explainshell.com

VN:F [1.9.22_1171]
Rating: 6.0/10 (1 vote cast)

Match linux command-line arguments to view their help text.

stackshare.io

VN:F [1.9.22_1171]
Rating: 8.0/10 (1 vote cast)

Dev / Production stacks for all to see. Handy tool to see what software is trending today.

aws.amazon.com

VN:F [1.9.22_1171]
Rating: 7.7/10 (3 votes cast)

Amazons’s cloud computing & web hosting service.

Amazon EC2 now supports Availability Zone ID across its APIs

18 December 2025 @ 8:55 pm

Amazon EC2 now supports Availability Zone ID (AZ ID) parameter, enabling you to create and manage resources such as instances, volumes, and subnets using consistent zone identifiers. AZ IDs are consistent and static identifiers that represent the same physical location across all AWS accounts, helping you optimize resource placement. Prior to this launch, you had to use an AZ name while creating a resource, but these names could map to different physical locations. This mapping made it difficult to ensure resources were always co-located especially when operating with multiple accounts. Now, you can specify the AZ ID parameter directly in your EC2 APIs to guarantee consistent placement of resources. AZ IDs always refer to the same physical location across all accounts, which means you no longer need to manually map AZ names across your accounts or deal with the complexity of tracking and aligning zones. This capability is now available for resources including instances, lau

Amazon WorkSpaces Applications announces Elastic fleets powered by Ubuntu Pro 24.04 LTS

18 December 2025 @ 4:00 pm

Amazon WorkSpaces Applications now offers support for Ubuntu Pro 24.04 LTS on Elastic fleets, enabling Independent Software Vendors (ISVs) and central IT organizations to stream Ubuntu desktop applications to users while leveraging the flexibility, scalability, and cost-effectiveness of the AWS Cloud. Amazon WorkSpaces Applications is a fully managed, secure desktops and applications streaming service that provides users with instant access to their desktops and applications from anywhere. Within Amazon WorkSpaces Applications, Elastic fleet is a server less fleet type that lets you stream desktop applications to your end users from an AWS-managed pool of streaming instances without needing to predict usage, create and manage scaling policies, or create an image. Elastic fleet type is designed for customers that want to stream applications to users without managing any capacity or creating WorkSpaces Applications images. To get started sign into the

Amazon ECS Managed Instances now supports Amazon EC2 Spot Instances

18 December 2025 @ 3:00 pm

Amazon ECS Managed Instances now supports Amazon EC2 Spot Instances, extending the range of capabilities available with AWS-managed infrastructure. With this launch, you can leverage spare EC2 capacity at up to 90% discount compared to On-Demand prices for fault-tolerant workloads, while AWS handles infrastructure management. ECS Managed Instances is a fully managed compute option designed to eliminate infrastructure management overhead, dynamically scale EC2 instances to match your workload requirements and continuously optimize task placement to reduce infrastructure costs. You can simply define your task requirements such as the number of vCPUs, memory size, and CPU architecture, and Amazon ECS automatically provisions, configures and operates most optimal EC2 instances within your AWS account using AWS-controlled access. You can also

Amazon MSK Connect now supports dual-stack (IPv4 and IPv6) connectivity for new connectors

18 December 2025 @ 3:00 pm

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports dual-stack connectivity (IPv4 and IPv6) for new connectors on Amazon MSK Connect. This capability enables customers to create connectors on MSK Connect using both IPv4 and IPv6 protocols, in addition to the existing IPv4-only option. It helps customers modernize applications for IPv6 environments while maintaining IPv4 compatibility, making it easier to meet compliance requirements and prepare for future network architectures. Amazon MSK Connect is a fully managed service that allows you to deploy and operate Apache Kafka Connect connectors in a fully managed environment. Previously, connectors on MSK Connect only supported IPv4 addressing for all connectivity options. With this new capability, customers can now enable dual-stack connectivity (IPv4 and IPv6) on new connectors using the Amazon MSK Console, AWS CLI, SDK, or CloudFormation by setting the Network Type p

