VirtualTam's bookmarks

121. eturnal: STUN / TURN standalone server 2020-12-29

     tags: network, network/address-translation, network/stun, network/turn, network/webrtc, programming/erlang

     [ permalink ]

     • https://eturnal.net/documentation/
     • https://github.com/processone/stun
122. Kubernetes basic authentication with Traefik - Stack Overflow 2020-12-21

     tags: linux/container/kubernetes, network, network/http, network/reverse-proxy, security/authentication

     [ permalink ]
123. NGINX Docs | UDP Health Checks 2020-12-21

     tags: load-balancing, network, network/http-server/nginx, network/tcp, network/udp

     [ permalink ]

     • https://docs.nginx.com/nginx/admin-guide/load-balancer/tcp-udp-load-balancer/
124. FTTH / Fibre sans box opérateur 2020-12-18

     tags: ethernet, fiber-optics, internet, internet-service-provider, internet-service-provider/free, internet-service-provider/orange, network

     [ permalink ]

     • https://blog.desgrange.net/post/2016/03/21/ftth-free-sans-freebox.html
     • https://blog.tristramg.eu/fibre-free-sans-freebox
     • https://lafibre.info/remplacer-freebox/remplacer-le-modem-fibre-optique-du-fai-par-un-serveur/
     • https://www.tp-link.com/fr/business-networking/accessory/mc220l/
     • https://www.tp-link.com/fr/business-networking/accessory/tl-sm321b/
     • https://fr.wikipedia.org/wiki/Connecteur_optique_LC
     • https://fr.wikipedia.org/wiki/Connecteur_optique_SC
     • https://lafibre.info/remplacer-freebox/utiliser-un-serveur-linux-a-la-place-de-la-freebox-pour-debrider-la-connexion/
     • https://forum.universfreebox.com/viewtopic.php?t=61767
     • https://freebox.toosurtoo.com/forum/viewtopic.php?p=93815
     • https://www.asuswrt-merlin.net/
     • https://smpfr.info/viewtopic.php?t=1565
125. Introduction to HAProxy Logging - HAProxy Technologies 2020-12-11

     tags: network/http, network/http-server/haproxy, network/reverse-proxy, network/tcp, observability/logging

     [ permalink ]

     • https://www.haproxy.com/documentation/hapee/latest/administration/docker-logging/
126. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies 2020-12-11

     tags: network/dns, network/http-server/haproxy, network/reverse-proxy, network/server-name-indication, network/tcp, network/transport-layer-security

     [ permalink ]

     • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
     • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19
127. Make Your Own Travel Router With A NanoPi And Armbian – /var/log/tmaurice 2020-09-28

     tags: linux, network, network/dns, network/router, network/vpn/wireguard, raspberry-pi, unbound, wifi

     [ permalink ]
128. How NAT traversal works · Tailscale Blog 2020-09-19

     tags: network, network/address-translation, network/firewall, network/router, network/tcp, network/udp, network/webrtc

     [ permalink ]
129. WebRTC for the Curious 2020-09-14

     tags: audio, network, network/webrtc, streaming, video, voip

     [ permalink ]
130. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

     tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

     [ permalink ]
131. IoT logging with MQTT, Fluentd / Fluent Bit and Loki 2020-08-15

     tags: embedded, fluentd, internet-of-things, network/mqtt, observability/grafana, observability/logging, observability/logging/grafana-loki

     [ permalink ]

     Open questions, potential solutions or workarounds:

     • Loki does not support out-of-order message ingestion
       • https://github.com/grafana/loki/issues/1544
       • https://github.com/project-hatohol/fluent-plugin-sort
     • There is not Java client for Loki
       • https://github.com/grafana/loki/issues/1158
       • https://grafana.com/docs/loki/latest/api/
       • https://github.com/grafana/loki/tree/master/cmd/fluent-bit
     • The Wiced MQTT queue might be limited depending on the volume of logs
       • https://iotexpert.com/2017/03/08/embedded-world-2017-wiced-wifi-mqtt-and-the-amazon-iot-cloud/
132. Monitoring SFR Box NB4 / NB6 2020-08-15

     tags: ethernet, network/router, programming/api/rest, sfr, telecom

     [ permalink ]

