ZFS improves everything about systems administration. Once you peek under the hood, though, ZFS’ bewildering array of knobs and tunables can overwhelm anyone. ZFS experts can make their servers zing—and now you can, too, with FreeBSD Mastery: Advanced ZFS. This small book teaches you to: •Use boot environments to make the riskiest sysadmin tasks boring •Delegate filesystem privileges to users •Containerize ZFS datasets with jails •Quickly and efficiently replicate data between machines •split layers off of mirrors •optimize ZFS block storage •handle large storage arrays •select caching strategies to improve performance •manage next-generation storage hardware •identify and remove bottlenecks •build screaming fast database storage •dive deep into pools, metaslabs, and more! Whether you manage a single small server or international datacenters, simplify your storage with FreeBSD Mastery: Advanced ZFS.

21st-Century Data Storage ZFS, the fast, flexible, self-healing filesystem, revolutionized data storage. Leveraging ZFS changes everything about managing FreeBSD systems. With FreeBSD Mastery: ZFS, you’ll learn to: -understand how your hardware affects ZFS -arrange your storage for optimal performance -configure datasets that match your enterprise’s needs -repair and monitor storage pools -expand your storage -use compression to enhance performance -determine if deduplication is right for your data -understand how copy-on-write changes everything -snapshot filesystems -automatically rotate snapshots -clone filesystems -understand how ZFS uses and manages space -do custom FreeBSD ZFS installs Whether you’re a long-term FreeBSD administrator or a new user, FreeBSD Mastery: ZFS will help you simplify storage. Master ZFS with FreeBSD Mastery: ZFS.

CONFINE YOUR SOFTWARE Jails are FreeBSD’s most legendary feature: known to be powerful, tricky to master, and cloaked in decades of dubious lore. Deploying jails calls upon every sysadmin skill you have, and more—but unleashing lightweight virtualization is so worth it. FreeBSD Mastery: Jails cuts through the clutter to expose the inner mechanisms of jails and unleash their power in your service. You will: · Understand how jails achieve lightweight virtualization · Understand the base system’s jail tools and the iocage toolkit · Optimally configure jail hardware · Manage jails from the host and from within the jail · Optimize disk space usage to support hundreds or thousands of jails · Comfortably work within the limits of jails · Implement fine-grained control of jail features · Build virtual networks · Deploy hierarchical jails · Constrain jail resource usage · And more! Strip away the mystery. Read FreeBSD Mastery: Jails today! “This is the sequel to Git Commit Murder, right ?” /phk, creator of the jail system

Filesystems for everything! FreeBSD includes many special-purpose filesystems. FreeBSD Mastery: Specialty Filesystems takes you through these filesystems, helping you solve problems you didn’t know you have. These filesystems underlie everything from application servers to jails. You’ll learn to manage: -removable media -MSDOS and Linux filesystems -CD, DVD, and Blu-Ray disks -devfs -process filesystems -the file descriptor filesystem -the POSIX message queue filesystem -union mounts -null mounts -both memory filesystems, and when to use each -NFS versions 2, 3, and 4 -iSCSI targets and initiators -the Common Internet File System -networked disk redundancy with geom_gate and HAST -high availability storage with HAST and iSCSI -NFSv4 Access Control Lists -User Space Filesystems -FreeBSD’s Solaris-compatible automounter System administrators of any expertise level will expand their FreeBSD mastery with FreeBSD Mastery: Specialty Filesystems.

This updated edition of Michael W. Lucas' definitive volume on FreeBSD-based systems adds coverage of modern disks, the ZFS filesystem IPv6, redesigned jail and packaging systems, and virtualization, among dozens of new features added in the last 10 years. FreeBSD is the muscle behind companies like Netflix and EMC. Any place where someone does heavy lifting on the Internet, you'll find FreeBSD. This newly revised edition of Absolute FreeBSD brings FreeBSD's strengths to bear on your problems and covers FreeBSD's newest features, all in the inimitable style that has made author Michael W. Lucas' system administration books so popular. Any computer system is only as good as the system administrator's knowledge. Absolute FreeBSD teaches you everything you need to know about managing FreeBSD systems, from installation, configuration, and taking the system from "just working" to "working well." A cohesive focus on service delivery and best practice means that you can apply much of the book to other operating systems. Absolute FreeBSD dives deep into server management, taking you beyond just making things work and into understanding why they work. You'll learn: • How to best install FreeBSD to meet your needs • Which filesystem to use in your environment • How to back up and restore critical data • How to tweak the kernel, and when not to • Network configuration, from activating interfaces to selecting congestion control algorithms • How to manage UFS, ZFS, and other critical filesystems • FreeBSD's software packaging system, including how to build your own package repository • How and when to upgrade • Techniques to build your own FreeBSD • Advanced security features like blacklistd and packet filtering • How to monitor and adjust performance • Container-style virtualization with jails • Diskless systems • Panic management and bug reporting With Absolute FreeBSD you will get the solid introduction you need; and if you're a fan of the earlier editions, you will expand your skills even further.

