VirtualTam's bookmarks

1. dev-sec/ansible-collection-hardening - Hardening for Linux, SSH, Apache HTTPD, Nginx, MySQL 2024-03-31

   tags: configuration-management/ansible, database/mysql, linux, network/http-server/apache-httpd, network/http-server/nginx, network/ssh

   [ permalink ]
2. Rust's Journey to Async/await - Steve Klabnik 2022-05-12

   tags: concurrency, concurrency/threading, network/http-server/nginx, programming/node.js, programming/rust

   [ permalink ]
3. Reining in the thundering herd ⛈ Getting to 80% CPU utilization with Django 2021-08-19

   tags: framework/django, gunicorn, network/http, network/http-server/haproxy, network/http-server/nginx, network/reverse-proxy, programming/python, protocol/fastcgi, uwsgi, web, wsgi

   [ permalink ]

   • https://rachelbythebay.com/w/2020/03/07/costly/
   • https://docs.gunicorn.org/en/stable/faq.html#does-gunicorn-suffer-from-the-thundering-herd-problem
   • https://uwsgi-docs.readthedocs.io/en/latest/articles/SerializingAccept.html
   • https://uwsgi-docs.readthedocs.io/en/latest/Options.html
   • https://web.archive.org/web/20160117023812/http://cramer.io/2013/06/27/serving-python-web-applications
   • https://circus.readthedocs.io/en/latest/
4. NGINX Docs | UDP Health Checks 2020-12-21

   tags: load-balancing, network, network/http-server/nginx, network/tcp, network/udp

   [ permalink ]

   • https://docs.nginx.com/nginx/admin-guide/load-balancer/tcp-udp-load-balancer/
5. NAXSI - an open-source, high performance, low rules maintenance WAF for NGINX 2019-09-17

   tags: linux/kernel, network, network/http, network/http-server/nginx, network/proxy, security

   [ permalink ]

   • https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-naxsi-on-ubuntu-14-04
6. Tuning PHP-FPM for high traffic 2019-03-29

   tags: network/http, network/http-server/nginx, performance, php-fpm, programming/php

   [ permalink ]

   • https://haydenjames.io/php-fpm-tuning-using-pm-static-max-performance/
   • https://www.if-not-true-then-false.com/2011/nginx-and-php-fpm-configuration-and-optimizing-tips-and-tricks/
   • http://www.softwareprojects.com/resources/programming/t-optimizing-nginx-and-php-fpm-for-high-traffic-sites-2081.html
   • https://www.php.net/manual/en/install.fpm.configuration.php
   • https://serverfault.com/questions/773216/php-error-pool-www-seems-busy-you-may-need-to-increase-pm-start-servers-or-p
   • https://serverfault.com/questions/874642/configuring-nginx-php-fpm-for-high-traffic-load
7. nginx-quick-reference: This notes describes how to improve Nginx performance, security and other important things. 2019-02-08

   tags: cipher, cryptography/encryption, network/http, network/http-server/nginx, network/transport-layer-security, security, server

   [ permalink ]
8. Docker PHP/PHP-FPM Configuration via Environment Variables | Juan Treminio 2019-01-23

   tags: linux/container/docker, network/http-server/nginx, programming/php, web

   [ permalink ]
9. server-configs: Boilerplate configurations for various web servers. 2019-01-23

   tags: apache, network/http, network/http-server/apache-httpd, network/http-server/nginx, network/transport-layer-security, server

   [ permalink ]

   • https://github.com/h5bp/server-configs-apache
   • https://github.com/h5bp/server-configs-nginx
10. Nginx - Enable PHP-FPM Status Page 2018-10-26

    tags: network/http-server/nginx, programming/php, status

    [ permalink ]

    • https://brandonwamboldt.ca/understanding-the-php-fpm-status-page-1603/
11. OpenResty - a dynamic web platform based on NGINX and LuaJIT 2018-07-17

    tags: network/http, network/http-server/nginx, performance, programming/api, programming/lua, server

    [ permalink ]

    • https://openresty.org/en/linux-packages.html
    • https://opm.openresty.org/
    • https://github.com/openresty
    • https://github.com/openresty/openresty
    • https://www.reddit.com/r/lua/comments/209l92/openresty_with_others_language/
    • https://www.reddit.com/r/devops/comments/6tv1yc/dynamic_layer_4_load_balancing/
12. Creating a custom Nginx build for Ubuntu/Debian - JGuru 2018-07-13

    tags: linux, linux/debian, linux/ubuntu, network/http, network/http-server/nginx, package

    [ permalink ]