Amazon WorkSpaces now supports IPv6

18 December 2025 @ 3:00 pm

Amazon WorkSpaces now supports IPv6 for WorkSpaces domains and external endpoints, enabling users to connect through an IPv4/IPv6 dual-stack configuration from compatible clients (excluding SAML authentication). This helps customers meet IPv6 compliance requirements and eliminates the need for costly networking equipment to handle address translation between IPv4 and IPv6. Dual-stack support for WorkSpaces addresses the Internet's growing demand for IP addresses by offering a vastly larger address space than IPv4. This eliminates the need to manage overlapping address ranges within your Virtual Private Cloud (VPC). Customers can deploy WorkSpaces through dual-stack that supports both IPv4 and IPv6 protocols while maintaining backward compatibility with existing IPv4 systems. Customers can also connect to their WorkSpaces through PrivateLink VPC endpoint

AWS IoT Core adds message batching to HTTP rule action

18 December 2025 @ 3:00 pm

AWS IoT Core now lets you batch multiple IoT messages into a single HTTP rule action, before routing the messages to downstream HTTP endpoints. This enhancement helps you to reduce cost and throughput overhead when ingesting telemetry from your Internet of Things (IoT) workloads. AWS IoT Core is a fully managed service that securely connects millions of IoT devices to the AWS cloud. Using rules for AWS IoT, you can filter, process, and decode device data, and route that data to AWS services or third-party endpoints via 20+ AWS IoT rule actions, such as HTTP rule action - which routes the data to HTTP endpo

Amazon EC2 C8a instances now available in the Europe (Spain) region

18 December 2025 @ 3:00 pm

Starting today, the compute-optimized Amazon EC2 C8a instances are available in the Europe (Spain) region. C8a instances are powered by 5th Gen AMD EPYC processors (formerly code named Turin) with a maximum frequency of 4.5 GHz, delivering up to 30% higher performance and up to 19% better price-performance compared to C7a instances. C8a instances deliver 33% more memory bandwidth compared to C7a instances, making these instances ideal for latency sensitive workloads. Compared to Amazon EC2 C7a instances, they are up to 57% faster for GroovyJVM allowing better response times for Java-based applications. C8a instances offer 12 sizes including 2 bare metal sizes. This range of instance sizes allows customers to precisely match their workload requirements. C8a instances are built on AWS Nitro System and are ideal for high performance, compute-intensive workloads such as batch processing, distributed analyt

Amazon MSK introduces KRaft support for Express Brokers with Apache Kafka v3.9

18 December 2025 @ 8:00 am

Amazon Managed Streaming for Apache Kafka (MSK) now supports Apache Kafka version 3.9 for Express Brokers. This release introduces support for KRaft (Kafka Raft), Apache Kafka's new consensus protocol that eliminates the dependency on Apache ZooKeeper for metadata management. KRaft shifts metadata management in Kafka clusters from external Apache ZooKeeper nodes to a group of controllers within Kafka. This change allows metadata to be stored and replicated as topics within Kafka brokers, resulting in faster propagation of metadata. New Express Broker clusters created using Kafka v3.9 will automatically use KRaft as the metadata management mode, giving you the benefits of this modern architecture from the start. The ability to upgrade existing clusters to v3.9 will be available in a future release. Amazon MSK Express Brokers with Kafka v3.9 are available in all AWS regions where MSK Express is supported. To get started, create a new Express Broker cluster and select K

Amazon SES announces email validation

18 December 2025 @ 8:00 am

Today, Amazon Simple Email Service (SES) announces email validation, a new capability that helps customers reduce bounce rates and protect sender reputation by validating email addresses before sending. Customers can validate individual addresses via API calls or enable automatic validation across all outbound emails. Email validation helps customers maintain list hygiene, reduce bounces and improve delivery by identifying invalid addresses that could damage sender reputation. The API provides detailed validation insights such as syntax checks and DNS records. With Auto Validation enabled, SES automatically reviews every outbound email address with out requiring any code changes. Auto-Validation can be configured at the account level or at the configuration set level using simple toggles in the AWS console, enabling seamless integration with existing workflows. Email validation is available in all AWS Regions where Amazon SES is available. To learn more, see

