VirtualTam's bookmarks

21. Kubernetes-native microservices API gateway: Ambassador 2019-07-15

    tags: envoy, linux/container/docker, linux/container/kubernetes, network, network/http, network/proxy, network/transport-layer-security

    [ permalink ]

    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
22. High Performance Browser Networking | Ilya Grigorik 2019-06-24

    tags: book, cryptography/encryption, cryptography/public-key-infrastructure, cryptography/rsa, internet/browser, mobile, network/http, network/transport-layer-security, security, web

    [ permalink ]

    • https://hpbn.co/webrtc/
    • https://hpbn.co/transport-layer-security-tls/
    • https://hpbn.co/webrtc/
23. dive: A tool for exploring each layer in a docker image 2019-04-25

    tags: command-line, linux, linux/container, linux/container/docker

    [ permalink ]
24. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik 2019-04-19

    tags: configuration-management/ansible, distributed-system/cluster, linux/container/kubernetes, network, network/firewall, network/http, network/http-server/traefik, network/transport-layer-security

    [ permalink ]

    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/
25. nginx-quick-reference: This notes describes how to improve Nginx performance, security and other important things. 2019-02-08

    tags: cipher, cryptography/encryption, network/http, network/http-server/nginx, network/transport-layer-security, security, server

    [ permalink ]
26. server-configs: Boilerplate configurations for various web servers. 2019-01-23

    tags: apache, network/http, network/http-server/apache-httpd, network/http-server/nginx, network/transport-layer-security, server

    [ permalink ]

    • https://github.com/h5bp/server-configs-apache
    • https://github.com/h5bp/server-configs-nginx
27. Acme-dns on CentOS 7 | jaletzki.de 2019-01-23

    tags: cryptography/certificate, letsencrypt, network/dns, network/http, network/transport-layer-security, security

    [ permalink ]

    • https://github.com/joohoi/acme-dns
    • https://github.com/Neilpang/acme.sh
28. ngrep: grep applied to the network layer 2018-12-22

    tags: grep, network, network/packet, traffic, wireshark

    [ permalink ]

    A PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

29. crt.sh | Certificate Search 2018-11-21

    tags: cryptography/certificate, letsencrypt, network/http, network/transport-layer-security, security

    [ permalink ]

    • https://transparencyreport.google.com
30. Displaying a remote SSL certificate details using CLI tools - Server Fault 2018-11-15

    tags: command-line, cryptography/certificate, network/nmap, network/transport-layer-security, openssl, security

    [ permalink ]
31. Building Docker Images for Static Go Binaries – Kelsey Hightower – Medium 2018-08-18

    tags: linux, linux/container/docker, network/transport-layer-security, programming/go

    [ permalink ]
32. Let's Encrypt with HAProxy 2018-07-25

    tags: cryptography/certficate, letsencrypt, network/http, network/http-server/haproxy, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://github.com/letsencrypt/acme-spec/issues/33
    • https://coolaj86.com/articles/adventures-in-haproxy-tcp-tls-https-ssh-openvpn/
    • https://blog.chmd.fr/ssh-over-ssl-episode-4-a-haproxy-based-configuration.html
33. OpenResty - a dynamic web platform based on NGINX and LuaJIT 2018-07-17

    tags: network/http, network/http-server/nginx, performance, programming/api, programming/lua, server

    [ permalink ]

    • https://openresty.org/en/linux-packages.html
    • https://opm.openresty.org/
    • https://github.com/openresty
    • https://github.com/openresty/openresty
    • https://www.reddit.com/r/lua/comments/209l92/openresty_with_others_language/
    • https://www.reddit.com/r/devops/comments/6tv1yc/dynamic_layer_4_load_balancing/
34. docker_auth: Authentication server for Docker Registry 2 2018-06-26

    tags: linux/container/docker, network/ldap, network/transport-layer-security, security/authentication

    [ permalink ]

