mrcharles
d6988bb35f
Root cause of intermittent DNS up/down alerts: Pi-hole's default
rate-limit (1000 queries/60s per client) was throttling Uptime Kuma
on the Cloudron VPS (tsys-cloudron, 100.107.35.78). Uptime Kuma sends
high-volume DNS queries to monitor dozens of hosts; when it exceeded
the limit, Pi-hole responded REFUSED, which Uptime Kuma detected as
DNS being down. This happened every 1-2 minutes.
Evidence: 40 rate-limiting events against 100.107.35.78 in recent
netinfra-01 Pi-hole logs. Also 10.53.0.1 (Docker bridge gateway) hit
4852 queries in a single 60s window.
Fix: Set dns.rateLimit.count=0 and dns.rateLimit.interval=0 on both
nodes (private tailnet, no DNS amplification risk). Also persisted in
docker-compose.yml via FTLCONF env vars.
Combined with prior IPv6 fix (4f82520), this resolves all known causes
of DNS flapping.
[#376]
PFVCluster
Unified infrastructure repo for the Known Element Enterprises Proxmox R&D cluster.
→ Current Status · → Documentation Index · → Agent Guidelines
Directory Structure
| Directory | Description |
|---|---|
dcinfra/ |
Data-center infrastructure: PDU (powerman/), serial console (console/), UPS (ups/) |
netinfra/ |
DNS/NTP/DHCP setup + audit scripts, DNS cluster replication (dns-cluster-setup/), switch captures (switches/), DHCP config (dhcp/) |
k8s/ |
k3s cluster setup scripts (HA control plane over Tailscale) + co-located docs |
proxmox/ |
Proxmox fleet docs (hardware audit, capacity, storage, k8s host planning) + performance tuning (perf/) |
awx/ |
Ansible AWX deployment (k3s + AWX Operator) |
tests/ |
Test suite + VM validation harness + remote.sh SSH chokepoint |
docs/ |
Server-build docs, documentation index (docmap), and archive |
archive/ |
Historical/superseded code (provisioning → replaced by KNELIAC project) |
vendor/ |
Vendored KNELShellFramework |
Quick Start
Provision a new server
sudo bash provisioning/SetupNewSystem.sh
Validate on the sandbox VM
VM_ID=6000 ./tests/vm-validation.sh all
Deploy DNS cluster
cd dns-cluster-setup/ && ./setup.sh all
Deploy perf tunings
cd perf/ && ./deploy-tuning.sh
Architecture
- Proxmox hosts: 7 standalone PVE installs managed via PDM
- DNS: Technitium (authoritative) + Pi-hole (recursive) on pfv-netinfra-01/02
- NTP: pfv-netinfra-01/02 (redundant, LAN IPs, stratum 2/3)
- Production: Cloudron VPS in Reston VA (this cluster is R&D only)
- Backups: Proxmox Backup Server (PBS)