Amazon ECS now enables you to define weekly event windows for scheduling task retirements on AWS Fargate

18 December 2025 @ 8:00 am

Amazon ECS now enables you to define weekly event windows for scheduling task retirements on AWS Fargate. This capability provides precise control over when infrastructure updates and task replacements occur, helping prevent disruption to mission-critical workloads during peak business hours. AWS Fargate is a serverless, pay-as-you-go compute engine that lets you focus on building applications without managing servers. As part of the AWS shared responsibility model, Fargate maintains the underlying infrastructure with periodic platform updates. Fargate automatically retires your tasks for these updates and notifies you about upcoming task retirements via email and the AWS Health Dashboard. By default, tasks are retired 7 days after notification, but you can configure the fargateTaskRetirementWaitPeriod account setting to extend the retirement period to 14 days or initiate immediate retirement (0 days). Previously, you could build automation using the task retirement notific

networkworld.com

VN:F [1.9.22_1171]
Rating: 6.0/10 (1 vote cast)

Information, intelligence and insight for Network and IT Executives.

Networking terms and definitions

18 December 2025 @ 6:21 pm

To find a brief definition of the networking term you are looking for user your browser’s “Find” feature then follow links to a fuller explanation. Abstraction interface (SAI) An abstraction interface (SAI) is an API designed to allow network software (such as an operating system) to control the hardware of a network switch. Traditionally, if you bought a switch from a specific vendor, you had to use its software to run it. If you wanted to switch hardware, you had to redo management system. SAI c

Breaking the ransomware kill chain: Why distributed lateral security is no longer optional

18 December 2025 @ 5:59 pm

Ransomware attacks in 2025 have caused business operations to cease for weeks and months at a time, resulting in massive financial losses in organizations around the globe in sectors such as retail, manufacturing, and healthcare. These major breaches go well beyond the purview of the security team alone. They demand boardroom attention and a fundamental rethinking of enterprise defense strategies. Much of the urgency stems from how artificial intelligence (AI) has rapidly transformed the threat landscape. AI-powered autonomous attacks now probe enterprise networks with minimal human intervention, discovering thousands of potential entry points where human attackers might find

Cisco: Latest news and insights

18 December 2025 @ 4:28 pm

Cisco (Nasdaq:CSCO) is the dominant vendor in enterprise networking, and under CEO Chuck Robbins, it continues to shake things up.  Cisco is focusing on strategic AI initiatives and partnerships across various regions to build and power AI data centers and ecosystems. This includes collaborations with major players like BlackRock, Global Infrastructure Partners, Microsoft and Nvidia to drive investment and scale AI infrastructure. The networking giant continue

Cisco confirms zero-day exploitation of Secure Email products

18 December 2025 @ 11:02 am

Cisco has warned that a China-linked hacking group is actively exploiting a previously unknown vulnerability in its Secure Email appliances to gain persistent access, forcing affected organizations to consider disruptive rebuilds of critical security infrastructure while patches remain unavailable. Cisco Talos said the campaign has been active since at least late November, raising concerns for security leaders about unseen compromise and how far incident response efforts may need to extend beyond the affected devices. The vulnerability affects Cisco Secure Email Gateway, C

The state of open-source networking: The foundations and technologies driving today’s networks

17 December 2025 @ 8:15 pm

3 key facts about open-source networking > 92% of organizations view open source networking as critical to their future infrastructure plans. Projects like SONiC enable hardware independence, helping organizations achieve up to 50% reduction in TCO. eBPF-based CNI implementations like Cilium are replacing older protocols, leading to better performance in Kubernetes environments. Two decades ago, Linux emerged as a mainstream operating system and was perhaps the most well-known open source technology. What has emerged around Linux as part of the broader networking ecosystem are a se

