VirtualTam's bookmarks

101. Kubernetes-native microservices API gateway: Ambassador 2019-07-15

     tags: envoy, linux/container/docker, linux/container/kubernetes, network, network/http, network/proxy, network/transport-layer-security

     [ permalink ]

     • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
     • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
     • https://www.getambassador.io/docs
102. gopenpgp: A high-level OpenPGP library 2019-06-27

     tags: cryptography/encryption, cryptography/pgp, gpg, programming/go, security

     [ permalink ]

     • https://gopenpgp.org/
     • https://protonmail.com/blog/openpgp-golang/
103. Comparison of NAT Instances and NAT Gateways - Amazon Virtual Private Cloud 2019-06-27

     tags: cloud-computing, cloud-computing/aws, network, network/router, security

     [ permalink ]

     • https://www.theguild.nl/cost-saving-with-nat-instances/
     • https://dzone.com/articles/nat-instance-vs-nat-gateway
     • https://docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Instance.html
     • https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
     • https://aws.amazon.com/blogs/aws/new-managed-nat-network-address-translation-gateway-for-aws/
     • https://dzone.com/articles/aws-vpc-nat-instance-failover
     • https://aws.amazon.com/articles/high-availability-for-amazon-vpc-nat-instances-an-example/
104. Diffie-Hellman Key Exchange 2019-06-24

     tags: cryptography, cryptography/elliptic-curve, cryptography/encryption, cryptography/public-key-infrastructure, security

     [ permalink ]

     • https://security.stackexchange.com/questions/35471/is-there-any-particular-reason-to-use-diffie-hellman-over-rsa-for-key-exchange
     • https://security.stackexchange.com/questions/45963/diffie-hellman-key-exchange-in-plain-english
     • https://en.wikipedia.org/wiki/Elliptic-curve_Diffie%E2%80%93Hellman
     • https://en.wikipedia.org/wiki/Forward_secrecy
105. High Performance Browser Networking | Ilya Grigorik 2019-06-24

     tags: book, cryptography/encryption, cryptography/public-key-infrastructure, cryptography/rsa, internet/browser, mobile, network/http, network/transport-layer-security, security, web

     [ permalink ]

     • https://hpbn.co/webrtc/
     • https://hpbn.co/transport-layer-security-tls/
     • https://hpbn.co/webrtc/
106. helm-secrets: a helm plugin that helps managing secrets with Git workflow 2019-06-18

     tags: cryptography/pgp, linux/container/kubernetes, linux/container/kubernetes/helm, programming/yaml, secret, security, security/password

     [ permalink ]

     • https://github.com/helm/helm/issues/2196
     • https://github.com/mozilla/sops
     • https://medium.com/faun/helm-charts-for-more-complex-projects-and-how-to-secure-them-a1dfde804226
     • https://developer.epages.com/blog/tech-stories/kubernetes-deployments-with-helm-secrets/
     • https://lab.getbase.com/helm-secrets-a-missing-piece-in-kubernetes/
107. sops: Secrets management stinks, use some sops! 2019-06-18

     tags: cryptography/encryption, cryptography/pgp, gpg, linux/container/kubernetes, programming/json, programming/yaml, secret, security

     [ permalink ]

     • https://godoc.org/go.mozilla.org/sops
     • https://jve.linuxwall.info/blog/index.php?post/2015/10/01/Introducing-Sops%3A-an-editor-of-encrypted-file-that-uses-AWS-KMS-and-PGP
108. dex: OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors 2019-06-11

     tags: network/ldap, programming/go, security/authentication, security/authorization, security/openid, security/token

     [ permalink ]
109. MIG: Mozilla InvestiGator 2019-05-27

     tags: filesystem, mozilla, network, security, sysadmin

     [ permalink ]

     • https://github.com/mozilla/mig
     • https://j.vehent.org/blog/index.php?post/2015/07/26/Using-Mozilla-Investigator-%28MIG%29-to-detect-unknown-hosts
     • https://j.vehent.org/blog/index.php?post/2015/09/13/Investigating-authorized-keys-across-the-infrastructure-using-MIG
110. Go-SCP | Go Secure Coding Practices 2019-05-23

     tags: data, database, programming/go, security, server, web

     [ permalink ]

     • https://github.com/OWASP/Go-SCP
111. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik 2019-04-19

     tags: configuration-management/ansible, distributed-system/cluster, linux/container/kubernetes, network, network/firewall, network/http, network/http-server/traefik, network/transport-layer-security

     [ permalink ]

     • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
     • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/
112. gVisor - OCI-compatible sandbox runtime that provides a virtualized container environment 2019-04-15

     tags: linux, linux/container, linux/kernel, security, userspace

     [ permalink ]

     • https://github.com/google/gvisor
     • https://cloud.google.com/blog/products/gcp/open-sourcing-gvisor-a-sandboxed-container-runtime
113. Dr. Xu Zhongxing's speech: Fuchsia OS Introduction Complete Record and Slide Download 2019-03-26

     tags: fuchsia, google, linux/container, operating-system, security

     [ permalink ]

     • https://github.com/xuzhongxing/fuchsia-notes
114. Vuls · Agentless Vulnerability Scanner for Linux/FreeBSD 2019-03-22

     tags: programming/testing, security, sysadmin

     [ permalink ]

     • https://github.com/future-architect/vuls
115. Go repository structure templates 2019-03-13

     tags: database, network/http, programming/go, security/authentication, source-code-management, web

     [ permalink ]

     • https://github.com/katzien/go-structure-examples
       • https://www.youtube.com/watch?v=oL6JBUk6tj0
     • https://medium.com/@benbjohnson/standard-package-layout-7cdbc8391fc1
     • https://github.com/golang-standards/project-layout
     • https://github.com/ribice/gorsk-gin
     • https://github.com/gothinkster/golang-gin-realworld-example-app
     • https://github.com/mmcmm/go-gin-starter
     • https://www.reddit.com/r/golang/comments/3focff/ask_golang_have_you_built_a_complex_website_in/
     • https://github.com/volatiletech/authboss/wiki/Integration-with-gin-gonic
     • https://github.com/thewhitetulip/web-dev-golang-anti-textbook
116. hydra: OpenID Connect certified OAuth2 Server - cloud native, security-first, open source API security for your infrastructure. Written in Go. SDKs for any language. 2019-03-13

     tags: programming/go, security, security/authentication, security/authorization, security/oauth, security/openid

     [ permalink ]
117. authboss: The boss of http auth. A modular authentication system for the web. 2019-03-13

     tags: programming/api, programming/go, security/authentication, security/authorization, security/token

     [ permalink ]
118. FusionAuth - Identity management - Authentication, authorization, user management, reporting, analytics 2019-03-13

     tags: programming/api, security/authentication, security/authorization, security/password, security/token, web

     [ permalink ]
119. Cycle error when trying to create AWS VPC security groups using Terraform - Stack Overflow 2019-02-20

     tags: cloud-computing/aws, configuration-management/terraform, cycle, graph

     [ permalink ]

     TL;DR: break the dependency cycle by declaring rules between two of the groups from the dependency chain with aws_security_group_rule

     • https://github.com/hashicorp/terraform/issues/539
     • https://github.com/hashicorp/terraform/issues/530
     • https://github.com/hashicorp/terraform/pull/1620
     • https://omarkhawaja.com/terraform-resolving-aws-security-group-cyclic-dependency/
120. Audit a MySQL or MariaDB database 2019-02-19

     tags: database, database/mariadb, database/mysql, observability, performance, security/audit

     [ permalink ]

     • https://vincent.composieux.fr/article/auditer-une-base-de-donnees-mysql-ou-mariadb