VirtualTam's bookmarks

1. Cloudflare is blocking NewsBlur RSS feed fetchers

   2025-02-08
   cloud-computing/cloudflare curl feed/rss network/http

   Permalink
   • 403 using curl
   • Cloudflare Radar - Verified Bots
2. Cloudflare - Over 700 million events/second: How we make sense of too much data

   2025-02-04
   cloud-computing/cloudflare observability/logging programming/go

   Permalink
3. foundations - Cloudflare's Rust service foundations library

   2024-11-22
   cloud-computing/cloudflare network/http network/reverse-proxy network/tcp network/udp observability programming/rust

   Permalink
   • Introducing Foundations - our open source Rust service foundation library
   • Oxy is Cloudflare's Rust-based next generation proxy framework
   • Trying Out Cloudflare's foundations Library for Rust
4. Swift on Server

   2024-06-12
   cloud-computing/aws linux/container/docker network/grpc network/http network/http/openapi programming/swift

   Permalink
   • swift-server
   • Packaging Applications for Deployment
   • swift-server/swift-openapi-lambda
   • swift-server/swift-aws-lambda-runtime
   • swift-server/swift-aws-lambda-events
   • grpc/grpc-swift
5. Cloud Study Network - Free Certifications

   2024-04-03
   cloud-computing course database knowledge learn network

   Permalink
6. AWS Access Key Format

   2024-02-28
   cloud-computing/aws programming/go programming/python security security/credentials security/token

   Permalink
   • AWS Security Credentials Formats
   • A short note on AWS KEY ID
   • Research Uncovers AWS Account Numbers Hidden in Access Keys
   • TruffleHog Now Detects AWS Canaries without setting them off
7. (A few) Ops Lessons We All Learn The Hard Way

   2023-02-18
   cloud-computing network/dns programming/shell sysadmin

   Permalink

   28. Blocking TCP port 53 traffic leads to very strange failures. Don't.
   29. The source you're looking at is not the code running in production.
   30. "Prod" is just another name for "staging".

8. lol-html: Low output latency streaming HTML parser/rewriter with CSS selector-based API

   2022-10-13
   cloud-computing/cloudflare programming/css programming/go programming/html programming/rust

   Permalink
   • https://blog.cloudflare.com/html-parsing-2/
   • https://github.com/coolspring8/go-lolhtml
9. Cloudflare Research | OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks

   2022-07-12
   cloud-computing/cloudflare cryptography/encryption security/authentication security/password

   Permalink
   • https://blog.cloudflare.com/opaque-oblivious-passwords/
   • OPAQUE: An Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks
   • https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-opaque
   • https://blog.cryptographyengineering.com/2018/10/19/lets-talk-about-pake/
10. Terraform code quality - CloudSkiff

    2021-08-21
    cloud-computing configuration-management/terraform infrastructure/automation security

    Permalink
    • https://github.com/tfutils
    • https://github.com/terraform-linters
    • https://terraform-compliance.com/
    • https://github.com/aquasecurity/tfsec
11. Kafka, Pulsar & RabbitMQ

    2021-08-21
    cloud-computing distributed-system/cluster message-broker/kafka message-broker/rabbitmq microservice network

    Permalink

    Articles by Eran Stiller:

    • RabbitMQ vs. Kafka – An Architect’s Dilemma (Part 1)
    • RabbitMQ vs. Kafka – An Architect’s Dilemma (Part 2)

    Article and StackOverflow response by Lovisa Johansson from CloudAMQP, seem slightly biased towards RabbitMQ:

    • SO: When to use RabbitMQ over Kafka?
    • When to use RabbitMQ or Apache Kafka

    Benchmarks by Confluent.io (Kafka creator and Cloud Provider), seem heavily biased towards Kafka:

    • Kafka vs. Pulsar vs. RabbitMQ: Performance, Architecture, and Features Compared
    • Benchmarking Apache Kafka, Apache Pulsar, and RabbitMQ: Which is the Fastest?
12. Extreme HTTP Performance Tuning: 1.2M API req/s on a 4 vCPU EC2 Instance | talawah.io

    2021-05-23
    cloud-computing/aws linux linux/kernel linux/kernel/ebpf network/http performance programming/c

    Permalink
    • https://blog.packagecloud.io/eng/2016/06/22/monitoring-tuning-linux-networking-stack-receiving-data/
    • https://blog.packagecloud.io/eng/2016/10/11/monitoring-tuning-linux-networking-stack-receiving-data-illustrated/
    • https://blog.packagecloud.io/eng/2017/02/06/monitoring-tuning-linux-networking-stack-sending-data/
    • http://www.brendangregg.com/systems-performance-2nd-edition-book.html
13. Smithy - A language for defining services and SDKs

    2021-05-18
    cloud-computing/aws programming/api programming/code-generation programming/java

