stephenyeong's blog

今年買了很多TPLink 的產品

1. 5Port Giga Hubs （因為裝了BB1000加了個BBTV 要在客廳加多一個Gigabit port…)
2. 450Mbps Dual Band Wireless PCI-E Adapter （行OpenWrt用）
3. 3支8DBi 天線（OpenWrt 用）
4. 300Mbps WirelessN USB Adapter （為了試300Mbps 2T2R所以買了）

其實以網絡產品而言，TP-Link算做得唔錯了。

蘋果是沒有原生USB 3.0的，MAC要用USB 3.0只可以透過第三方的控制器。早期只有CalDigit及LaCie有PCI-E控制器，而且付有的驅動只對應自家的產品(1)。但後來有人修改了LaCie的PXHCD.Kext，令到該驅動能在其他牌子控制器上運行(2)。

Transcend SDHC 16GB Class 6

adata CF 1GB (很久以前用來裝pfSense的CF)

SanDisk SDHC 16GB UEH-I 30MB/s

PhotoFast 366X Professional 4GB CF

Seagate 1TB SATA2 HDD in USB 3.0 External Case (日常用來BACKUP的硬碟)

由於PXHCD.Kext 未能對應USB 3.0 Hub 及其他儲存以外的裝置，Onboard  的兩個USB 3.0 口已被長期佔用。加上PXHCD.Kext 在CARD READER的支援上還有一些Plug & Play 上的問題，看來還要等蘋果推出原生USB 3.0電腦 （Ivy Bridge Mac ?）及驅動了。

Link/Reference

1. LaCie USB 3.0 Driver for Mac OS® http://www.lacie.com/more/index.htm?id=10112
   The LaCie USB 3.0 Driver for Mac OS® is for LaCie storage devices only. It does not support other USB 3.0 devices such as hubs, printers, scanners, or webcams.
2. USB 3.0 is now supported in Mac OS X http://tonymacx86.blogspot.com/2010/11/usb-30-now-supported-in-mac-os-x.html
   Patch method http://www.tonymacx86.com/viewtopic.php?f=66&t=7430&start=30
3. http://www.tgdaily.com/hardware-features/58259-apple-eyes-usb-30-for-next-gen-macs

因為kkwong話多左一塊H67N-USB3可以給用, 所以就決定升級到SandyBridge。而之前的用h55 + i3 530 應該會留給同事用吧。

換板又要買CPU，這算是Intel 最近年最騙錢的行為吧.

因為Mac OS 只有HD3000的驅動，可選的Sandy Bridge 只有五粒。分別是 i3-2105, i3-2125, i5-2405S, i5-2500K, i7-2600K ，雖然Server 版Sandy Bridge E3 也有好幾粒有似HD3000的顯示功能叫HD Graphic P3000，但未見有人成功過所以無打算買。

最後選擇了i5-2500K

在升級的過程中，因為原有H55的DSDT在這板上不斷出ERROR，基本是不能進入OS (應該是之前修改過的KEXT出事)。反覆試了好幾個方法也不能進入mac os，最後只好重裝OS。重裝的過程又法生media error (用dmg轉為iso 來燒錄安裝碟證實是不可行的)

因為重裝出錯，成個system folder沒了。只好再花些時間做好隻 iATKOS L2 USB 再試。

裝完個OS後, 發現所有User document就連Desktop icon還健在。就連Application 也全部可以執行。原來MAC OSX 所有Application儲存在 /Application 目錄下，System 目錄只是Lion 本身。

最後follow tonymacx86 個walkthrough (我無用HDMI Audio, 只用customac_mini_tuneup_kit_v3.zip就可以了。
移除Null CPU Power Management Kext後，就連Sleep也能正常使用。

總結

1. MAC OSX reinstall / upgrade 比Windows 好
2. 要製作MAC OSX的開機/安裝碟最好用返MAC OS

LINK
Intel® HD Graphics P3000 for Intel® Xeon® Processor E3-1200
tonyosx86.com Official CustoMac Mini 2011 Guide and Notes

上網無意中發現，原來NZXT 2009年設計了一隻內罝的USB HUBs，正好用來解決我電腦onboard USB 口不足問題
(V2010 機箱用2個9pin Header, Koolance TMS-200 要用一個，但EVGA X58 Classified E760只有2個9pin)。

正當考慮由美國訂一隻返香港時，發現Linke有貨…. (水貨萬歲!!)

