VirtualTam's bookmarks

21. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

    tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

    [ permalink ]
22. RFC 2222 - Simple Authentication and Security Layer (SASL) 2019-10-21

    tags: email, linux, network/ldap, network/smtp, security, security/authentication, unix

    [ permalink ]

    • https://en.wikipedia.org/wiki/Simple_Authentication_and_Security_Layer
    • https://tools.ietf.org/html/rfc2444
    • https://tools.ietf.org/html/rfc4422
    • https://tools.ietf.org/html/rfc4752
23. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

    [ permalink ]
24. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
25. Network Automation and Programmability Abstraction Layer with Multivendor support 2019-07-15

    tags: automation, ddos, hardware, linux/kernel/ebpf, network, network/router

    [ permalink ]

    • https://github.com/napalm-automation/napalm
    • https://pynet.twb-tech.com/blog/automation/napalm-ios.html
    • https://blog.cloudflare.com/the-internet-is-hostile-building-a-more-resilient-network/
    • https://blog.ipspace.net/2015/06/napalm-integrating-ansible-with-network.html
26. Kubernetes-native microservices API gateway: Ambassador 2019-07-15

    tags: envoy, linux/container/docker, linux/container/kubernetes, network, network/http, network/proxy, network/transport-layer-security

    [ permalink ]

    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
27. High Performance Browser Networking | Ilya Grigorik 2019-06-24

    tags: book, cryptography/encryption, cryptography/public-key-infrastructure, cryptography/rsa, internet/browser, mobile, network/http, network/transport-layer-security, security, web

    [ permalink ]

    • https://hpbn.co/webrtc/
    • https://hpbn.co/transport-layer-security-tls/
    • https://hpbn.co/webrtc/
28. dive: A tool for exploring each layer in a docker image 2019-04-25

    tags: command-line, linux, linux/container, linux/container/docker

    [ permalink ]
29. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik 2019-04-19

    tags: configuration-management/ansible, distributed-system/cluster, linux/container/kubernetes, network, network/firewall, network/http, network/http-server/traefik, network/transport-layer-security

    [ permalink ]

    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/
30. nginx-quick-reference: This notes describes how to improve Nginx performance, security and other important things. 2019-02-08

    tags: cipher, cryptography/encryption, network/http, network/http-server/nginx, network/transport-layer-security, security, server

    [ permalink ]
31. server-configs: Boilerplate configurations for various web servers. 2019-01-23

    tags: apache, network/http, network/http-server/apache-httpd, network/http-server/nginx, network/transport-layer-security, server

    [ permalink ]

    • https://github.com/h5bp/server-configs-apache
    • https://github.com/h5bp/server-configs-nginx
32. Acme-dns on CentOS 7 | jaletzki.de 2019-01-23

    tags: cryptography/certificate, letsencrypt, network/dns, network/http, network/transport-layer-security, security

    [ permalink ]

    • https://github.com/joohoi/acme-dns
    • https://github.com/Neilpang/acme.sh
33. ngrep: grep applied to the network layer 2018-12-22

    tags: grep, network, network/packet, network/packet-capture/wireshark, traffic

    [ permalink ]

    A PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

34. crt.sh | Certificate Search 2018-11-21

    tags: cryptography/certificate, letsencrypt, network/http, network/transport-layer-security, security

    [ permalink ]

    • https://transparencyreport.google.com
35. Displaying a remote SSL certificate details using CLI tools - Server Fault 2018-11-15

    tags: command-line, cryptography/certificate, network/nmap, network/transport-layer-security, openssl, security

    [ permalink ]
36. Building Docker Images for Static Go Binaries – Kelsey Hightower – Medium 2018-08-18

    tags: linux, linux/container/docker, network/transport-layer-security, programming/go

    [ permalink ]
37. Let's Encrypt with HAProxy 2018-07-25

    tags: cryptography/certficate, letsencrypt, network/http, network/reverse-proxy/haproxy, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://github.com/letsencrypt/acme-spec/issues/33
    • https://coolaj86.com/articles/adventures-in-haproxy-tcp-tls-https-ssh-openvpn/
    • https://blog.chmd.fr/ssh-over-ssl-episode-4-a-haproxy-based-configuration.html
38. OpenResty - a dynamic web platform based on NGINX and LuaJIT 2018-07-17

    tags: network/http, network/http-server/nginx, performance, programming/api, programming/lua, server

    [ permalink ]

    • https://openresty.org/en/linux-packages.html
    • https://opm.openresty.org/
    • https://github.com/openresty
    • https://github.com/openresty/openresty
    • https://www.reddit.com/r/lua/comments/209l92/openresty_with_others_language/
    • https://www.reddit.com/r/devops/comments/6tv1yc/dynamic_layer_4_load_balancing/
39. docker_auth: Authentication server for Docker Registry 2 2018-06-26

    tags: linux/container/docker, network/ldap, network/transport-layer-security, security/authentication

    [ permalink ]

    • https://hub.docker.com/r/cesanta/docker_auth/
    • https://github.com/kwk/docker-registry-setup
    • https://docs.docker.com/registry/spec/auth/token/
40. https - How to run Gitlab in docker container with nginx-proxy over ssl with letsencrypt securely - Stack Overflow 2018-06-11

    tags: linux/container/docker, network/http, network/http-server/nginx, network/proxy, network/transport-layer-security, source-code-management/git, source-code-management/gitlab

    [ permalink ]

    Container setup:

    • https://gist.github.com/netdesk/c1db2985b542f9916995139318e5a7ce
    • https://hub.docker.com/r/jwilder/nginx-proxy/
    • https://hub.docker.com/r/jrcs/letsencrypt-nginx-proxy-companion/

    Gitlab settings:

    • https://docs.gitlab.com/omnibus/docker/
    • https://docs.gitlab.com/ce/administration/environment_variables.html
    • https://docs.gitlab.com/omnibus/settings/ssl.html
    • https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-config-template/gitlab.rb.template

    Performance considerations:

    • https://docs.gitlab.com/omnibus/settings/memory_constrained_envs.html (skip the cgroups section for Gitaly as we are already running in a container)
    • https://docs.gitlab.com/ee/update/#gitaly-omnibus-gitlab-configuration-structure-change for Gitlab 16 changes to Gitaly configuration