Cisco defines AI security framework for enterprise protection

17 December 2025 @ 5:28 pm

Cisco has rolled out an AI Security and Safety Framework it hopes will help customers and the industry get out in front of what is expected to be a potential flood of adversarial threats, content safety failures, model and supply chain compromise, and agentic behavior problems as AI becomes an integral part of the enterprise network. With AI, humans, organizations, and governments cannot adequately comprehend or respond to the implications of such rapidly e

Kubernetes 1.35 enables zero-downtime resource scaling for production cloud workloads

17 December 2025 @ 3:34 pm

The open-source Kubernetes cloud native platform is getting its last major release of 2025 today. Kubernetes 1.35 comes nearly four months after the Kubernetes 1.34 update, which integrated a host of enhancements for networking. Kubernetes has emerged to become the default cloud technology for containers and is supported by every major cloud platform. It powers everything from traditional web applications to distributed AI training c

Network jobs watch: Hiring, skills and certification trends

17 December 2025 @ 2:43 pm

Network and infrastructure roles continue to shift as enterprises adopt technologies such as AI-driven network operations, multicloud networking, zero trust network access (ZTNA), and SD-WAN. Here’s a recap of some of the latest industry research, hiring s

Enterprises to prioritize infrastructure modernization in 2026

17 December 2025 @ 1:45 pm

Readying enterprise infrastructure for AI and other resource-heavy applications is high on the to-do list for businesses looking to stay competitive 2026. The rise of AI has heightened the importance of IT modernization, as many organizations are still reliant on outdated, legacy infrastructure that is ill-equipped to handle modern workload requirements, says tech solutions provider World Wide Technology (WWT). “A key aspect of any refresh initiative is gaining better visibility and control over the existing asset base. Too often, organizations don’t have a clear understanding of what hardware and software they have deployed, which maintenance contracts are in place, or

Will Google throw gasoline on the AI chip arms race?

16 December 2025 @ 8:48 pm

Google caused two significant disruptions in the AI chip field last month. The first one is the release of its seventh-generation tensor processing unit (TPU), codenamed Ironwood. The chip offers a significant improvement in inference processing, for which it was custom built. Ironwood also

forensicswiki.org

VN:F [1.9.22_1171]
Rating: 8.0/10 (1 vote cast)

Computer forensic tools and techniques used by investigators

cyberciti.biz

VN:F [1.9.22_1171]
Rating: 6.0/10 (2 votes cast)

online community of new and seasoned Linux / Unix sysadmins.

Download of the day: GIMP 3.0 is FINALLY Here!

18 March 2025 @ 3:45 am

Wow! After years of hard work and countless commits, we have finally reached a huge milestone: GIMP 3.0 is officially released! I am excited as I write this and can't wait to share some incredible new features and improvements in this release. GIMP 2.10 was released in 2018, and the first development version of GIMP 3.0 came out in 2020. GIMP 3.0 released on 16/March/2025. Let us explore how to download and install GIMP 3.0, as well as the new features in this version. Love this? sudo share_on: Twitter - Facebook -

How to list upgradeable packages on FreeBSD using pkg

16 March 2025 @ 8:25 pm

See all FreeBSD related FAQ Here is a quick list of all upgradeable packages on FreeBSD using pkg command. This is equivalent to apt list --upgradable command on my Debian or Ubuntu Linux system. Love this? sudo share_on: Twitter -

Ubuntu to Explore Rust-Based “uutils” as Potential GNU Core Utilities Replacement

16 March 2025 @ 12:17 pm

In a move that has sparked significant discussion within the Ubuntu Linux fan-base and community, Canonical, the company behind Ubuntu, has announced its intention to explore the potential replacement of GNU Core Utilities with the Rust-based "uutils" project. They plan to introduce new changes in Ubuntu Linux 25.10, eventually changing it to Ubuntu version 26.04 LTS release in 2026 as Ubuntu is testing Rust 'uutils' to overhaul its core utilities potentially. Let us find out the pros and cons and what this means for you as an Ubuntu Linux user, IT pro, or developer. Love this? sudo share_on: Twitter -

