VirtualTam's bookmarks

361. Let's Encrypt with HAProxy

     2018-07-25
     cryptography/certficate letsencrypt network/http network/reverse-proxy/haproxy network/tcp network/transport-layer-security

     Permalink
     • https://github.com/letsencrypt/acme-spec/issues/33
     • https://coolaj86.com/articles/adventures-in-haproxy-tcp-tls-https-ssh-openvpn/
     • https://blog.chmd.fr/ssh-over-ssl-episode-4-a-haproxy-based-configuration.html
362. WebRTC - Real-Time Communication for browsers and mobile apps

     2018-07-25
     communication internet/browser mobile network

     Permalink
     • https://github.com/webrtc/apprtc
     • https://github.com/webrtc/adapter
     • https://webrtc.github.io/samples/
     • https://developer.mozilla.org/en-US/docs/Web/API/WebRTC_API
363. Load balancing and scaling Docker containers with Træfik

     2018-07-18
     linux/container/docker network network/http network/proxy

     Permalink

     Træfik options:

     • https://docs.traefik.io/configuration/backends/docker/
     • https://docs.traefik.io/configuration/commons/

     Relevant backend labels:

     • traefik.port
     • traefik.docker.network
     • traefik.backend.loadbalancer.method
     • traefik.backend.loadbalancer.stickiness

     Examples:

     • https://www.katacoda.com/courses/traefik/deploy-load-balancer

     Gateway timeout and overlay network setup:

     • https://github.com/containous/traefik/issues/979
     • https://github.com/containous/traefik/issues/1254
     • https://github.com/containous/traefik/issues/3599
364. system-config-printer: Graphical user interface for CUPS administration

     2018-07-18
     cups linux network printer programming/python

     Permalink
365. ab - Apache HTTP server benchmarking tool - Apache HTTP Server Version 2.4

     2018-07-17
     apache network network/http-server/apache-httpd performance performance/benchmark

     Permalink
     • https://www.digitalocean.com/community/tutorials/how-to-use-apachebench-to-do-load-testing-on-an-arch-linux-vps
366. OpenResty - a dynamic web platform based on NGINX and LuaJIT

     2018-07-17
     network/http network/http-server/nginx performance programming/api programming/lua server

     Permalink
     • https://openresty.org/en/linux-packages.html
     • https://opm.openresty.org/
     • https://github.com/openresty
     • https://github.com/openresty/openresty
     • https://www.reddit.com/r/lua/comments/209l92/openresty_with_others_language/
     • https://www.reddit.com/r/devops/comments/6tv1yc/dynamic_layer_4_load_balancing/
367. JWT with Postman

     2018-07-15
     jwt network/http postman programming/api programming/javascript programming/json

     Permalink
     • https://developer.dansksupermarked.dk/v1/api/guides/jwt-authentication-in-postman/
     • https://gist.github.com/corbanb/db03150abbe899285d6a86cc480f674d
     • https://www.jonathan-petitcolas.com/2014/11/27/creating-json-web-token-in-javascript.html
     • https://github.com/brix/crypto-js
368. Creating a custom Nginx build for Ubuntu/Debian - JGuru

     2018-07-13
     linux linux/debian linux/ubuntu network/http network/http-server/nginx package

     Permalink
     • https://www.debian.org/doc/manuals/maint-guide/build.en.html
     • https://salsa.debian.org/nginx-team/nginx
     • https://www.debian.org/doc/debian-policy/#document-ch-controlfields
     • https://www.debian.org/doc/debian-policy/#document-ch-relationships
     • https://unix.stackexchange.com/questions/333603/debian-control-file-provides-does-not-satisfy-dependency
     • https://github.com/JayH5/nginx-modules
369. iwd - iNet wireless daemon

     2018-07-05
     linux linux/kernel network network/wireless/wifi wireless

     Permalink
     • https://iwd.wiki.kernel.org/gettingstarted
     • https://wiki.archlinux.org/index.php/Iwd
370. iptables

     2018-07-04
     linux linux/iptables network network/firewall network/router sysadmin

     Permalink

     Documentation:

     • https://www.netfilter.org/documentation/index.html
     • https://www.netfilter.org/documentation/HOWTO//netfilter-hacking-HOWTO.html
     • https://www.netfilter.org/documentation/HOWTO//networking-concepts-HOWTO.html
     • https://www.netfilter.org/documentation/HOWTO//NAT-HOWTO.html
     • https://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO.html
       • https://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-6.html
       • https://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO-7.html

     Articles:

