Using ELK to collect Nginx logs and show TLS version and ciphers used by HTTP clientsTurning off old SSL or TLS versions or SSL ciphers is easy. But what if some clients still connect using these old protocols or ciphers? This information can be logged and analyzed in ELK!Claudio
One of my New Year’s resolution was to get back a bit closer to the lower level parts of Linux. And what’s there lower than the kernel itself? I always preferred vanilla kernel, even when I was fooling around with Gentoo, and this hasn’t changed. In December
Release v0.9.4 · iovisor/bpftrace[0.9.4] 2020-02-04Highlights New calls: signal, override, strncmpSupport for attaching to kprobes at an offsetSupport for struct bitfields All ChangesAdded Add support to attach kprobe to of...GitHubiovisor Not long ago I wrote about backporting BCC & bpftrace in Ubuntu with focus on
CVE-2019-20372 | UbuntuUbuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.Ubuntu NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web
I'm following Brendan Gregg's performance-related content for years now. I started when he was still in Joyent, later on I bought his Systems Performance book and I get back to it whenever I'm doing any profiling. Now I follow closely all of the latest
I already briefly wrote about the idea of having dynamically discoverable upstreams in NGINX when I covered the topic of NGINX Extended. With the boom of microservices and containers scattered all over the place there was suddenly a need for something that would serve as a single source of truth.