NZXT IU01, 有3個9PIN USB Header 加 兩個USB Socket. 這個7port USB Hubs (3*x + 2 – 1x on-board = 7 port) 有跟一條 Molex 4P 轉2pin 5V 電源輸入線給一些大食的USB設備。

背面有個厚厚的雙面膠以及魔術貼。

因為手上的Wireless LAN 卡可以開幾個SSID，所以決定玩多一樣  ﹣Guest Zone。

先在ESXi 內開多一個VMNetwork – Guest 並且設定好Security ﹣Promiscuous Mode＝Accept。

並且在現有的pfSense VM及OpenWrt VM各加多一個e1000 Network Interface 並連接到Guest Zone。

OpenWrt 設定好新增的e1000界面及開多一個Bridge Interface  br-Guest

Wireless 加多一個SSID叫OpenWrtGuest，設定好一個易記的WPA Preshared Key 並開橋接到br-guest。

由於是Guest Zone，使用者不可以進入OpenWrt Web管理界面，所以Interface Protocol設定為Unmanaged

pfSense方面，同樣設定好Interface。IP、DHCP Server、Proxy Server。

最後設定Firewall Rules ，Guest Network 除了不能進入LAN Network、Management界面外，其他Traffic 就Accept。

首先，由openwrt.org下載 virtual disk image http://downloads.openwrt.org/backfire/10.03.1/x86_generic/openwrt-x86-generic-combined-ext2.vmdk

盡量下載最新版本，因為module 是跟版本的。試過10.02 的ath9k driver 是不能驅動TP-LINK TL-WDN4800 (AR9380) 。

Virtual Machine

建立一部VM，Other 2.6.x Linux (32bit)

• RAM: 32MB
• HDD: 直接用剛下載的vmdk,
• LAN: Intel e1000
• PCI Device: Wireless LAN card

啟動Virtual Machine 後，如網絡環境的IP不是192.168.1.1/24，可以在Console 輸入以下command修改IP

ifconfig br-lan [ip] netmask [netmask]

Configuration

用Browser 進入router IP，設定 LAN IP、Netmask以及root password

作為AP，LAN的DHCP應該停用。
Network->Interface->LAN->DHCP Server, Disable DHCP for this interface

Packages
可以REMOVE iptables 因為bridge 沒用

Install packages

• wpad-mini (WPA-PSK 必需)
• kmod-ath9k (Wireless LAN driver，視乎用什麼卡)

reboot  一次再設定Wireless Lan card

Wireless Lan

最基本只需要設定ESSID及Wireless Security。並且將Network 加入到 lan (bridge with LAN)

vSwitch Security

最後一步，就是設定vmware 的vSwitch Security頁內的Promiscuous Mode 一定要設定為Accept，否則wireless client不能Bridge 到LAN zone，全部OpenWrt MAC以外的packet會被 drop.

因為一些原因，要買一部價錢just below $5000的相機。在沒有任何消費雜誌在手的情況下，只好上網找。

1. 先從價格入手，到www.price.com.hk 找 $5000 以下的相機。由於想質素比較好，所以只在 “DSLR 數碼單鏡反光相機” 內找。
原來這個價位最熱門的頭五位，全部是可換鏡無反相機 （無反當單反？？）。

2. 走去對比Review，Google 到一個很好的網站可以提供更多深入比對。
http://snapsort.com/compare/Olympus-E-PL3-vs-Sony-NEX-C3 

這個Website 有好多平時覺得重要但沒有在產品規格上清楚列名的資訊。

例如Shutter lag, battery life, image quality

而這個Website Image quality 分數以 DXOMark 為基楚。

DXOMark - http://www.dxomark.com/index.php/About/In-depth-measurements/Measurements

DXOMark 基於3個因素

1. Portrait Score (color depth)
2. Landscape Score (dynamic range)
3. Sports Score (low-light ISO)

The Sensor Overall Score is an average of the Portrait Score based on color depth, the Landscape Score based on dynamic range, and the Sports Score based on low-light ISO

其中 Sports Score 是最高可用ISO值。定議最高能提供 30dB SNR的ISO。30dB SNR 足夠提供 9 EV Steps 及 18bit 的色深。

Thus low-light ISO is the highest ISO setting for a camera that allows it to achieve an SNR of 30dB while keeping a good dynamic range of 9 EVs and a color depth of 18bits.

以下是將 price.com.hk 找到$5000 以下最熱門 DSLR 中的頭3位在DxOMark.com中對比的結果。LINK

很明顯是APS-C片幅的SONY NEX-C3 在所有測試中表現最出衆，最後當然選擇了 SONY NEX-C3.

Finally, I found a free SFTP server for my file server.

http://www.k2sxs.com/silvershield/

Although it limited only one client and max 3 session on free version. However, it run as service nature and natively support file name encoding UTF8 which is enough for me.

GoodReader syncing through 3G

SilverSHielD Management Console screen

Security Settings – anti hammer support

Expert Settings – just show off how many type of SFTP / encryption method supported

Add/Edit User screen. Support Windows/AD account, command shell login

因為ESXi 5可以裝MacOS （應該支援EFI BOOT ）所以手多多走去試。

答案原來

1. ESXi 5 所指可以安裝MacOS 是指MacOS X 10.5 Server. 無法對應10.6&10.7
2. 是可以Boot EFI , 可不用Boot loader, 但ESXi 無法處理DMG。
3. 新版Mac OS 不能從IDE CD-ROM 安裝，似取消了。由於ESXi 的Virtual CD-ROM 是IDE Mode的，所以無法使用。

要解決10.7支援，要找一套叫UNLOCKER

• How to Install Retail OS X 10.6 "Snow" and OS X 10.7 "Lion" under VMware ESXi 5 – InsanelyMac Forum
• ESXi 5 Mac OS X Unlocker – InsanelyMac Forum

