{"id":1194,"date":"2024-03-17T08:49:42","date_gmt":"2024-03-17T07:49:42","guid":{"rendered":"https:\/\/eonea.pl\/?p=1194"},"modified":"2024-03-17T16:56:33","modified_gmt":"2024-03-17T15:56:33","slug":"truenas-nut-konfiguracja-ups","status":"publish","type":"post","link":"https:\/\/eonea.pl\/en\/truenas-nut-konfiguracja-ups\/","title":{"rendered":"TrueNAS - NUT UPS configuration"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

In the material I will talk about Network UPS Tool (NUT), which is responsible for the communication of servers with UPS, but not only. Then I'll talk about how to choose a UPS in terms of cooperation with TrueNAS. Then we will configure TrueNAS to communicate with UPS. Next we will force two other TrueNAS to communicate with the same UPS.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What is a NUT?<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

TrueNAS just uses the NUT to communicate with the UPS. We connect our UPS using a USB cable with the server and the NUT should be able to communicate with our UPS. If the power fails then the NUT is responsible for executing the scheduled action. In most cases, in the absence of power after a certain period of time, it will simply be the server only, so that there is no uncontrollable shutdown.<\/p>

The NUT is designed not only to communicate with the UPS to read its current status. It can read the voltage and state of charge of the batteries, the frequency of the network, the current load and many other parameters. Importantly, the NUT will tell us that the batteries on our UPS are about time to be replaced. It can also control the UPS to switch the operating mode, shut down, turn off the UPS or simply turn off the audible alarm. Because why should the UPS beep when we already know what's going on anyway, or if we need to replace the batteries and the ones ordered won't be in until tomorrow.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

NUT limitations<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

When it comes to reading and controlling the UPS, the functionality of the NUT, as I mentioned before, is quite extensive, but remember that it is open source and there is no guarantee that the NUT will be able to communicate properly with your UPS. In practice, all server-class UPSs will be able to communicate with NUT for basic functions like reading UPS status or battery level. The NUT is a very popular tool used on most if not all Linux-like systems. This makes manufacturers care about it working properly, too. However, this does not mean that all information or controllability will be available. Depending on the level of cooperation between UPS manufacturers and NUT developers, this level of cooperation between NUT and UPS will be better or worse. In a word, the bigger the bush the manufacturer of our UPS is, the worse it bodes for proper communication of the NUT with the UPS.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

I know that you can download NUT for Windows but I don't know how it performs because we didn't particularly need to install this version. Maybe you have more experience with it then let me know in the comments.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Budget UPS for NUT<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Well, and after the introduction about the quality of UPS manufacturers, we enter the topic of budget UPS. Here it can be different. The most important thing is that the description should mention USB communication at all. So far, for example, APC, Ever or Eaton have not failed me, but this does not mean that others will not work. In general, however, if you can't read the name or the price falls below 400 PLN, check whether someone has already had problems with something like this. The best though definitely not the most up-to-date source of information about the compatibility of a particular UPS with the NUT is the \"Hardware compatibility list\" page.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

https:\/\/networkupstools.org\/stable-hcl.html<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Lab<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

We'll start with what we'll be configuring. Our master server, from a UPS and NUT perspective of course, will be a physical server with TrueNAS CORE installed with a UPS physically connected to it via USB cable. And being strict it will be one of our test setups an HP ProLiant ML350p gen8 server and a PowerWalker VI 1200 SHL UPS connected to it. As someone was interested in the details. Two additional TrueNAS CORE and SCALE in the form of virtual machines will act as slaves for us, from a NUT perspective of course. In this case, at least one server should be real, physical to have somewhere to plug in USB from our however physical UPS. The ultimate goal of our tests will be to disable multiple servers with a single interconnected UPS. Here it will no longer matter whether physical or virtual.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

UPS configuration in TrueNAS<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

First, we configure our physical TrueNAS SCALE<\/p>

Services > UPS<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

UPS configuration in TrueNAS - slave<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Next, we configure the other TrueNAS servers that are supposed to shut down with the power off connected to our physical server.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Services > UPS<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Security of the NUT solution<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

As for the safety of this solution. Leaving aside the danger when, despite the full redundancy of UPS power and generators, someone unplugs one plug and de facto culturally tells the entire server room to go to sleep. While it may be fun, it is probably from some scale of the number of devices and progressive paranoia, it would be worthwhile to divide such NUT groups into more than one part, just in case.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Worth mentioning is the fact that NUT's network communication in its basic configuration is practically unsecured, and it might be worth keeping it in some sort of separated network.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The NUT server itself can be configured to listen on a separate IP and a specific port, so that it is only available on a separate network. By default, the NUT uses port 3493. Unfortunately, in TrueNAS via the WEB interface, I was unable to restrict the NUT to listen on a specific IP or interface. This is definitely a flaw in the NUT implementation in TrueNAS. In addition, TrueNAS has no general built-in firewall mechanism to limit access to its resources both in general and in the case of the NUT itself. This can generally be restricted at the level of the services themselves, such as NFS, SMB or iSCSI, or the WEB interface itself, where you can and even should restrict access only from trusted networks.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

But back to the topic of security. We don't want to have a washing machine or other \"smart\" devices on the same network that, at best, report back to servers in China what they see and hear and, at worst, when hacked, will be used to break into our devices. This should lead us over to the conclusion that we need to separate networks and filter traffic between them with devices like our NAS from other devices over which, to put it mildly, we have little control and the timeliness and quality of their software is at least questionable<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

NUT debug<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Port opening test<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\n\t\t\t\t\tnmap [NUT_SERVER_IP] -p 3493 <\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c36b0c4 elementor-widget elementor-widget-text-editor\" data-id=\"c36b0c4\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"Textbody\">Infomation from UPS<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b22be50 elementor-widget elementor-widget-code-highlight\" data-id=\"b22be50\" data-element_type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"prismjs-default copy-to-clipboard\">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-javascript line-numbers\">\n\t\t\t\t<code readonly=\"true\" class=\"language-javascript\">\n\t\t\t\t\t<xmp>upsc ups@[NUT_SERVER_IP] <\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-06c9bad elementor-widget elementor-widget-text-editor\" data-id=\"06c9bad\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>\u00a0<\/p><p>\u00a0<\/p><p>\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Network UPS Tool (NUT) which is responsible for the communication of servers with UPS .<\/p>","protected":false},"author":3,"featured_media":1195,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[7,8],"tags":[293,276,301,300,81,85,93,86,299],"class_list":["post-1194","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it-dla-kazdego","category-truenas","tag-data-loss-prevention","tag-dlp","tag-network-ups-tool","tag-nut","tag-ochrona-danych","tag-truenas","tag-truenas-core","tag-truenas-scale","tag-ups"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/posts\/1194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/comments?post=1194"}],"version-history":[{"count":7,"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/posts\/1194\/revisions"}],"predecessor-version":[{"id":1227,"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/posts\/1194\/revisions\/1227"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/media\/1195"}],"wp:attachment":[{"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/media?parent=1194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/categories?post=1194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eonea.pl\/en\/wp-json\/wp\/v2\/tags?post=1194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}