 So there's a new version of FreeNAS for a new update for FreeNAS. It's 11.1U6. It's a minor update But there's some security patches in here. We're gonna talk about a couple of them. There's a short video about them So I've loaded my test machine with it. I've loaded a few other machines with it. None of them have had any problems I have not had time to load our system with it here at our office, but it's quickly on my to-do list So there's a few changes in here. I'll leave the link to this right here This is all the details you can click and dig into the bugs themselves But a couple of my thought were interesting is they use 4k jumbo cluster pool for all jumbo frames until Elicator problem is fixed for the 9k jumbo cluster and let's talk about what that is So this is my 10 gigabit connection on my machine And I'm not having any of the problems are talking about here, but apparently some people are So I've got the framing because this is a direct connection between my 10 gigabit card and the 10 gigabit card in my Zen server and I've got an MTU of 9,000 which allows more bits essentially to be put in each frame of the network that's sent Now what they said it becomes a problem is you should end up seeing a bunch of delayed or denied clusters When it's running this is up and running. I just ran this tool It is not saying and until I ran was net status M. So to give you some statistics on The network itself so I haven't seen this problem But apparently some people have and it causes under high load a Lot of performance issues and degradation like I said, I have not seen this a few people actually asked me specifically if I'd seen it I have not my system even though it's still u5 is not experienced this but this is one of the things that they Added as a update so you can follow this if you're experiencing that problem Well, this is probably one of those pulling your hair up moments for slow reads And I may have experience on the NFS side I've not seen it on the ice because he said it all but I know on NFS. I've seen some issues When you're storing things on NFS from other Linux machines, so maybe it'll fix that in the future I don't usually run it. I've only run NFS as a some testing and when I'm dumping files I did notice a little slower Samba seems to work better than NFS for dumping file shares across when you're connecting Linux boxes to Freenast that's just my experience. I believe it has something to do with the synchronous right I've looked into the issue a long time ago But I haven't experienced this problem, but they're working on a fix for it if you are trying to sort that out So that's an interesting bug This one is a little bit interesting As I've actually seen this before now. This has been observed when two customers who accidentally turned on DC role while joined active directory when the DC role name service switches to 1 2 7 oh 1 turning off domain controller services To does not restore to a proper state the reason I don't see this very often, but I have seen it is Mostly when we join things to an active directory server We don't remove them from it But I do know I have seen when our testing server when I tried to remove from active directory It caused all kinds of errors and the machine got broken and we were playing with the DC and like I said We were doing some of the testing so it's kind of an edge case But if you're removing and taking things off or in this case, it seems like making the machine itself a DC It does not properly rebuild resolve.com. So that's not our fix that they have in there, which is definitely good Use Freenast specific fork of IO cage IO cage is something I've been learning a lot more about. It's the jail system within Freenast It's very similar to like a container system and they've been doing a lot of updates to it I'm gonna be working on a video on how it works But it's once you learn kind of the basics of IO cage It is a very powerful tool to allow your Freenast and some of those extra CPU cycles You may not be using or in the case of myself like I use it to run syncing directly on Freenast You put things in these cages for both security and importability to make them easy to manage As their own system and not interfere directly with the Freenast operating system because they're running in a jail in there Very similar to virtualization, but a little bit different You can go Google the difference between jails and containers and you'll get the same idea that it's it's very Different in terms of compared to virtualization jails are very lightweight very simple It's just like containers are jails and containers being very similar But virtualization being very different because you're virtualizing time operating system So go ahead and if you're interested in digging more in there But they are I am going to be doing some more videos on IO cage And this was a problem in the beta versions of the 11 to Understanding which version of IO cage it was using so that's I'm glad that they're working a lot towards that This one's a little odd to me encrypt cloud credentials Apparently if I understood this properly from the command line You were able to get an unencrypted copy of the cloud credentials I mean I receive someone's at root level of your system. You have some other issues, but It's important To encrypt these so I Probably thought that was interesting that if you access the dv file directly You would be able to see the secret key that connects your cloud credentials to the buckets and it's not been fixed and encrypted So yeah, there's definitely an issue Why they chose to store it that way but you know mistakes sometimes get made and now they're being stored now This does not like I said represent some it's not exposed to the public internet But it is exposing it for people who have access to your database But at the same time if they have root level access to the database that controls your free NAS You probably have some other issues as well Make sure you encrypt all that and I'm glad that this database is getting encrypted Finally an update to samba to address all the august cvs This brings us up to date with the version of samba so we can close out some of the Issues on there is there's been some interesting denial of service attacks Against the samba protocol. So it's important that these updates get loaded Most of them don't result in in terms of with free NAS like they do in windows leading to an exposure, but they do Create a lot of denial service and denial of service or causing some of the crash is The particular bug that is the catalyst often for getting into the systems and Going that step further into actually turning into a real exploit But they did have they covered quite a few of these cvs right here with the latest version samba So it's a really good reason to update to the latest version if you're using samba at all to the u6 Well, I'll leave a link below to the entire list because maybe there's other things in here that are really important to you There's all kinds of other Things they did which is great. They're always progressing always working further If you do find a bug starting a forums issue a bug. This is how they get fixed Don't just complain about them, you know, be active and engaging with the community with these open source projects. All right, thanks Thanks for watching. If you like this video, go ahead and click the thumbs up Leave us some feedback below to let us know any details what you like and didn't like as well because we love hearing a feedback Or if you just want to say thanks, leave a comment If you want them to be notified of new videos as they come out go ahead and subscribe and the bell icon that lets YouTube know that you're interested in notifications. Hopefully they send them As we've learned with you too Anyways, if you want to contract us for consulting services You go ahead and hit laurance systems dot com and you can reach out to us for all the projects that we can do and help You we work with a lot of uh small businesses it companies even some large companies And you can farm different workout to us or just hire us as a consultant to help design your network Also, if you want to help the channel in other ways, we have a patreon We have affiliate links. You'll find them in the description You'll also find recommendations to other affiliate links and things you can sign up for on laurance systems dot com Once again, thanks for watching and i'll see you in the next video