How to install KSH on FreeBSD

3 March 2025 @ 11:50 pm

See all FreeBSD related FAQ Installing KSH (KornShell) on FreeBSD can be done with either FreeBSD ports or the pkg command. The ports collection will download the KSH source code, compile it, and install it on the system. The pkg method is easier, and it will download a pre-compiled binary package. Hence, it is recommended for all users. KornShell (KSH) has a long history, and many older Unix systems and scripts rely on it. As a result, KSH remains relevant for maintaining and supporting legacy infrastructure. Large enterprises, especially those with established Unix-based systems, continue to use KSH for scripting and system administration tasks. Some industries where KS

Linux Sed Tutorial: Learn Text Editing with Syntax & Examples

3 March 2025 @ 9:47 am

See all GNU/Linux related FAQ Sed is an acronym for "stream editor." A stream refers to a source or destination for bytes. In other words, sed can read its input from standard input (stdin), apply the specified edits to the stream, and automatically output the results to standard output (stdout). Sed syntax allows an input file to be specified on the command line. However, the syntax does not directly support output file specification; this can be achieved through output redirection or editing files in place while making a backup of the original copy optionally. Sed is one of the most powerful tools on Linux and Unix-like systems. Learning it is worthwhile, so in t

How to tell if FreeBSD needs a Reboot using kernel version check

23 February 2025 @ 10:07 pm

See all FreeBSD related FAQ Keeping your FreeBSD server or workstation updated is crucial for security and stability. However, after applying updates, especially kernel updates, you might wonder, "Do I need to reboot my system?" Let's simplify this process and provide a straightforward method for determining whether a reboot is necessary using the CLI, shell script, and ansible playbook. Love this? sudo share_on: Twitter

Critical Rsync Vulnerability Requires Immediate Patching on Linux and Unix systems

15 January 2025 @ 6:04 pm

Rsync is a opensource command-line tool in Linux, macOS, *BSD and Unix-like systems that synchronizes files and directories. It is a popular tool for sending or receiving files, making backups, or setting up mirrors. It minimizes data copied by transferring only the changed parts of files, making it faster and more bandwidth-efficient than traditional copying methods provided by tools like sftp or ftp-ssl. Rsync versions 3.3.0 and below has been found with SIX serious vulnerabilities. Attackers could exploit these to leak your data, corrupt your files, or even take over your system. There is a heap-based buffer overflow with a CVSS score of 9.8 that needs to be addressed on both the client and server sides of rsync package. Apart from that info leak via uninitialized stack contents defeats ASLR protection and rsync server can make client write files outside of destination directory using symbolic links. Love this? sudo share_on:

How to control the SSH multiplexing with the control commands

15 January 2025 @ 8:29 am

See all GNU/Linux related FAQ Multiplexing will boost your SSH connectivity or speed by reusing existing TCP connections to a remote host. This is useful when you frequently connect to the same server using SSH protocol for remote login, server management, using IT automation tools over SSH or even running hourly backups. However, sometimes your SSH command (client) will not respond or get hung up on the session when using multiplexing. Typically, this happens when your public IP changes (IPv4 to IPv6 changes when using DNS names), VPN issues, or firewall cuts connections. Hence, knowing SSH client control commands can save you time and boost your productivity when such gotc

ZFS Raidz Expansion Finally, Here in version 2.3.0

14 January 2025 @ 9:19 am

After years of development and testing, the ZFS raidz expansion is finally here and has been released as part of version 2.3.0. ZFS is a popular file system for Linux and FreeBSD. RAIDz is like RAID 5, which you find with hardware or Linux software raid devices. It protects your data by spreading it across multiple hard disks along with parity information. A raidz device can have single, double, or triple parity to sustain one, two, or three hard disk failures, respectively, without losing any data. Hence, expanding or adding a new HDD is a very handy feature for sysadmins in today's data-sensitive apps. Love this? sudo share_on: Twitter -

