VirtualTam's bookmarks

1. Cloudflare is blocking NewsBlur RSS feed fetchers 2025-02-08

   tags: cloud-computing/cloudflare, curl, feed/rss, network/http

   [ permalink ]

   • 403 using curl
   • Cloudflare Radar - Verified Bots
2. Cloudflare - Over 700 million events/second: How we make sense of too much data 2025-02-04

   tags: cloud-computing/cloudflare, observability/logging, programming/go

   [ permalink ]
3. foundations - Cloudflare's Rust service foundations library 2024-11-22

   tags: cloud-computing/cloudflare, network/http, network/reverse-proxy, network/tcp, network/udp, observability, programming/rust

   [ permalink ]

   • Introducing Foundations - our open source Rust service foundation library
   • Oxy is Cloudflare's Rust-based next generation proxy framework
   • Trying Out Cloudflare's foundations Library for Rust
4. Swift on Server 2024-06-12

   tags: cloud-computing/aws, linux/container/docker, network/grpc, network/http, network/http/openapi, programming/swift

   [ permalink ]

   • swift-server
   • Packaging Applications for Deployment
   • swift-server/swift-openapi-lambda
   • swift-server/swift-aws-lambda-runtime
   • swift-server/swift-aws-lambda-events
   • grpc/grpc-swift
5. Cloud Study Network - Free Certifications 2024-04-03

   tags: cloud-computing, course, database, knowledge, learn, network

   [ permalink ]
6. AWS Access Key Format 2024-02-28

   tags: cloud-computing/aws, programming/go, programming/python, security, security/credentials, security/token

   [ permalink ]

   • AWS Security Credentials Formats
   • A short note on AWS KEY ID
   • Research Uncovers AWS Account Numbers Hidden in Access Keys
   • TruffleHog Now Detects AWS Canaries without setting them off
7. (A few) Ops Lessons We All Learn The Hard Way 2023-02-18

   tags: cloud-computing, network/dns, programming/shell, sysadmin

   [ permalink ]

   28. Blocking TCP port 53 traffic leads to very strange failures. Don't.
   29. The source you're looking at is not the code running in production.
   30. "Prod" is just another name for "staging".

8. lol-html: Low output latency streaming HTML parser/rewriter with CSS selector-based API 2022-10-13

   tags: cloud-computing/cloudflare, programming/css, programming/go, programming/html, programming/rust

   [ permalink ]

   • https://blog.cloudflare.com/html-parsing-2/
   • https://github.com/coolspring8/go-lolhtml
9. Cloudflare Research | OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks 2022-07-12

   tags: cloud-computing/cloudflare, cryptography/encryption, security/authentication, security/password

   [ permalink ]

   • https://blog.cloudflare.com/opaque-oblivious-passwords/
   • OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks
   • https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-opaque
   • https://blog.cryptographyengineering.com/2018/10/19/lets-talk-about-pake/
10. Terraform code quality - CloudSkiff 2021-08-21

    tags: cloud-computing, configuration-management/terraform, infrastructure/automation, security

    [ permalink ]

    • https://github.com/tfutils
    • https://github.com/terraform-linters
    • https://terraform-compliance.com/
    • https://github.com/aquasecurity/tfsec
11. Kafka, Pulsar & RabbitMQ 2021-08-21

    tags: cloud-computing, distributed-system/cluster, message-broker/kafka, message-broker/rabbitmq, microservice, network

    [ permalink ]

    Articles by Eran Stiller:

    • RabbitMQ vs. Kafka – An Architect’s Dilemma (Part 1)
    • RabbitMQ vs. Kafka – An Architect’s Dilemma (Part 2)

    Article and StackOverflow response by Lovisa Johansson from CloudAMQP, seem slightly biased towards RabbitMQ:

    • SO: When to use RabbitMQ over Kafka?
    • When to use RabbitMQ or Apache Kafka

    Benchmarks by Confluent.io (Kafka creator and Cloud Provider), seem heavily biased towards Kafka:

    • Kafka vs. Pulsar vs. RabbitMQ: Performance, Architecture, and Features Compared
    • Benchmarking Apache Kafka, Apache Pulsar, and RabbitMQ: Which is the Fastest?
12. Extreme HTTP Performance Tuning: 1.2M API req/s on a 4 vCPU EC2 Instance | talawah.io 2021-05-23

    tags: cloud-computing/aws, linux, linux/kernel, linux/kernel/ebpf, network/http, performance, programming/c

    [ permalink ]

    • https://blog.packagecloud.io/eng/2016/06/22/monitoring-tuning-linux-networking-stack-receiving-data/
    • https://blog.packagecloud.io/eng/2016/10/11/monitoring-tuning-linux-networking-stack-receiving-data-illustrated/
    • https://blog.packagecloud.io/eng/2017/02/06/monitoring-tuning-linux-networking-stack-sending-data/
    • http://www.brendangregg.com/systems-performance-2nd-edition-book.html
13. Smithy - A language for defining services and SDKs 2021-05-18

    tags: cloud-computing/aws, programming/api, programming/code-generation, programming/java

