VirtualTam's bookmarks

1. facebookexperimental/kperf - TCP and TLS performance testing tool 2024-03-31

   tags: network/tcp, network/transport-layer-security, performance/benchmark, programming/c

   [ permalink ]
2. toxiproxy - A TCP proxy to simulate network and system conditions for chaos and resiliency testing 2024-03-10

   tags: network/proxy, network/tcp, programming/go, programming/ruby, programming/testing/integration, quality-of-service

   [ permalink ]

   • Building and Testing Resilient Ruby on Rails Applications
3. (A few) Ops Lessons We All Learn The Hard Way 2023-02-18

   tags: cloud, network/dns, programming/shell, sysadmin

   [ permalink ]

   28. Blocking TCP port 53 traffic leads to very strange failures. Don't.
   29. The source you're looking at is not the code running in production.
   30. "Prod" is just another name for "staging".

4. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

   [ permalink ]
5. HAProxy version 2.4.0 - Configuration Manual - mqtt_is_valid 2021-11-01

   tags: network/http-server/haproxy, network/mqtt, network/tcp

   [ permalink ]

   • https://www.haproxy.com/blog/announcing-haproxy-2-4/
   • https://www.youtube.com/watch?v=gaq2Jmjrugg
6. How can I sniff the traffic of remote machine with wireshark? - Server Fault 2021-03-02

   tags: network, network/ssh, network/tcp, network/udp, wireshark

   [ permalink ]

   • https://blog.jasonantman.com/2011/04/using-wireshark-to-capture-packets-from-a-remote-host/
   • https://osqa-ask.wireshark.org/questions/7976/wireshark-setup-linux-for-nonroot-user
7. NGINX Docs | UDP Health Checks 2020-12-21

   tags: load-balancing, network, network/http-server/nginx, network/tcp, network/udp

   [ permalink ]

   • https://docs.nginx.com/nginx/admin-guide/load-balancer/tcp-udp-load-balancer/
8. Introduction to HAProxy Logging - HAProxy Technologies 2020-12-11

   tags: network/http, network/http-server/haproxy, network/reverse-proxy, network/tcp, observability/logging

   [ permalink ]

   • https://www.haproxy.com/documentation/hapee/latest/administration/docker-logging/
9. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies 2020-12-11

   tags: network/dns, network/http-server/haproxy, network/reverse-proxy, network/server-name-indication, network/tcp, network/transport-layer-security

   [ permalink ]

   • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
   • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19
10. How NAT traversal works · Tailscale Blog 2020-09-19

    tags: network, network/address-translation, network/firewall, network/router, network/tcp, network/udp, network/webrtc

    [ permalink ]
11. Docker and Kubernetes userland proxies, versus exposing wide port ranges 2020-01-24

    tags: linux/container, linux/container/docker, linux/container/kubernetes, network, network/tcp, network/udp, performance

    [ permalink ]

    Docker:

    • https://github.com/moby/moby/issues/9021
    • https://github.com/moby/moby/issues/11185
    • https://github.com/moby/moby/issues/11185#issuecomment-245983651
    • https://github.com/moby/moby/issues/19017
    • https://github.com/docker/for-mac/issues/2670#issuecomment-372365274

    Kubernetes:

    • https://github.com/kubernetes/kubernetes/issues/1802
    • https://github.com/kubernetes/kubernetes/issues/23864
    • https://github.com/kubernetes/kubernetes/issues/23864#issuecomment-387070644

    Disabling userland proxy:

    • https://github.com/moby/moby/issues/5618
    • https://github.com/moby/moby/issues/14856
    • https://github.com/moby/moby/issues/11185#issuecomment-129085898

    Threads:

    • https://stackoverflow.com/questions/28717464/docker-expose-all-ports-or-range-of-ports-from-7000-to-8000
    • https://www.percona.com/blog/2016/02/05/measuring-docker-cpu-network-overhead/
    • https://forums.docker.com/t/exposing-large-range-of-ports-is-not-viable/20127/5
12. GitHub Load Balancer Director and supporting tooling 2019-12-31

    tags: high-availability, load-balancing, network, network/http, network/http-server/haproxy, network/tcp, source-code-management/github

    [ permalink ]

    • https://github.com/github/glb-director
    • https://github.blog/2018-06-20-mysql-high-availability-at-github/
13. "Networking and Go: An Engineer's Journey" by Sneha Inguva 2019-10-05

    tags: network, network/http, network/tcp, programming/go

    [ permalink ]
14. Every Linux networking tool I know - The poster 2019-03-15

    tags: linux, network, network/ip, network/packet, network/tcp, network/udp, observability, statistics, system, traffic

    [ permalink ]
15. Gorsair: Gorsair hacks its way into remote docker containers that expose their APIs. 2019-02-15

    tags: linux/container/docker, network/tcp, pentest, security

    [ permalink ]
16. ngrep: grep applied to the network layer 2018-12-22

    tags: grep, network, network/packet, traffic, wireshark

    [ permalink ]

    A PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

17. The next version of HTTP won’t be using TCP | Ars Technica 2018-11-27

    tags: google, network, network/http, performance, protocol, security

    [ permalink ]

    • https://mailarchive.ietf.org/arch/msg/quic/RLRs4nB1lwFCZ_7k0iuz0ZBa35s
    • https://datatracker.ietf.org/meeting/98/materials/slides-98-edu-sessf-quic-tutorial-00.pdf
    • https://www.reddit.com/r/networking/comments/9wriid/http3quic_and_the_yawning_abysmal_division/
    • https://www.reddit.com/r/programming/comments/9wncor/httpoverquic_to_be_renamed_http3/
    • https://www.youtube.com/watch?v=uVf_yyMfIPQ
    • https://github.com/lucas-clemente/quic-go
18. Let's Encrypt with HAProxy 2018-07-25

    tags: cryptography/certficate, letsencrypt, network/http, network/http-server/haproxy, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://github.com/letsencrypt/acme-spec/issues/33
    • https://coolaj86.com/articles/adventures-in-haproxy-tcp-tls-https-ssh-openvpn/
    • https://blog.chmd.fr/ssh-over-ssl-episode-4-a-haproxy-based-configuration.html
19. Tcpdump Examples - 22 Tactical Commands | HackerTarget.com 2018-05-31

    tags: dump, linux, network, network/packet, network/tcp

    [ permalink ]
20. TCP Tracepoints | Brendan Gregg 2018-04-10

    tags: bcc, linux, linux/kernel, network, observability/tracing

    [ permalink ]

    • https://lkml.org/lkml/2017/12/6/494
    • https://github.com/iovisor/bcc/pull/1639
    • http://www.brendangregg.com/DTrace/DTrace_Network_Providers.html