要安裝MacOS，最基本的方法就是用VMDirectPath 直接經Passthrough USB Flash或CD-ROM 來開機。但這個方法比較慢，大約只有4MB/S的傳輸速度。而且由Apple DMG來製作一定要用Mac機。
最快的方法是用PREBUILD USB 來安裝。

最後找到一隻已完成的VMDK，但因為來源是較舊的VMware版本，要經過vmkfsutil 修正後才能使用。

Post installation 相對實機安裝簡單，在虛擬環境只需(只能)安裝

1. VMware tools。darwin500.iso
   這個vmwaretools其實只是power state helper及修改VGA resolution。雖然不是QE／CI，但顯示反應速度在ESXi 5環境下還可接受。
2. LegacyAppleIntelPIIXATA.kext 令VM可使用IDE Virtual CD-Rom
3. Upgrade 到 Lion 10.7.2，這個Step會比較困難，因為10.7.2內的AppleLSIFusionMPT.kext 會令Mac OS 不能順利進入。解決方法有
   • a. 用Offline  install pack MacOSXUpdCombo10.7.2.dmg, 在安裝完成並提示要Reboot時，把舊有的AppleLSIFusionMPT.kext 回復來。最好可以用Kext Utiltiy 來Rebuild security及Extension cache
   • b. 用 10.7.1的安裝USB／Custom built CD開機，並在Terminal 回復AppleLSIFusionMPT.kext

   如要避免Mac OS 會使用Cache Extension, 要在Boot flag 加入 -k
   進入Mac OS後，再用Kext Utility 來Rebuild cache

最後，啟用 OS X的Sharing內的Screen Sharing ( VNC )

Links

How to Install Retail OS X 10.6 "Snow" and OS X 10.7 "Lion" under VMware ESXi 5 – InsanelyMac Forum

After few week of Mdaemon slow queue complain, 1 week of changing hardware test and 1 week of process tracing, mail queue is now stabilized.

Summarize these week study; there are few setting should help Mdaemon run faster

1. Offload Remote Queue to other server by setting delivery options [Must]
2. Use server 2008R2 with enough memory to cache more Metafile
   and calculation of enough memory = 4GB + (files count * 1KB)
   for example, total mail store with 4 million files should have 8GB or more
3. Registry tweak  (based on Performance Tuning Guidelines for Windows Server 2008 R2)
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
   NtfsDisable8dot3NameCreation=1
   NtfsDisableLastAccessUpdate=1
4. Disk defragment (no need often defragment)
5. Application disk volume alignment, Mdaemon Application ( cfilter dir), Local Queue and User folder should be on same volume
6. CPU – higher clock / better clock efficient instead of multi core
   a. we tested on 8 core 16 thread machine, it use only few thread
   b. even average load is below 50%, you will see 2.8GHz CPU perform better than 2.4GHz CPUI think Single CPU SandyBridge 2600K server will run faster than server with Dual Socket Xeon E5625

Offload Remote Queue to other server by setting delivery options

After offload Remote Queue to another Mdaemon server, you will see Incoming Queue run faster (less lockup)

Use server 2008R2 with enough memory to cache more Metafile

When huge amount of files and mail box are accessed frequently, server 2008 will cache Metafile to memory.

for example, Mdaemon folder have 4,385,755 Files, the usage of  Metafile can reach 4.7GB.

Also, more memory also can benefit windows read cache. Equallogic SAN HQ report show the read/write ratio change from 66/33 to 15/85 after system upgraded to 16GB memory. That mean 91% of read IO saved by system cache.

Application disk volume alignment

After tracing server with Sysinternals’ Process Monitor ( 3 minutes of event, data size 5.9GB!! ),

I found,

1. Mdaemon access disk in 4KB per Read/Write, it would be fine for mail sized in KB sale. However, some user send mail in Megabyte scale.
2. Mdaemon create Local Queues and Remote Queues by coping message from Inboundfor example, a email addressed to 5 local mailbox and 5 remote mail recipient with 3 different domain will do following
   5 times of ( make unique per recipient mail header + copy remaining message body in 4kB per block from Inbound to Local till EOF)
   3 times of ( copy message in 4KB per block to Remote Queue  + create *.rte to record target recipient)
3. when process Local Queue and found user have mail forwarding setting, it will create related Local Queue and Remote Queue.
   And same as Inbound Queue, working in 4KB per block pattern.
4. Local Queue will do Antivirus and SpamAssassin check, file will move to Cfilter\Temp during CFilter process
5. The final local mail will move to user mailbox

You will found that, file will  move between CFilter, Local Queue, and User Folder.
When the folder not in same disk, Mdaemon still calling filesystem MoveFileA and move between volume handled by system.
On server 2008R2, read buffer is 512KB and write block size is 64KB.

CPU – higher clock / better clock efficient instead of multi core

You will found that, upgrade from single Quad Core CPU to dual Quad Core CPU only have slightly improvement.

It is because, queue processing seems single thread (one thread scan folder, one thread move file)
However,  CFEngine, Spamassassin and  Antivirus seems running in multi-thread, so, messages waiting inside Local Queue mostly are MDAV & SpamD processed.