How to run Docker inside Incus containers

18 December 2024 @ 5:44 am

See all FFmpeg command releated tutorials Incus and Docker both use Linux kernel features to containerize your applications. Incus is best suited when you need system-level containers that act like traditional VMs and provide a persistent developer experience. On the other hand, Docker containers are ephemeral, i.e., temporary in nature. All files created inside Docker containers are lost when your Docker container is stopped or removed unless you stored them using volumes in different directories outside Docker. Docker is created as a disposable app deployment system. Incus containers are not typically created as disposables, and data is kept inside

heartinternet.co.uk

VN:F [1.9.22_1171]
Rating: 8.3/10 (3 votes cast)

Hosting packages for an initial web presence

How to Choose the Perfect Domain Name for Your Business

9 July 2025 @ 9:30 am

Get Your Name Right – The Internet Never Forgets Choosing a domain name might sound simple – until you realise it’s the online equivalent of naming your child. No pressure.... The post How to Choose the Perfect Domain Name for Your Business appeared first on Heart Internet.

What is a VPS? And is it Time You Got One?

25 June 2025 @ 9:30 am

Discover what a VPS server is, how VPS hosting works, and why it’s ideal for small businesses. Learn the benefits and explore VPS plans with Heart Internet. The post What is a VPS? And is it Time You Got One? appeared first on Heart Internet.

We’re Now Certified by the Green Web Foundation

11 June 2025 @ 9:30 am

💚 Hosting that works hard, treads lightly.   Big news: Heart Internet is now officially listed with the Green Web Foundation. That means our hosting services are recognised as being... The post We’re Now Certified by the Green Web Foundation appeared first on Heart Internet.

What is Web Hosting and Why Does Your Business Need It?

6 May 2025 @ 4:54 pm

Without web hosting, your website would not be visible or accessible to users! It is crucial to host your website with a website hosting service to ensure that your business... The post What is Web Hosting and Why Does Your Business Need It? appeared first on Heart Internet.

How to Enable Root Access via SSH on Your VPS for Migration using Plesk

11 March 2025 @ 7:41 am

If you get one of the following messages from the Plesk migrator you should check that you are using root as the username along with the Plesk admin password. “The... The post How to Enable Root Access via SSH on Your VPS for Migration using Plesk appeared first on Heart Internet.

How to Enable Root Access on Your VPS Server Using Plesk

11 March 2025 @ 7:40 am

If you get one of the following messages from the Plesk migrator you should check that you are using root as the username along with the Plesk admin password. “The... The post How to Enable Root Access on Your VPS Server Using Plesk appeared first on Heart Internet.

Are your website fonts sending the right message?

3 February 2025 @ 10:18 am

Did you know that the fonts you use on your website can impact the way your customers perceive and interact with your brand? The post Are your website fonts sending the right message? appeared first on Heart Internet.

Black Friday at Heart Internet

28 November 2024 @ 3:27 pm

Black Friday is here, and we’re bringing you incredible savings to help your business thrive online. From 29th November 2024 to 9th December 2024, you can enjoy 15% off some... The post Black Friday at Heart Internet appeared first on Heart Internet.

13 Easy Ways to Optimise Your Website for Speed and Performance

1 October 2024 @ 2:53 pm

A slow website is like a slow waiter: it doesn’t matter how good the food is if the service is frustratingly sluggish. If your site takes too long to load,... The post 13 Easy Ways to Optimise Your Website for Speed and Performance appeared first on Heart Internet.