    • https://www.debian.org/doc/manuals/maint-guide/build.en.html
    • https://salsa.debian.org/nginx-team/nginx
    • https://www.debian.org/doc/debian-policy/#document-ch-controlfields
    • https://www.debian.org/doc/debian-policy/#document-ch-relationships
    • https://unix.stackexchange.com/questions/333603/debian-control-file-provides-does-not-satisfy-dependency
    • https://github.com/JayH5/nginx-modules
13. https - How to run Gitlab in docker container with nginx-proxy over ssl with letsencrypt securely - Stack Overflow 2018-06-11

    tags: linux/container/docker, network/http, network/http-server/nginx, network/proxy, network/transport-layer-security, source-code-management/git, source-code-management/gitlab

    [ permalink ]

    Container setup:

    • https://gist.github.com/netdesk/c1db2985b542f9916995139318e5a7ce
    • https://hub.docker.com/r/jwilder/nginx-proxy/
    • https://hub.docker.com/r/jrcs/letsencrypt-nginx-proxy-companion/

    Gitlab settings:

    • https://docs.gitlab.com/omnibus/docker/
    • https://docs.gitlab.com/ce/administration/environment_variables.html
    • https://docs.gitlab.com/omnibus/settings/ssl.html
    • https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-config-template/gitlab.rb.template

    Performance considerations:

    • https://docs.gitlab.com/omnibus/settings/memory_constrained_envs.html (skip the cgroups section for Gitaly as we are already running in a container)
    • https://docs.gitlab.com/ee/update/#gitaly-omnibus-gitlab-configuration-structure-change for Gitlab 16 changes to Gitaly configuration
14. What is the difference between the core, full, extras and light packages for nginx? - Ask Ubuntu 2018-04-13

    tags: linux, linux/debian, linux/ubuntu, network/http-server/nginx, package

    [ permalink ]

    • https://launchpad.net/~nginx/+archive/ubuntu/stable
    • https://launchpad.net/~nginx/+archive/ubuntu/development
    • https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1262710
15. NGINX Unit - a dynamic web and application server 2018-04-13

    tags: network/http, network/http-server/nginx, server, web

    [ permalink ]

    • https://www.nginx.com/products/nginx-unit/
    • https://www.nginx.com/blog/introducing-nginx-unit/
    • https://github.com/nginx/unit
    • https://news.ycombinator.com/item?id=15189949
16. Migrating to Sensu 2018-04-04

    tags: database/redis, message-broker/rabbitmq, network, network/http-server/haproxy, network/http-server/nginx, observability, observability/nagios, sensu, sysadmin

    [ permalink ]

    • https://roobert.github.io/2015/11/09/Sensu-What/
    • https://blog.sensuapp.org/our-journey-implementing-sensu-to-monitor-kubernetes-in-production-5764aff2dd50
    • https://phillbarber.blogspot.fr/2015/03/nagios-vs-sensu-vs-icinga2.html
    • https://www.reddit.com/r/devops/comments/56xrnj/how_are_people_suffering_through_sensu_core/
17. logging - Make a Docker application write to stdout - Server Fault 2018-03-19

    tags: linux/container/docker, network/http, network/http-server/nginx, observability/logging

    [ permalink ]

    • https://github.com/nginxinc/docker-nginx/blob/master/mainline/alpine/Dockerfile#L135
    • https://serverfault.com/questions/661454/tail-f-not-following-log-file-in-docker-container
18. Don't publicly expose .git, or how we downloaded your website's sourcecode - An analysis of Alexa's 1M 2018-01-20

    tags: apache, network/http, network/http-server/nginx, security, source-code-management, source-code-management/git, web

    [ permalink ]

    • https://stackoverflow.com/questions/2530372/how-do-i-disable-directory-browsing
    • https://httpd.apache.org/docs/current/mod/mod_rewrite.html

    via https://git.github.io/rev_news/2017/06/14/edition-28/

19. Playing HTTP Tricks with Nginx | Elastic 2017-10-09

    tags: network/http, network/http-server/nginx, observability/elastic, observability/elastic/elasticsearch, observability/elastic/kibana, security, security/authentication

    [ permalink ]

    The X-Pack plugin comes with a subscription plan and a 30-day trial license:

    • https://www.elastic.co/subscriptions
    • https://www.elastic.co/guide/en/x-pack/current/license-expiration.html
    • https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/7

    Once the license has expired, a number of features become unavailable, among which is user management (authentication, authorization).

20. Generate Mozilla Security Recommended Web Server Configuration Files 2017-10-09

    tags: apache, cipher, network/http, network/http-server/nginx, network/transport-layer-security, security, server

    [ permalink ]

    • https://github.com/mozilla/server-side-tls
    • https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
    • https://security.stackexchange.com/questions/51680/optimal-web-server-ssl-cipher-suite-configuration
    • https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/