VirtualTam's bookmarks

21. GitHub Load Balancer Director and supporting tooling

    2019-12-31
    distributed-system/high-availability load-balancing network network/http network/reverse-proxy/haproxy network/tcp source-code-management/github

    Permalink
    • https://github.com/github/glb-director
    • https://github.blog/2018-06-20-mysql-high-availability-at-github/
22. Athens | A Go Module Proxy

    2019-12-03
    continuous-integration dependency network/http network/proxy programming/go storage/cache

    Permalink
    • https://github.com/gomods/athens
    • https://arslan.io/2019/08/02/why-you-should-use-a-go-module-proxy/
    • https://golang.org/cmd/go/#hdr-Module_proxy_protocol
23. apt - Import the repository signing key behind a proxy - Ask Ubuntu

    2019-10-16
    cryptography/pgp cryptography/pgp/gnupg gpg network/http network/ldap security

    Permalink
24. ModSecurity: Open Source Web Application Firewall

    2019-09-17
    apache network network/http-server/apache-httpd network/proxy security web

    Permalink
    • https://github.com/SpiderLabs/ModSecurity
    • https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu
25. NAXSI - an open-source, high performance, low rules maintenance WAF for NGINX

    2019-09-17
    linux/kernel network network/http network/http-server/nginx network/proxy security

    Permalink
    • https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-naxsi-on-ubuntu-14-04
26. Pomerium, a standardized interface to add access control whether an application itself has authorization or authentication baked-in

    2019-09-16
    network/http network/proxy programming/api security security/authentication user web

    Permalink
    • https://github.com/pomerium/pomerium
27. API Gateways and Service Meshes: Opening the Door to Application Modernisation

    2019-07-15
    consul envoy linux/container/docker linux/container/kubernetes network/http network/proxy programming/api

    Permalink
28. Kubernetes-native microservices API gateway: Ambassador

    2019-07-15
    envoy linux/container/docker linux/container/kubernetes network network/http network/proxy network/transport-layer-security

    Permalink
    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
29. amqproxy: An intelligent AMQP proxy, with connection and channel pooling/reusing

    2019-06-12
    message-broker/rabbitmq message-queue network/amqp network/proxy performance programming/php

    Permalink
    • https://www.cloudamqp.com/blog/2019-05-29-maintaining-long-lived-connections-with-AMQProxy.html
30. Envoy Proxy - Home

    2018-10-26
    cloud-computing network/http network/reverse-proxy programming/c++

    Permalink
    • https://www.envoyproxy.io/docs/envoy/latest/
31. Mobile Applications Guide — Mattermost 5.3 documentation

    2018-10-07
    chat mattermost mobile/android mobile/ios network notification

    Permalink
    • https://docs.mattermost.com/mobile/mobile-compile-yourself.html
    • https://developers.mattermost.com/contribute/mobile/developer-setup/
    • https://docs.mattermost.com/overview/faq.html#tpns
    • https://github.com/mattermost/mattermost-push-proxy
    • https://itunes.apple.com/us/app/testflight/id899247664?mt=8
32. Vulcand - a reverse proxy for HTTP API management and microservices

    2018-10-05
    network/http network/proxy programming/api server web

    Permalink
    • https://github.com/vulcand/vulcand
33. Configuring Apache2 (Unofficial) — Mattermost 5.3 documentation

    2018-10-03
    apache chat mattermost network/http network/http-server/apache-httpd network/proxy web

    Permalink
    • https://docs.mattermost.com/install/config-proxy-apache2.html
    • https://gist.github.com/misje/52551fc43754d2e27f32
    • https://github.com/mattermost/docs/issues/1114
    • https://forum.mattermost.org/t/how-to-setup-a-simple-apache2-proxy-to-mattermost/495
34. Let's Encrypt with HAProxy

    2018-07-25
    cryptography/certficate letsencrypt network/http network/reverse-proxy/haproxy network/tcp network/transport-layer-security

    Permalink
    • https://github.com/letsencrypt/acme-spec/issues/33
    • https://coolaj86.com/articles/adventures-in-haproxy-tcp-tls-https-ssh-openvpn/
    • https://blog.chmd.fr/ssh-over-ssl-episode-4-a-haproxy-based-configuration.html
35. Load balancing and scaling Docker containers with Træfik

    2018-07-18
    linux/container/docker network network/http network/proxy

    Permalink

    Træfik options:

    • https://docs.traefik.io/configuration/backends/docker/
    • https://docs.traefik.io/configuration/commons/

    Relevant backend labels:

    • traefik.port
    • traefik.docker.network
    • traefik.backend.loadbalancer.method
    • traefik.backend.loadbalancer.stickiness

    Examples:

    • https://www.katacoda.com/courses/traefik/deploy-load-balancer

    Gateway timeout and overlay network setup:

    • https://github.com/containous/traefik/issues/979
    • https://github.com/containous/traefik/issues/1254
    • https://github.com/containous/traefik/issues/3599
36. https - How to run Gitlab in docker container with nginx-proxy over ssl with letsencrypt securely - Stack Overflow

    2018-06-11
    linux/container/docker network/http network/http-server/nginx network/proxy network/transport-layer-security source-code-management/git source-code-management/gitlab

    Permalink

    Container setup:

    • https://gist.github.com/netdesk/c1db2985b542f9916995139318e5a7ce
    • https://hub.docker.com/r/jwilder/nginx-proxy/
    • https://hub.docker.com/r/jrcs/letsencrypt-nginx-proxy-companion/

    Gitlab settings:

    • https://docs.gitlab.com/omnibus/docker/
    • https://docs.gitlab.com/ce/administration/environment_variables.html
    • https://docs.gitlab.com/omnibus/settings/ssl.html
    • https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-config-template/gitlab.rb.template

    Performance considerations:

    • https://docs.gitlab.com/omnibus/settings/memory_constrained_envs.html (skip the cgroups section for Gitaly as we are already running in a container)
    • https://docs.gitlab.com/ee/update/#gitaly-omnibus-gitlab-configuration-structure-change for Gitlab 16 changes to Gitaly configuration
37. NPM, Yarn and private repositories

    2018-06-08
    continuous-integration linux/container/docker network/proxy package programming/node.js repository security/authentication yarn

    Permalink

    Hosting private repositories and using them in CI/CD:

    • https://docs.npmjs.com/private-modules/intro
    • https://docs.npmjs.com/private-modules/ci-server-config
    • https://docs.npmjs.com/private-modules/docker-and-private-modules

    Threads:

    • https://stackoverflow.com/questions/45191189/nexus-manager-npm-401-unauthorized
    • https://stackoverflow.com/questions/40845598/how-do-i-use-multiple-npm-registries-in-yarn
    • https://github.com/yarnpkg/yarn/issues/606
    • https://github.com/yarnpkg/yarn/pull/839
    • https://github.com/yarnpkg/yarn/pull/871
    • https://github.com/yarnpkg/yarn/issues/4451
    • https://github.com/yarnpkg/yarn/issues/4862
    • https://github.com/npm/npm/issues/16528

    Articles:

    • https://pdudits.github.io/2016/11/16/Setting-up-Angular2-CLI-with-Maven-in-enterprise-network.html

    node-sass binaries:

    • https://github.com/sass/node-sass#binary-configuration-parameters
    • https://github.com/sass/node-sass/releases
    • https://github.com/sass/node-sass/issues/1466
    • https://github.com/sass/node-sass/issues/1554
    • https://github.com/sass/node-sass/issues/1635
    • https://github.com/sass/node-sass/issues/1991
    • https://github.com/sass/node-sass/issues/2115
    • https://github.com/sass/node-sass/issues/2361
    • https://stackoverflow.com/questions/40178767/is-it-possible-to-install-node-sass-without-downloading-from-github-during-the-p
38. Running Ansible Through an SSH Bastion Host

    2018-05-17
    configuration-management/ansible network network/proxy network/ssh tunnel

    Permalink
    • https://blog.scottlowe.org/2015/11/21/using-ssh-bastion-host/
    • https://blog.scottlowe.org/2015/12/04/use-case-ssh-bastion-host/
    • https://blog.scottlowe.org/2015/12/11/using-ssh-multiplexing/
    • https://dotfiles.tnetconsulting.net/articles/2015/0506/empowering-openssh.html
    • https://www.redhat.com/sysadmin/ssh-proxy-bastion-proxyjump
    • https://docs.ansible.com/ansible/latest/reference_appendices/faq.html#how-do-i-configure-a-jump-host-to-access-servers-that-i-have-no-direct-access-to
    • https://gist.github.com/seansawyer/8fe009e67f7e01344328
39. mitmproxy - an interactive HTTPS proxy

    2018-05-02
    network network/http network/packet network/proxy programming/python security

    Permalink
    • https://github.com/mitmproxy/mitmproxy
    • https://docs.mitmproxy.org/stable/
    • https://github.com/ustwo/mastermind
40. Migrating to Sensu

    2018-04-04
    database/redis message-broker/rabbitmq network network/http-server/nginx network/reverse-proxy/haproxy observability observability/nagios sensu sysadmin

    Permalink
    • https://roobert.github.io/2015/11/09/Sensu-What/
    • https://blog.sensuapp.org/our-journey-implementing-sensu-to-monitor-kubernetes-in-production-5764aff2dd50
    • https://phillbarber.blogspot.fr/2015/03/nagios-vs-sensu-vs-icinga2.html
    • https://www.reddit.com/r/devops/comments/56xrnj/how_are_people_suffering_through_sensu_core/