VirtualTam's bookmarks

1. oha - HTTP load generator 2025-01-08

   tags: command-line, network/http, network/transport-layer-security, programming/rust

   [ permalink ]
2. DNS over HTTPS 2024-11-25

   tags: cryptography/encryption, ietf/rfc, internet/browser/chrome, internet/browser/firefox, network/dns, network/http, network/transport-layer-security

   [ permalink ]

   RFCs:

   • RFC 7858 - Specification for DNS over Transport Layer Security (TLS)
   • RFC 8484 - DNS Queries over HTTPS (DoH)

   Resources:

   • Carsten Strotmann - doh.defaultroutes.de DNS-over-TLS/HTTPS Server
   • DNS over HTTPS - Cloudflare 1.1.1.1 Documentation

   Setting up a DNS-over-HTTPS server:

   • DNS over HTTPS - ArchWiki
   • DNS-over-TLS almost working - Træfik Forum
   • Using Google’s dns.google.com with CoreDNS

   Browser configuration:

   • Configure DoH on your browser - Cloudflare Documentation
   • Using custom DNS-over-HTTPS with CoreDNS and Google Chrome
   • Firefox DNS-over-HTTPS - Firefox Help
3. The Illustrated QUIC Connection - Every byte explained and reproduced 2024-11-19

   tags: network/http, network/quic, network/transport-layer-security, network/udp

   [ permalink ]
4. smallstep/certificates - A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management 2024-05-27

   tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/http-server/traefik, network/reverse-proxy, network/transport-layer-security, programming/go

   [ permalink ]

   • Run a private online TLS certificate authority in a Docker container
   • Configure popular ACME clients to use a private CA with the ACME protocol
   • Run your own private CA & ACME server using step-ca
   • Build a Tiny Certificate Authority For Your Homelab
5. facebookexperimental/kperf - TCP and TLS performance testing tool 2024-03-31

   tags: network/tcp, network/transport-layer-security, performance/benchmark, programming/c

   [ permalink ]
6. HAProxy - TLS Termination Setup 2023-07-24

   tags: cryptography/encryption, network/http, network/http-server/haproxy, network/reverse-proxy, network/transport-layer-security, security

   [ permalink ]

   • Traffic Routing - Rewrite Requests
   • Client IP Preservation - X-Forwarded-For
   • HAProxy & HTTP Strict Transport Security (HSTS)
   • Secure Cookies Using HAProxy Enterprise
7. Web Security Cheat Sheet | Mozilla Infosec 2023-07-23

   tags: network/http, network/http/cookie, network/transport-layer-security, programming/html, programming/javascript, security, web

   [ permalink ]
8. OpenSSL Cookbook 2023-05-31

   tags: cryptography/certificate, network/http, network/transport-layer-security, openssl

   [ permalink ]

   The definitive guide to using the OpenSSL command line for configuration and testing.

   Topics covered in this book include:

   • key and certificate management,
   • server configuration,
   • a step by step guide to creating a private CA,
   • testing of online services.
9. Debugging Certificate Errors 2023-02-18

   tags: cryptography/certificate, curl, network/http, network/transport-layer-security, openssl

   [ permalink ]

   • https://www.netmeister.org/whatsthatcert/
10. badssl.com - Memorable site for testing clients against bad SSL configs 2023-02-18

    tags: cryptography/certificate, internet/browser/chrome, network/http, network/transport-layer-security

    [ permalink ]

    • https://github.com/chromium/badssl.com
11. TLS Expiry and Uptime Monitor for URLs - Prometheus Blackbox | Grafana 2022-05-01

    tags: network/transport-layer-security, observability/grafana, observability/time-series/prometheus

    [ permalink ]

    • https://prometheus.io/docs/guides/multi-target-exporter/
    • https://github.com/prometheus/blackbox_exporter/blob/master/example.yml
12. OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs | DigitalOcean 2022-02-24

    tags: cryptography/certificate, cryptography/certificate-authority, cryptography/encryption, linux, network/transport-layer-security, openssl

    [ permalink ]
13. testssl.sh-masscan: Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch 2021-11-14

    tags: cryptography/certificate, cryptography/certificate-authority, network/http, network/tcp, network/transport-layer-security, observability/elastic/elasticsearch

    [ permalink ]
14. Enhanced SSL Load Balancing with Server Name Indication (SNI) TLS Extension - HAProxy Technologies 2020-12-11

    tags: network/dns, network/http-server/haproxy, network/reverse-proxy, network/server-name-indication, network/tcp, network/transport-layer-security

    [ permalink ]

    • https://discourse.haproxy.org/t/req-ssl-sni-and-ssl-termination/2139/3
    • com/@olivier.ragain/haproxy-https-load-balancing-on-sni-207c17398d19
15. X.509 v3 Certificates | Learn mTLS the Hard Way 2020-09-08

    tags: cryptography/certificate, cryptography/encryption, network/transport-layer-security, openssl, security

    [ permalink ]
16. testssl.sh: Testing TLS/SSL encryption anywhere on any port 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/shell/bash, web

    [ permalink ]
17. ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing. 2019-07-31

    tags: command-line, cryptography/certificate, network/transport-layer-security, programming/go

    [ permalink ]
18. Kubernetes-native microservices API gateway: Ambassador 2019-07-15

    tags: envoy, linux/container/docker, linux/container/kubernetes, network, network/http, network/proxy, network/transport-layer-security

    [ permalink ]

    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
19. High Performance Browser Networking | Ilya Grigorik 2019-06-24

    tags: book, cryptography/encryption, cryptography/public-key-infrastructure, cryptography/rsa, internet/browser, mobile, network/http, network/transport-layer-security, security, web

    [ permalink ]

    • https://hpbn.co/webrtc/
    • https://hpbn.co/transport-layer-security-tls/
    • https://hpbn.co/webrtc/
20. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik 2019-04-19

    tags: configuration-management/ansible, distributed-system/cluster, linux/container/kubernetes, network, network/firewall, network/http, network/http-server/traefik, network/transport-layer-security

    [ permalink ]

    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/