     • https://www.digitalocean.com/community/tutorials/how-the-iptables-firewall-works
     • https://www.digitalocean.com/community/tutorials/how-to-list-and-delete-iptables-firewall-rules
     • https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands
     • https://www.digitalocean.com/community/tutorials/a-deep-dive-into-iptables-and-netfilter-architecture
     • https://www.digitalocean.com/community/tutorials/how-to-choose-an-effective-firewall-policy-to-secure-your-servers

     How-tos:

     • https://wiki.centos.org/HowTos/Network/IPTables
     • https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-iptables-on-ubuntu-14-04

     Routing:

     • https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html
     • https://www.frozentux.net/iptables-tutorial/images/tables_traverse.jpg
     • https://www.frozentux.net/iptables-tutorial/images/table_subtraverse.jpg
     • https://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg

     RHEL Documentation:

     • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-common_iptables_filtering
     • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-forward_and_nat_rules
     • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-malicious_software_and_spoofed_ip_addresses
     • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-firewalls-iptables_and_connection_tracking
     • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-iptables
     • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-setting_and_controlling_ip_sets_using_iptables
371. Tinc VPN

     2018-07-04
     configuration-management/ansible linux network network/vpn security

     Permalink
     • https://www.digitalocean.com/community/tutorials/how-to-install-tinc-and-set-up-a-basic-vpn-on-ubuntu-14-04
     • https://www.digitalocean.com/community/tutorials/how-to-use-ansible-and-tinc-vpn-to-secure-your-server-infrastructure
     • https://github.com/thisismitch/ansible-tinc
372. How to detach a tmux session that itself already in a tmux? - Super User

     2018-07-01
     command-line/tmux network/ssh

     Permalink

     TMUXCEPTION!

373. How to get a Docker container's IP address from the host? - Stack Overflow

     2018-06-29
     address linux/container linux/container/docker network network/ip

     Permalink
374. docker_auth: Authentication server for Docker Registry 2

     2018-06-26
     linux/container/docker network/ldap network/transport-layer-security security/authentication

     Permalink
     • https://hub.docker.com/r/cesanta/docker_auth/
     • https://github.com/kwk/docker-registry-setup
     • https://docs.docker.com/registry/spec/auth/token/
375. ldapjs

     2018-06-19
     network/ldap programming/javascript programming/node.js security/authentication

     Permalink
     • https://nodejs.org/en/blog/uncategorized/ldapjs-a-reprise-of-ldap/
376. Anatomy of a Linux DNS Lookup – Part I – zwischenzugs

     2018-06-19
     linux network network/dns network/ip

     Permalink
     • https://zwischenzugs.com/2018/06/18/anatomy-of-a-linux-dns-lookup-part-ii/
377. Gitlab - "Allow requests to the local network from hooks and services" should be ENABLED by default

     2018-06-19
     network source-code-management/git source-code-management/gitlab

     Permalink
     • https://gitlab.com/gitlab-org/gitlab-ce/issues/44480
378. beekeeper: Python REST API builder - creates a full Pythonic API to any RESTful interface based on a minimal JSON "hive" file.

     2018-06-16
     network/http programming/api programming/api/rest programming/json programming/python web

     Permalink
     • https://www.reddit.com/r/Python/comments/3yb2px/beekeeper_a_jsonconfigurable_generic_rest_client/
379. OpenVAS - OpenVAS - Open Vulnerability Assessment System

     2018-06-14
     network operating-system security sysadmin

     Permalink
380. https - How to run Gitlab in docker container with nginx-proxy over ssl with letsencrypt securely - Stack Overflow

     2018-06-11
     linux/container/docker network/http network/http-server/nginx network/proxy network/transport-layer-security source-code-management/git source-code-management/gitlab

     Permalink

     Container setup:

     • https://gist.github.com/netdesk/c1db2985b542f9916995139318e5a7ce
     • https://hub.docker.com/r/jwilder/nginx-proxy/
     • https://hub.docker.com/r/jrcs/letsencrypt-nginx-proxy-companion/

     Gitlab settings:

     • https://docs.gitlab.com/omnibus/docker/
     • https://docs.gitlab.com/ce/administration/environment_variables.html
     • https://docs.gitlab.com/omnibus/settings/ssl.html
     • https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-config-template/gitlab.rb.template

     Performance considerations:

     • https://docs.gitlab.com/omnibus/settings/memory_constrained_envs.html (skip the cgroups section for Gitaly as we are already running in a container)
     • https://docs.gitlab.com/ee/update/#gitaly-omnibus-gitlab-configuration-structure-change for Gitlab 16 changes to Gitaly configuration