    • https://hub.docker.com/r/cesanta/docker_auth/
    • https://github.com/kwk/docker-registry-setup
    • https://docs.docker.com/registry/spec/auth/token/
35. https - How to run Gitlab in docker container with nginx-proxy over ssl with letsencrypt securely - Stack Overflow 2018-06-11

    tags: linux/container/docker, network/http, network/http-server/nginx, network/proxy, network/transport-layer-security, source-code-management/git, source-code-management/gitlab

    [ permalink ]

    Container setup:

    • https://gist.github.com/netdesk/c1db2985b542f9916995139318e5a7ce
    • https://hub.docker.com/r/jwilder/nginx-proxy/
    • https://hub.docker.com/r/jrcs/letsencrypt-nginx-proxy-companion/

    Gitlab settings:

    • https://docs.gitlab.com/omnibus/docker/
    • https://docs.gitlab.com/ce/administration/environment_variables.html
    • https://docs.gitlab.com/omnibus/settings/ssl.html
    • https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-config-template/gitlab.rb.template

    Performance considerations:

    • https://docs.gitlab.com/omnibus/settings/memory_constrained_envs.html (skip the cgroups section for Gitaly as we are already running in a container)
    • https://docs.gitlab.com/ee/update/#gitaly-omnibus-gitlab-configuration-structure-change for Gitlab 16 changes to Gitaly configuration
36. OpenVPN Community Software 2018-05-24

    tags: cryptography/public-key-infrastructure, cryptography/rsa, linux, network, network/transport-layer-security, network/vpn, security

    [ permalink ]

    • https://openvpn.net/index.php/open-source/documentation/miscellaneous/78-static-key-mini-howto.html
    • https://openvpn.net/index.php/open-source/documentation/howto.html
    • https://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html
    • https://wiki.archlinux.org/index.php/OpenVPN
    • https://wiki.archlinux.org/index.php/Easy-RSA
    • https://wiki.debian.org/OpenVPN
37. HTTPS Certificate Configuration (Version 4.x and newer) - Proxmox VE 2018-05-04

    tags: letsencrypt, network/http, network/transport-layer-security, virtualization/proxmox

    [ permalink ]

    • https://forum.proxmox.com/threads/let%E2%80%99s-encrypt-with-proxmox-ve.26842/
    • https://forum.proxmox.com/threads/certificate-startup-problems.25815/
38. tls - How do I use "openssl s_client" to test for (absence of) SSLv3 support? 2018-03-07

    tags: cryptography/certificate, network/http, network/transport-layer-security, openssl, web

    [ permalink ]

    • https://www.madboa.com/geek/openssl/
    • https://major.io/2012/02/07/using-openssls-s_client-command-with-web-servers-using-server-name-indication- sni/
    • https://www.feistyduck.com/library/openssl-cookbook/online/ch-testing-with-openssl.html
39. Weak cryptographic standards removal notice | GitHub Engineering 2018-02-23

    tags: cryptography/encryption, network/http, network/transport-layer-security, security, source-code-management/github

    [ permalink ]
40. How to Setup FileBeat with Basic Auth for LogStash Output? - Filebeat - Discuss the Elastic Stack 2018-01-12

    tags: cryptography/certificate, cryptography/certificate-authority, network/transport-layer-security, observability/elastic, observability/elastic/beats, observability/elastic/logstash, security, security/authentication

    [ permalink ]

    • https://github.com/logstash-plugins/logstash-input-beats/issues/8
    • https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html
    • https://www.elastic.co/guide/en/beats/filebeat/master/config-filebeat-logstash.html
    • https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ssl-logstash.html
    • https://www.gilesorr.com/blog/elkbeats-beats-secure.html
    • https://discuss.elastic.co/t/beats-logstash-security-use-of-security-token-to-authenticate-clients/104981/4
    • https://stackoverflow.com/questions/40341664/how-to-configure-logstash-and-filebeat-ssl-communication