VirtualTam's bookmarks

21. GitHub Load Balancer Director and supporting tooling 2019-12-31

    tags: distributed-system/high-availability, load-balancing, network, network/http, network/reverse-proxy/haproxy, network/tcp, source-code-management/github

    [ permalink ]

    • https://github.com/github/glb-director
    • https://github.blog/2018-06-20-mysql-high-availability-at-github/
22. Athens | A Go Module Proxy 2019-12-03

    tags: continuous-integration, dependency, network/http, network/proxy, programming/go, storage/cache

    [ permalink ]

    • https://github.com/gomods/athens
    • https://arslan.io/2019/08/02/why-you-should-use-a-go-module-proxy/
    • https://golang.org/cmd/go/#hdr-Module_proxy_protocol
23. apt - Import the repository signing key behind a proxy - Ask Ubuntu 2019-10-16

    tags: cryptography/pgp, cryptography/pgp/gnupg, gpg, network/http, network/ldap, security

    [ permalink ]
24. ModSecurity: Open Source Web Application Firewall 2019-09-17

    tags: apache, network, network/http-server/apache-httpd, network/proxy, security, web

    [ permalink ]

    • https://github.com/SpiderLabs/ModSecurity
    • https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu
25. NAXSI - an open-source, high performance, low rules maintenance WAF for NGINX 2019-09-17

    tags: linux/kernel, network, network/http, network/http-server/nginx, network/proxy, security

    [ permalink ]

    • https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-naxsi-on-ubuntu-14-04
26. Pomerium, a standardized interface to add access control whether an application itself has authorization or authentication baked-in 2019-09-16

    tags: network/http, network/proxy, programming/api, security, security/authentication, user, web

    [ permalink ]

    • https://github.com/pomerium/pomerium
27. API Gateways and Service Meshes: Opening the Door to Application Modernisation 2019-07-15

    tags: consul, envoy, linux/container/docker, linux/container/kubernetes, network/http, network/proxy, programming/api

    [ permalink ]
28. Kubernetes-native microservices API gateway: Ambassador 2019-07-15

    tags: envoy, linux/container/docker, linux/container/kubernetes, network, network/http, network/proxy, network/transport-layer-security

    [ permalink ]

    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
29. amqproxy: An intelligent AMQP proxy, with connection and channel pooling/reusing 2019-06-12

    tags: message-broker/rabbitmq, message-queue, network/amqp, network/proxy, performance, programming/php

    [ permalink ]

    • https://www.cloudamqp.com/blog/2019-05-29-maintaining-long-lived-connections-with-AMQProxy.html
30. Envoy Proxy - Home 2018-10-26

    tags: cloud-computing, network/http, network/reverse-proxy, programming/c++

    [ permalink ]

    • https://www.envoyproxy.io/docs/envoy/latest/
31. Mobile Applications Guide — Mattermost 5.3 documentation 2018-10-07

    tags: chat, mattermost, mobile/android, mobile/ios, network, notification

    [ permalink ]

    • https://docs.mattermost.com/mobile/mobile-compile-yourself.html
    • https://developers.mattermost.com/contribute/mobile/developer-setup/
    • https://docs.mattermost.com/overview/faq.html#tpns
    • https://github.com/mattermost/mattermost-push-proxy
    • https://itunes.apple.com/us/app/testflight/id899247664?mt=8
32. Vulcand - a reverse proxy for HTTP API management and microservices 2018-10-05

    tags: network/http, network/proxy, programming/api, server, web

    [ permalink ]

    • https://github.com/vulcand/vulcand
33. Configuring Apache2 (Unofficial) — Mattermost 5.3 documentation 2018-10-03

    tags: apache, chat, mattermost, network/http, network/http-server/apache-httpd, network/proxy, web

    [ permalink ]

    • https://docs.mattermost.com/install/config-proxy-apache2.html
    • https://gist.github.com/misje/52551fc43754d2e27f32
    • https://github.com/mattermost/docs/issues/1114
    • https://forum.mattermost.org/t/how-to-setup-a-simple-apache2-proxy-to-mattermost/495
34. Let's Encrypt with HAProxy 2018-07-25

    tags: cryptography/certficate, letsencrypt, network/http, network/reverse-proxy/haproxy, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://github.com/letsencrypt/acme-spec/issues/33
    • https://coolaj86.com/articles/adventures-in-haproxy-tcp-tls-https-ssh-openvpn/
    • https://blog.chmd.fr/ssh-over-ssl-episode-4-a-haproxy-based-configuration.html
35. Load balancing and scaling Docker containers with Træfik 2018-07-18

    tags: linux/container/docker, network, network/http, network/proxy

    [ permalink ]

    Træfik options:

    • https://docs.traefik.io/configuration/backends/docker/
    • https://docs.traefik.io/configuration/commons/

    Relevant backend labels:

    • traefik.port
    • traefik.docker.network
    • traefik.backend.loadbalancer.method
    • traefik.backend.loadbalancer.stickiness

    Examples:

    • https://www.katacoda.com/courses/traefik/deploy-load-balancer

    Gateway timeout and overlay network setup:

    • https://github.com/containous/traefik/issues/979
    • https://github.com/containous/traefik/issues/1254
    • https://github.com/containous/traefik/issues/3599
36. https - How to run Gitlab in docker container with nginx-proxy over ssl with letsencrypt securely - Stack Overflow 2018-06-11

    tags: linux/container/docker, network/http, network/http-server/nginx, network/proxy, network/transport-layer-security, source-code-management/git, source-code-management/gitlab

    [ permalink ]

    Container setup:

    • https://gist.github.com/netdesk/c1db2985b542f9916995139318e5a7ce
    • https://hub.docker.com/r/jwilder/nginx-proxy/
    • https://hub.docker.com/r/jrcs/letsencrypt-nginx-proxy-companion/

    Gitlab settings:

    • https://docs.gitlab.com/omnibus/docker/
    • https://docs.gitlab.com/ce/administration/environment_variables.html
    • https://docs.gitlab.com/omnibus/settings/ssl.html
    • https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-config-template/gitlab.rb.template

    Performance considerations:

    • https://docs.gitlab.com/omnibus/settings/memory_constrained_envs.html (skip the cgroups section for Gitaly as we are already running in a container)
    • https://docs.gitlab.com/ee/update/#gitaly-omnibus-gitlab-configuration-structure-change for Gitlab 16 changes to Gitaly configuration
37. NPM, Yarn and private repositories 2018-06-08

    tags: continuous-integration, linux/container/docker, network/proxy, package, programming/node.js, repository, security/authentication, yarn

    [ permalink ]

    Hosting private repositories and using them in CI/CD:

    • https://docs.npmjs.com/private-modules/intro
    • https://docs.npmjs.com/private-modules/ci-server-config
    • https://docs.npmjs.com/private-modules/docker-and-private-modules

    Threads:

    • https://stackoverflow.com/questions/45191189/nexus-manager-npm-401-unauthorized
    • https://stackoverflow.com/questions/40845598/how-do-i-use-multiple-npm-registries-in-yarn
    • https://github.com/yarnpkg/yarn/issues/606
    • https://github.com/yarnpkg/yarn/pull/839
    • https://github.com/yarnpkg/yarn/pull/871
    • https://github.com/yarnpkg/yarn/issues/4451
    • https://github.com/yarnpkg/yarn/issues/4862
    • https://github.com/npm/npm/issues/16528

    Articles:

    • https://pdudits.github.io/2016/11/16/Setting-up-Angular2-CLI-with-Maven-in-enterprise-network.html

    node-sass binaries:

    • https://github.com/sass/node-sass#binary-configuration-parameters
    • https://github.com/sass/node-sass/releases
    • https://github.com/sass/node-sass/issues/1466
    • https://github.com/sass/node-sass/issues/1554
    • https://github.com/sass/node-sass/issues/1635
    • https://github.com/sass/node-sass/issues/1991
    • https://github.com/sass/node-sass/issues/2115
    • https://github.com/sass/node-sass/issues/2361
    • https://stackoverflow.com/questions/40178767/is-it-possible-to-install-node-sass-without-downloading-from-github-during-the-p
38. Running Ansible Through an SSH Bastion Host 2018-05-17

    tags: configuration-management/ansible, network, network/proxy, network/ssh, tunnel

    [ permalink ]

    • https://blog.scottlowe.org/2015/11/21/using-ssh-bastion-host/
    • https://blog.scottlowe.org/2015/12/04/use-case-ssh-bastion-host/
    • https://blog.scottlowe.org/2015/12/11/using-ssh-multiplexing/
    • https://dotfiles.tnetconsulting.net/articles/2015/0506/empowering-openssh.html
    • https://www.redhat.com/sysadmin/ssh-proxy-bastion-proxyjump
    • https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#how-do-i-configure-a-jump-host-to-access-servers-that-i-have-no-direct-access-to
    • https://gist.github.com/seansawyer/8fe009e67f7e01344328
39. mitmproxy - an interactive HTTPS proxy 2018-05-02

    tags: network, network/http, network/packet, network/proxy, programming/python, security

    [ permalink ]

    • https://github.com/mitmproxy/mitmproxy
    • https://docs.mitmproxy.org/stable/
    • https://github.com/ustwo/mastermind
40. Migrating to Sensu 2018-04-04

    tags: database/redis, message-broker/rabbitmq, network, network/http-server/nginx, network/reverse-proxy/haproxy, observability, observability/nagios, sensu, sysadmin

    [ permalink ]

    • https://roobert.github.io/2015/11/09/Sensu-What/
    • https://blog.sensuapp.org/our-journey-implementing-sensu-to-monitor-kubernetes-in-production-5764aff2dd50
    • https://phillbarber.blogspot.fr/2015/03/nagios-vs-sensu-vs-icinga2.html
    • https://www.reddit.com/r/devops/comments/56xrnj/how_are_people_suffering_through_sensu_core/