Author Topic: complexity for the sake of complexity is dumb  (Read 478 times)

41magsnub

  • friend
  • Senior Member
  • ***
  • Posts: 7,579
  • Don't make me assume my ultimate form!
complexity for the sake of complexity is dumb
« on: November 12, 2010, 04:21:25 PM »
My company just acquired one of our competitors.  I am going through this other company's data center and it is killing me...  it is really helpful that their network admin quit and is not taking phone calls.

They have at my current count 35 windows server instances for their LAN.  They have dedicated domain controllers, dedicated DNS servers, dedicated WINS servers (seriously?), dedicated DHCP servers, dedicated file servers, dedicated print servers, dedicated IAS servers, and so on and so forth.  I even found an old half-life server!  I haven't even inventoried all the web site specific installs which are at least 10 more.  Most of these are virtual machines on top of VMWare.  This is a small consulting company with 9 employees plus their hosting agreements.  I'm worried about licensing violations...  I hope our owner and the business attorney have their ducks in a row.

On top of that there are 47 different vlans/subnets in place.  In many cases I haven't figured out what they are for, there's nothing in them.

What I think happened is somebody just got their CCNA and went completely overboard on the network design throwing KISS out the window.  At least they threw a lot of cash at really expensive Cisco hardware and a nice EMC SAN so when I do my redesign I have a great starting point.

My favorite part is they have billed themselves as a high end web host with all this high end equipment that is overly complicated, but have no internal backups of data, and one Internet connection through a mom and pop type ISP.

Harold Tuttle

  • Professor Chromedome
  • friend
  • Senior Member
  • ***
  • Posts: 8,069
Re: complexity for the sake of complexity is dumb
« Reply #1 on: November 12, 2010, 04:30:11 PM »
how many gigs of pron so far?
"The true mad scientist does not make public appearances! He does not wear the "Hello, my name is.." badge!
He strikes from below like a viper or on high like a penny dropped from the tallest building around!
He only has one purpose--Do bad things to good people! Mit science! What good is science if no one gets hurt?!"

RevDisk

  • friend
  • Senior Member
  • ***
  • Posts: 12,633
    • RevDisk.net
Re: complexity for the sake of complexity is dumb
« Reply #2 on: November 12, 2010, 05:32:23 PM »
My company just acquired one of our competitors.  I am going through this other company's data center and it is killing me...  it is really helpful that their network admin quit and is not taking phone calls.

They have at my current count 35 windows server instances for their LAN.  They have dedicated domain controllers, dedicated DNS servers, dedicated WINS servers (seriously?), dedicated DHCP servers, dedicated file servers, dedicated print servers, dedicated IAS servers, and so on and so forth.  I even found an old half-life server!  I haven't even inventoried all the web site specific installs which are at least 10 more.  Most of these are virtual machines on top of VMWare.  This is a small consulting company with 9 employees plus their hosting agreements.  I'm worried about licensing violations...  I hope our owner and the business attorney have their ducks in a row.

I fall to see the problem, assuming licensing is correct.  If you license everything correctly and do automation tasks correctly, I don't see the problem with having a bunch of VM's doing isolated tasks.  Then again, I'm extremely paranoid and tend work in high available, high security environments. 

Probably overkill for nine employees, though.

The vlan thing I don't understand.  vlan isolation != more secure.  I just set them up for "ease of management" and to quarantine specific traffic.  Hell, on most switches, I just use two.  One for PC's, one for IP phones.   I do put video, security traffic, etc on different vlans, which I would generally prefer to put on an OOB network but am rarely allowed to do so. 

Fail on the backups and single uplink. 
"Rev, your picture is in my King James Bible, where Paul talks about "inventors of evil."  Yes, I know you'll take that as a compliment."  - Fistful, possibly highest compliment I've ever received.