> configUpload

-to restore config
> configDownload

-to upgrade both secondary and primary firmware
> firmwaredownload
At a high level the upgrade process goes as follows:
The Fabric OS downloads the firmware to the secondary partition.
The system performs a high availability reboot (haReboot). After the haReboot, the former secondary partition is the primary partition.
The system replicates the firmware from the primary to the secondary partition.

-to show current firmware
> firmwareshow

-If you may want to test the firmware first and have an option to roll-back.
To accomplish that you can use -s key and disable auto-commit
> firmwaredownload -s
Switch will upload the firmware to the secondary partition, switch secondary and primary partitions after a reboot, but won’t replicate the firmware to the secondary partition.

-You can use the following command to restore firmware back to the previous version
> firmwareRestore
-Or if you’re happy with the firmware, commit it to the secondary partition:
>  firmwareCommit

Important Notes
When downloading firmware for your switch, make sure to use switch’s vendor web-site. EMC Connectrix DS-300B, Brocade 300 and IBM SAN24B-4 are essentially the same switch, but firmware and supported versions for each OEM vendor may slightly vary. Here are the links where you can get FC switch firmware for some of the vendors:
-EMC: sign in to > find your switch model under the product section and go to downloads
-Brocade: sign in to > go to Downloads section > enter FOS in the search field
-Dell: a subset of Fabric OS versions, which are tested and approved by Dell
-IBM: and are the links where you can download FOS for IBM switches. You can also go to, search for the switch in the Product Finder and find FOS under the “Downloads (drivers, firmware, PTFs)” section

-to reboot
> reboot

-to shutdown
> sysshutdown

-to show CLI history
> clihistory
CLI history
Date & Time Message
Thu Sep 27 04:58:00 2012 root,, firmwareshow -v

-to Downloading a configuration from one switch to another switch of the same model
1. Configure one switch.
2. Use the configUpload command to save the configuration information. Refer to Configuration file backup on page 137 for more information.
3. Run configDefault on each of the target switches, and then use the configDownload command to download the configuration file to each of the target switches. Refer to Configuration file restoration on page 139 for more information

-to view the changes, use cfgshow
> zonecreate sloth, “b*; 10:00:00:00:01:1e:20:20”
> cfgsave
> cfgenable
> cfgshow
Defined configuration:
zone: matt 30:06:00:07:1e:a2:10:20; 3,2
zone: sloth bawn; bolt; bond; brain; 10:00:00:00:01:1e:20:20 alias: bawn 3,5; 4,8

-to show license
> licenseshow
Integrated Routing Ports on Demand license
Capacity 128

> version
Made on: Mon Feb 11 20:36:38 2008
Flash: Wed Jan 7 15:33:34 2009
BootProm: 4.6.6

> diagshow
Diagnostics Status: Tue Sep 07 23:41:38 2010
Slot: 0 UPORTS
Port BPort Diag Active Speed FrTX FrRX LLI Errs Loopback
0/0 1 OK DN 4G Auto — — —
0/1 2 OK DN 4G Auto — — —
0/2 5 OK DN 4G Auto — — —
0/3 7 OK DN 4G Auto — — —
0/4 0 OK DN 4G Auto — — —
0/5 3 OK DN 4G Auto — — —
0/6 6 OK DN 4G Auto — — —

> switchshow
switchName: DS_5000B
switchType: 58.2
switchState: Online
switchMode: Native
switchRole: Principal
switchDomain: 1
switchId: fffc01
switchWwn: 10:00:00:05:1e:90:91:dc
zoning: OFF
switchBeacon: OFF
Area Port Media Speed State Proto
0 0 — N4 No_Module
1 1 — N4 No_Module
2 2 — N4 No_Module
3 3 — N4 No_Module
4 4 — N4 No_Module
5 5 — N4 No_Module
6 6 — N4 No_Module
7 7 — N4 No_Module