Black Friday and Cyber Monday sale now on at Heart Internet

22 November 2022 @ 3:31 pm

You can now get up to 33% off the price of a cPanel-managed Web Hosting plan at Heart Internet. The post Black Friday and Cyber Monday sale now on at Heart Internet appeared first on Heart Internet.

serverfault.com

VN:F [1.9.22_1171]
Rating: 6.0/10 (1 vote cast)

Common Server issues – FAQs and answers from those in the know

Mysql / Mariadb Federated Table Creation Statement Truncating Host Name

18 December 2025 @ 9:23 pm

I am attempting to create a federated table on a mariadb host at 192.168.254.118 with a mysql server on 192.168.254.185. I can connect to 192.168.254.185 from 192.168.254.118 with no problem using the same credentials, but whenever I try to create a federated table with this src: CONNECTION='mysql://user:[email protected]/database/table' No matter what I do, either a connection string like above or using a "CREATE SERVER" statement I keep getting the same error: ERROR 1434 (HY000): Can't create federated table. Foreign data src error: database: 'database' username: 'user' hostname: '192.168 Note that the error itself doesn't have a closing single quote on it. I've tried using an IP address and a hostname.local and no matter what I do it always lists the same error with the hostname cut off after about 6-8 characters. Versions: 192.168.254.118: mariadb from 12.1.2-MariaDB, client 15

Django db backup with cron job

16 December 2025 @ 11:26 pm

I am looking to set up database backups for my Django application, which uses MySQL. I was trying to create a cron job that ran manage.py dumpdata. It looked like this: 0 18 * * * python3 /home/my-name/proj_name/manage.py dumpdata > /home/my-name/backups/data-`date +%b-%d-%y-%k`.json; When I run the command itself from the terminal, it creates a backup called something like data-Dec-15-18.json, as expected. But no such file is being created by cron. The man page says that you can run all cron jobs immediately with cron -N, so I was trying to troubleshoot by doing that. But when I ran that command with the job in the normal user's crontab, I received a message seteuid(): Operation not permitted, and when I ran it with the job in the root user's crontab, there was no output, and no backup created either. If somebody could explain why the command isn't working when run by

Intermittent 20s TCP/TLS connect delay to AWS ALB via Cloudflare DNS (proxy disabled) — curl shows high time_connect

16 December 2025 @ 4:33 am

I am troubleshooting an intermittent TCP/TLS connection delay affecting HTTPS APIs accessed via Cloudflare DNS (DNS-only, proxy disabled) and routed to an AWS Application Load Balancer (ALB) backed by ECS containers. Background I am implementing Google Smart Home cloud-to-cloud account linking using my own OAuth 2.0 server. The following endpoints are exposed: /oauth/authorize /oauth/token /signin (normal sign-in API) All APIs: Use the same Cloudflare-managed domain (e.g. https://new.kevin.cloud) Have Cloudflare proxy disabled (gray cloud / DNS-only) Resolve directly to the same AWS ALB Are served by ECS containers Use ALB listener TLS policy: ELBSecurityPolicy-TLS13-1-2-Res-2021-06 Observed behavior Requests from Postman

How do I compare two variables in an NGNIX conf file using the if statement or some other way?

28 October 2024 @ 8:10 pm

I have a variable say $foo and I need to do a case-insensitive match against a given pattern, but that pattern is also a variable received via a header. If that is true then I set a given variable to 1, which will be used later on. I tried with the following snippet: set $variable 0; if ($foo ~* $http_header) { set $variable 1; } This didn't work. I also tried using ${http_header}, "$http_header", "${http_header}", but none of these worked. Can someone please tell me how to achieve this? P.S. I know there will be a solution with LUA scripts, but we need to avoid using that for the purposes of the project I am working on.