Sudo: You’re Doing It Wrong Unix-like operating systems use a rudimentary access control system: the root account can do anything, while other users are peasants with only minimal access. This worked fine in UNIX’s youth, but now that sysadmin responsibilities are spread among many people and applications, many people need a tiny slice of root’s power. Sudo lets you divide root’s monolithic power between the people who need it with accountability and auditability. Sudo Mastery will teach you to: · design a secure sudo policy · simplify policies with lists and aliases · manage shell environments · verify system integrity via intrusion detection · deploy a single sudo policy across your enterprise · manage sudo policies via LDAP · log and debug sudo · record and replay full sudo sessions · use authentication systems other than passwords Master sudo with Sudo Mastery!

"Many users assume that their advanced filesystem is better than UFS because they have so many features—snapshots, checksums, compression, sophisticated caching algorithms, and so on—while all UFS has ever done is muck about putting data on disk. But, conversely, UFS users believe their filesystem is better for exactly the same reasons." —Hitchhikers Guide to OpenBSD Disk management is the core of system administration. Nobody can tell you how large that database is going to grow or how many files that archive must eventually support, but for everything else there’s OpenBSD Mastery: Filesystems. This guide takes you through the latest in OpenBSD storage management, including: · OpenBSD’s cross-platform storage stack · MBR, GPT, and disklabel partitions · The Unix File System · Growing, removing, and repairing filesystems · Memory file systems · The Buffer Cache · Why you need swap, and how to live with it · Coping with FAT, NTFS, EXT, and more · The Network File System · iSCSI · Software RAID · Encrypted filesystems · Encrypted installs And more! Partition yourself for success and grab OpenBSD Mastery: Filesystems now.

DNS The world’s most successful distributed database—and the most naïve. The Domain Name System is one of the Internet’s oldest protocols, designed for a network without hostile users. Intruders targeting a network start by investigating their DNS. DNS Security Extensions, or DNSSEC, hardens DNS and brings it into the 21st century. Learning DNSSEC required wading through years of obsolete tutorials, dead ends, and inscrutable standards. Until now. This new edition of DNSSEC Mastery will have DNS administrators deploying DNSSEC with industry-standard software in hours instead of weeks. You will: · Understand what DNSSEC provides · Configure your servers to resist attack · Verify your environment supports modern DNS · Debug DNSSEC and the Chain of Trust · Sign your zones and attach them to the Chain of Trust · Conceal zone data with NSEC3 · Automate DNSSEC maintenance · Roll over keys to maintain integrity · Implement DNSSEC on private networks · Securely distribute security-critical information via DNS And more! DNSSEC Mastery transforms DNS from a headache to a solution.

Transport Layer Security, or TLS, makes ecommerce and online banking possible. It protects your passwords and your privacy. Let’s Encrypt transformed TLS from an expensive tool to a free one. TLS understanding and debugging is an essential sysadmin skill you must have. TLS Mastery takes you through: · How TLS works · What TLS provides, and what it doesn’t · Wrapping unencrypted connections inside TLS · Assessing TLS configurations · The Automated Certificate Management Environment (ACME) protocol · Using Let’s Encrypt to automatically maintain TLS certificates · Online Certificate Status Protocol · Certificate Revocation · CAA, HSTS, and Certificate Transparency · Why you shouldn’t run your own CA, and how to do it anyway · and more! Stop wandering blindly around TLS. Master the protocol with TLS Mastery!

The best-selling text on SSH, newly revised and updated! Secure Shell (SSH) lets sysadmins securely manage remote systems. It’s powerful, complicated, and confusing. Lose the confusion. SSH Mastery: OpenSSH, PuTTY, Tunnels and Keys rescues you from sifting through decades of obsolete online tutorials and quickly makes you an SSH journeyman. You’ll learn to · eliminate passwords · manage access by users, groups, addresses, and more · securely move files around your network · forward graphic displays · proxy TCP connections · build SOCKS proxies · centrally manage and distribute keys and configurations · use SSH as secure transport for other applications · build virtual private networks · create Certificate Authorities for truly large scale deployment Master Secure Shell with SSH Mastery! #ssh2e