> switchshow -portname
switchName: sw0
switchType: 66.1
switchState: Online
switchMode: Native
switchRole: Principal
switchDomain: 1
switchId: fffc01
switchWwn: 10:00:00:05:1e:82:3c:2a
zoning: OFF
switchBeacon: OFF
FC Router: OFF
Fabric Name: switch_test
Allow XISL Use: OFF
LS Attributes: [FID: 128, Base Switch: No, Default Switch: Yes, Address Mode 0]
Index Port PortWWN Name
0 0 20:00:00:05:1e:82:3c:2a port0
1 1 20:01:00:05:1e:82:3c:2a port1
2 2 20:02:00:05:1e:82:3c:2a port2
3 3 20:03:00:05:1e:82:3c:2a port3
4 4 20:04:00:05:1e:82:3c:2a port4
5 5 20:05:00:05:1e:82:3c:2a port5
6 6 20:06:00:05:1e:82:3c:2a port6
7 7 20:07:00:05:1e:82:3c:2a port7

-to show the portshow output
> portshow 28
portIndex: 28
portName: sw78.E_PORT.28
portHealth: HEALTHY
Authentication: None
portDisableReason: None
portCFlags: 0x1
LocalSwcFlags: 0x0
portType: 18.0
POD Port: Port is licensed
portState: 1 Online
Protocol: FC
portPhys: 6 In_Sync portScn: 16 E_Port Trunk master port Flow control mode 4
port generation number: 0
state transition count: 1

-use secCryptoCfg CLI to disable TLS – example below is from FOS 7.4 but you should be able to work it out for 8.0 or 8.1, too (this is adapted from a KB article)
FOS 7.4 (admin) supports display and modification of the default //selected// cipher suite (a subset of the above //supported// list) as follows:
admin> seccryptocfg –show
SSH Cipher List          : aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc
SSH Kex Algorithms List  : ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
SSH MACs List            : hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha2-512

If you were interested only in SSL (especially with respect to TLSv1.2) as part of the HTTPS cipher list, you would be concerned with the top line, as follows, as the other ciphers are SSH related (which do not use SSL/TLS):
We can query for more details about //selected// ciphers using the openssl command, but with the FOS selection string:
root> openssl ciphers -v ‘!ECDH:!DH:HIGH:-MD5:!CAMELLIA:!SRP:!PSK:!AESGCM’
AES256-SHA256           TLSv1.2 Kx=RSA      Au=RSA  Enc=AES(256)  Mac=SHA256
AES256-SHA              SSLv3 Kx=RSA      Au=RSA  Enc=AES(256)  Mac=SHA1
DES-CBC3-SHA            SSLv3 Kx=RSA      Au=RSA  Enc=3DES(168) Mac=SHA1
AES128-SHA256           TLSv1.2 Kx=RSA      Au=RSA  Enc=AES(128)  Mac=SHA256
AES128-SHA              SSLv3 Kx=RSA      Au=RSA  Enc=AES(128)  Mac=SHA1
We can see that FOS limits its selection of the support ciphers to these five above, which include TLSv1.2, so a client that might support many cipher suites would only successfully negotiate one of these five with the switch.

If you wish to reduce the FOS cipher selection even further you could, for example, remove the SSLv3 suites, by using the ‘!SSLv3’ added at the end of this selection string, which we are using to display a further subset of ciphers:
root> openssl ciphers -v ‘!ECDH:!DH:HIGH:-MD5:!CAMELLIA:!SRP:!PSK:!AESGCM:!SSLv3’
AES256-SHA256           TLSv1.2 Kx=RSA      Au=RSA  Enc=AES(256)  Mac=SHA256
AES128-SHA256           TLSv1.2 Kx=RSA      Au=RSA  Enc=AES(128)  Mac=SHA256
This gives you the selection string that you would need to supply to the folowing FOS (admin) command “seccryptocfg”, to reduce the selection to the TLSv1.2 suites from the selection already done in FOS (note that http is restarted to adapt to the change):
admin> seccryptocfg –replace -type https -cipher ‘!ECDH:!DH:HIGH:-MD5:!CAMELLIA:!SRP:!PSK:!AESGCM:!SSLv3’
This command requires the daemon(s) HTTP to be restarted.
Existing sessions will be terminated.
Please confirm and provide the preferred option
Press Yes(Y,y), No(N,n) [N]:y
HTTP cipher list configured successfully.

Finally, we check the new list of FOS selected ciphers as follows:
admin> seccryptocfg –show
SSH Cipher List          : aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc
SSH Kex Algorithms List  : ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
SSH MACs List            : hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha2-512