Apache config SetEnv variable only if not set

27 March 2024 @ 11:50 am

I have a fairly high traffic web server and would like to squeeze some micro optimization out of it. In Apache's config I have: SetEnvIfNoCase Request_URI "\.a?png$" dontlog SetEnvIfNoCase Request_URI "\.bmp$" dontlog SetEnvIfNoCase Request_URI "\.css$" dontlog ...several more I'd like to achieve this (pseudo-code): <If env=!dontlog> SetEnvIfNoCase Request_URI "\.a?png$" dontlog </If> <If env=!dontlog> SetEnvIfNoCase Request_URI "\.bmp$" dontlog </If> <If env=!dontlog> SetEnvIfNoCase Request_URI "\.css$" dontlog </If> ...several more Performing a config test using my pseudo-code results in: AH00526: Syntax error on line 260 of C:/apache24/conf/httpd.conf: Cannot parse condition clause: syntax error, unexpected T_OP_STR_EQ, expecting '(' Note: Please ign

How can I design conditional access policies for geofencing that allow single user country exceptions?

3 August 2023 @ 3:26 pm

In AzureAD, I have a global conditional access policy (cap) that prevents users from accessing their accounts from non approved countries (I do realize this is not an accurate/reliable means of securing an environment). We do have MFA configured for these as well. When people travel we put them in an exception group so they can go to Bali or wherever. There is a finite list of people that remote work from locations we generally ban e.g. India, Ghana etc. For those folks, they are permanently in the exception list. That list is meant to be temporary. I could make more CAPs for these individual users but that could get out of hand if I made a block-all-but-india for example and those users would be in the exclude of the main policy. Would be messy real quick. I want to be able to say that an individual can go to this one country but the rest of them are banned just like everyone else. Best I can tell CAP is not meant for than granularity. Is there a

IF Condition in Apache 2.4 is always executed

9 May 2023 @ 12:38 pm

I am trying to load a module based on a condition. {PHPMODULENAME} is replaced in the config by the AMP Server I am using - so please don't get confused. <If "'{PHPMODULENAME}' == 'php8_module'"> LoadModule module1 "..." </If> <Else> LoadModule module2 "..." </Else> If the condition is true it should load module1 - because only then the module1 is available and module2 isn't. And vice versa. However when I try to start Apache, it throws an error, because either module1 or module2 is missing. I know that - that's why I add the IF condition.

Conditional Access Policy - Service Account Location and App control

22 September 2022 @ 2:37 pm

I'm looking to allow certain service accounts that can't use MFA to our office public IP range (which is working fine) and not trying to add in only allowing it to access Power BI. I've got my first CAP policy that targets all users and enforces MFA but it excludes service accounts. My second CAP: This works for location blocking but not for app blocking. Can this be done in one CAP or does it need to be broken out into multiple, not sure what I'm doing wrong? Users - Include: Power BI service Account Cloud Apps or Actions - Include: All Apps and Exclude: Power BI Service Conditions - Locations - Include: Any Location and Exclude: name locations of office Grant - Block Access

Conditional directives based on User-Agent with Apache 2.2.x?

1 April 2022 @ 12:23 am

I want to implement something like the following in our Apache httpd configuration: <If "%{HTTP_USER_AGENT} !~ /something/"> RemoveEncoding .gz .tgz AddType application/x-gzip .gz </If> but my understanding is that this conditional <If> syntax only works with Apache 2.4.x. Unfortunately, I'm stuck with Apache 2.2.x for the time being. Is there a way to do this with Apache 2.2.x? Perhaps using BrowserMatch and an environment variable? Thanks!

Prevent OpenVPN systemd service from starting at home [closed]

19 October 2021 @ 2:54 pm

Within my laptop PC, I set a systemd service that make a OpenVPN connection to my home, and let it automatically start on boot, so that I can access my home server anywhere. The trouble is that when I'm home already, it still connects to VPN, and confuse the route table of the laptop, therefore I can't access the server when I'm at home. Is there a way, I can let a systemd service start conditionally? Thanks!

poundhost.com

VN:F [1.9.22_1171]
Rating: 6.7/10 (3 votes cast)

Cheap dedicated server hosting

tagadab.com

VN:F [1.9.22_1171]
Rating: 8.0/10 (1 vote cast)

Cheap developer VPS hosting from £10