    Permalink
    • https://github.com/awslabs/smithy
    • https://awslabs.github.io/smithy/1.0/guides/index.html
14. cli53 - Command line tool for Amazon Route 53

    2021-04-09
    cloud-computing/aws command-line network/dns

    Permalink
15. Open Distro for Elasticsearch | Open Distro

    2020-12-20
    cloud-computing cloud-computing/aws machine-learning observability/elastic/elasticsearch observability/logging observability/tracing programming/java security/authentication security/authorization

    Permalink
    • https://github.com/opendistro-for-elasticsearch
    • https://aws.amazon.com/blogs/aws/new-open-distro-for-elasticsearch/
    • https://opendistro.github.io/for-elasticsearch/blog/releases/2020/12/announcing-trace-analytics/
    • https://logz.io/blog/open-distro-for-elasticsearch/
16. What is "AWS Security Scanner" in my server logs?

    2020-07-31
    cloud-computing/aws network security

    Permalink
    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html
    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html
    • https://docs.aws.amazon.com/cli/latest/reference/ec2/modify-instance-metadata-options.html
    • https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
    • https://aws.amazon.com/blogs/aws/new-host-based-routing-support-for-aws-application-load-balancers/
    • https://aws.amazon.com/about-aws/whats-new/2018/07/elastic-load-balancing-announces-support-for-redirects-and-fixed-responses-for-application-load-balancer/
    • https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how
    • https://www.reddit.com/r/aws/comments/e18e5n/botexploit_what_is_this_trying_to_do_and_how/f8qympp/
    • https://forums.aws.amazon.com/thread.jspa?threadID=316889
    • https://owasp.org/www-community/attacks/Server_Side_Request_Forgery
    • https://www.wired.com/story/capital-one-paige-thompson-case-hacking-spree/
    • https://krebsonsecurity.com/2019/08/what-we-can-learn-from-the-capital-one-hack/
    • https://krebsonsecurity.com/2019/07/capital-one-data-theft-impacts-106m-people/
    • http://www.thecloudavenue.com/2019/08/how-capital-one-hack-was-achieved-in-aws.html
    • http://www.thecloudavenue.com/2019/11/changes-to-aws-ec2-instance-metadata-service.html
17. How we abused Slack's TURN servers to gain access to internal services | Communication Breakdown

    2020-04-09
    cloud-computing/aws multimedia network network/webrtc security streaming video

    Permalink
    • https://webrtchacks.com/
    • https://www.enablesecurity.com/security-assessment/webrtc-pentest/
18. CFSSL: Cloudflare's PKI and TLS toolkit

    2020-02-05
    cloud-computing/cloudflare cryptography cryptography/certificate cryptography/certificate-authority security

    Permalink
    • https://blog.cloudflare.com/introducing-cfssl/
19. The boring technology behind a one-person Internet company

    2019-12-18
    audio cloud-computing/aws configuration-management/ansible framework/django observability/datadog podcast programming/python startup virtualization/vagrant web

    Permalink
20. AWS | Enable Enhanced Networking with Elastic Network Adapters for vintage OS AMIs

    2019-09-17
    chroot cloud-computing/aws linux linux/debian linux/kernel virtualization virtualization/xen

    Permalink

    Paravirtual (PV) to Hardware Virtual Machine (HVM):

    • https://stackoverflow.com/questions/24330721/amazon-ec2-how-to-convert-an-existing-pv-ami-to-hvm

    ENA support:

    • https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking-ena.html
    • https://forums.aws.amazon.com/thread.jspa?threadID=166135
    • https://aws.amazon.com/premiumsupport/knowledge-center/boot-error-linux-m5-c5/
    • https://bugs.centos.org/view.php?id=14107
    • https://ygrene.tech/how-to-enable-ena-support-for-aws-amis-in-5-steps-and-make-your-bamboo-remote-jobs-really-fast-f2a4254a9955

    Build Debian AMIs from scratch:

    • https://bootstrap-vz.readthedocs.io/en/master/
    • https://github.com/andsens/bootstrap-vz
    • https://www.slideshare.net/JamesBromberger/debian-cloud-building-the-debian-amis
    • https://blog.james.rcpt.to/2012/12/06/official-debian-images-on-amazon-web-services-ec2/

    Squeeze:

    • https://lists.debian.org/debian-cloud/2013/02/msg00023.html

    Wheezy:

    • https://lists.debian.org/debian-cloud/2014/10/msg00009.html
    • https://lists.debian.org/debian-cloud/2014/11/msg00000.html

    Boot to chroot:

    • https://unix.stackexchange.com/questions/85714/boot-into-a-chroot
    • https://wiki.debian.org/chroot
    • https://wiki.debian.org/Debootstrap
    • https://superuser.com/questions/384437/booting-linux-system-from-chroot-is-there-a-better-way-to-do-this/384457#384457
    • https://github.com/lemonsqueeze/boot-chroot