    [ permalink ]

    • https://github.com/awslabs/smithy
    • https://awslabs.github.io/smithy/1.0/guides/index.html
14. cli53 - Command line tool for Amazon Route 53 2021-04-09

    tags: cloud-computing/aws, command-line, network/dns

    [ permalink ]
15. Open Distro for Elasticsearch | Open Distro 2020-12-20

    tags: cloud-computing, cloud-computing/aws, machine-learning, observability/elastic/elasticsearch, observability/logging, observability/tracing, programming/java, security/authentication, security/authorization

    [ permalink ]

    • https://github.com/opendistro-for-elasticsearch
    • https://aws.amazon.com/blogs/aws/new-open-distro-for-elasticsearch/
    • https://opendistro.github.io/for-elasticsearch/blog/releases/2020/12/announcing-trace-analytics/
    • https://logz.io/blog/open-distro-for-elasticsearch/
16. What is "AWS Security Scanner" in my server logs? 2020-07-31

    tags: cloud-computing/aws, network, security

    [ permalink ]

    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html
    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html
    • https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-instance-metadata-options.html
    • https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
    • https://aws.amazon.com/blogs/aws/new-host-based-routing-support-for-aws-application-load-balancers/
    • https://aws.amazon.com/about-aws/whats-new/2018/07/elastic-load-balancing-announces-support-for-redirects-and-fixed-responses-for-application-load-balancer/
    • https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how
    • https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how/f8qympp/
    • https://forums.aws.amazon.com/thread.jspa?threadID=316889
    • https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
    • https://www.wired.com/story/capital-one-paige-thompson-case-hacking-spree/
    • https://krebsonsecurity.com/2019/08/what-we-can-learn-from-the-capital-one-hack/
    • https://krebsonsecurity.com/2019/07/capital-one-data-theft-impacts-106m-people/
    • http://www.thecloudavenue.com/2019/08/how-capital-one-hack-was-achieved-in-aws.html
    • http://www.thecloudavenue.com/2019/11/changes-to-aws-ec2-instance-metadata-service.html
17. How we abused Slack's TURN servers to gain access to internal services | Communication Breakdown 2020-04-09

    tags: cloud-computing/aws, multimedia, network, network/webrtc, security, streaming, video

    [ permalink ]

    • https://webrtchacks.com/
    • https://www.enablesecurity.com/security-assessment/webrtc-pentest/
18. CFSSL: Cloudflare's PKI and TLS toolkit 2020-02-05

    tags: cloud-computing/cloudflare, cryptography, cryptography/certificate, cryptography/certificate-authority, security

    [ permalink ]

    • https://blog.cloudflare.com/introducing-cfssl/
19. The boring technology behind a one-person Internet company 2019-12-18

    tags: audio, cloud-computing/aws, configuration-management/ansible, framework/django, observability/datadog, podcast, programming/python, startup, virtualization/vagrant, web

    [ permalink ]
20. AWS | Enable Enhanced Networking with Elastic Network Adapters for vintage OS AMIs 2019-09-17

    tags: chroot, cloud-computing/aws, linux, linux/debian, linux/kernel, virtualization, virtualization/xen

    [ permalink ]

    Paravirtual (PV) to Hardware Virtual Machine (HVM):

    • https://stackoverflow.com/questions/24330721/amazon-ec2-how-to-convert-an-existing-pv-ami-to-hvm

    ENA support:

    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking-ena.html
    • https://forums.aws.amazon.com/thread.jspa?threadID=166135
    • https://aws.amazon.com/premiumsupport/knowledge-center/boot-error-linux-m5-c5/
    • https://bugs.centos.org/view.php?id=14107
    • https://ygrene.tech/how-to-enable-ena-support-for-aws-amis-in-5-steps-and-make-your-bamboo-remote-jobs-really-fast-f2a4254a9955

    Build Debian AMIs from scratch:

    • https://bootstrap-vz.readthedocs.io/en/master/
    • https://github.com/andsens/bootstrap-vz
    • https://www.slideshare.net/JamesBromberger/debian-cloud-building-the-debian-amis
    • https://blog.james.rcpt.to/2012/12/06/official-debian-images-on-amazon-web-services-ec2/

    Squeeze:

    • https://lists.debian.org/debian-cloud/2013/02/msg00023.html

    Wheezy:

    • https://lists.debian.org/debian-cloud/2014/10/msg00009.html
    • https://lists.debian.org/debian-cloud/2014/11/msg00000.html

    Boot to chroot:

    • https://unix.stackexchange.com/questions/85714/boot-into-a-chroot
    • https://wiki.debian.org/chroot
    • https://wiki.debian.org/Debootstrap
    • https://superuser.com/questions/384437/booting-linux-system-from-chroot-is-there-a-better-way-to-do-this/384457#384457
    • https://github.com/lemonsqueeze/boot-chroot