     • https://forum.jeedom.com/viewtopic.php?f=144&t=45702&sid=e1104bba9b1c4006760a011c129077f3
     • https://github.com/limad/plugin-sfrBox
     • https://limad.github.io/plugin-sfrBox/fr_FR/
     • https://la-communaute.sfr.fr/t5/wifi-connexion-filaire-et-d%C3%A9bit/nb6-traffic-monitor/td-p/2112893
     • https://forum.fhem.de/index.php?topic=81555.0
     • https://blog.ariase.com/box/actualite/openbox4-linux-neufbox
133. What is "AWS Security Scanner" in my server logs? 2020-07-31

     tags: cloud/aws, network, security

     [ permalink ]

     • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html
     • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html
     • https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-instance-metadata-options.html
     • https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
     • https://aws.amazon.com/blogs/aws/new-host-based-routing-support-for-aws-application-load-balancers/
     • https://aws.amazon.com/about-aws/whats-new/2018/07/elastic-load-balancing-announces-support-for-redirects-and-fixed-responses-for-application-load-balancer/
     • https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how
     • https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how/f8qympp/
     • https://forums.aws.amazon.com/thread.jspa?threadID=316889
     • https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
     • https://www.wired.com/story/capital-one-paige-thompson-case-hacking-spree/
     • https://krebsonsecurity.com/2019/08/what-we-can-learn-from-the-capital-one-hack/
     • https://krebsonsecurity.com/2019/07/capital-one-data-theft-impacts-106m-people/
     • http://www.thecloudavenue.com/2019/08/how-capital-one-hack-was-achieved-in-aws.html
     • http://www.thecloudavenue.com/2019/11/changes-to-aws-ec2-instance-metadata-service.html
134. How we abused Slack's TURN servers to gain access to internal services | Communication Breakdown 2020-04-09

     tags: cloud/aws, multimedia, network, network/webrtc, security, streaming, video

     [ permalink ]

     • https://webrtchacks.com/
     • https://www.enablesecurity.com/security-assessment/webrtc-pentest/
135. What is the IPv6 equivalent to IPv4 RFC1918 addresses? - Server Fault 2020-03-31

     tags: linux, network, network/ip, network/ipv4, network/ipv6

     [ permalink ]

     • https://tools.ietf.org/html/rfc4193
     • https://en.wikipedia.org/wiki/Unique_local_address
     • https://github.com/transumption/subnetgen
     • https://github.com/adeverteuil/bash-ula-generator
136. CtrlZ.AI - a zine fair focused on technology and artificial intelligence 2020-02-24

     tags: artificial-intelligence, ethics, event/conference, neural-network, science, technology

     [ permalink ]
137. Docker and Kubernetes userland proxies, versus exposing wide port ranges 2020-01-24

     tags: linux/container, linux/container/docker, linux/container/kubernetes, network, network/tcp, network/udp, performance

     [ permalink ]

     Docker:

     • https://github.com/moby/moby/issues/9021
     • https://github.com/moby/moby/issues/11185
     • https://github.com/moby/moby/issues/11185#issuecomment-245983651
     • https://github.com/moby/moby/issues/19017
     • https://github.com/docker/for-mac/issues/2670#issuecomment-372365274

     Kubernetes:

     • https://github.com/kubernetes/kubernetes/issues/1802
     • https://github.com/kubernetes/kubernetes/issues/23864
     • https://github.com/kubernetes/kubernetes/issues/23864#issuecomment-387070644

     Disabling userland proxy:

     • https://github.com/moby/moby/issues/5618
     • https://github.com/moby/moby/issues/14856
     • https://github.com/moby/moby/issues/11185#issuecomment-129085898

     Threads:

     • https://stackoverflow.com/questions/28717464/docker-expose-all-ports-or-range-of-ports-from-7000-to-8000
     • https://www.percona.com/blog/2016/02/05/measuring-docker-cpu-network-overhead/
     • https://forums.docker.com/t/exposing-large-range-of-ports-is-not-viable/20127/5
138. Pion - Pure Go implementation of the WebRTC API 2020-01-18

     tags: instant-messaging, network/webrtc, streaming, video

     [ permalink ]

     • https://github.com/pion/webrtc
139. Avery's laws of wifi reliability 2020-01-13

     tags: bandwidth, network, network/router, wifi

     [ permalink ]
140. speedtest-cli: Command line interface for testing internet bandwidth using speedtest.net 2020-01-13

     tags: bandwidth, internet, network, performance

     [ permalink ]

     • https://www.gwern.net/WiFi#testing