We are pleased to present the beta version of NGINX Service Mesh (NSM), a lightweight service mesh utilizing a data plane based on NGINX Plus for managing container traffic in Kubernetes environments. NSM can be downloaded for free here. We hope you will try it out for dev and test environments — and we look forward to your feedback on GitHub. Implementing microservices methodology is associated […]
Disclaimer: This article does not provide information that is previously unknown to those familiar with the concept of CDN; it serves as an overview of the technology. The first web page appeared in 1990 and was only a few bytes in size. Since then, content has scaled both qualitatively and quantitatively. The development of the IT ecosystem has led to modern web pages being measured in megabytes, and the trend towards […]
At the time of writing this article, a search on a popular job website for the term 'Network Engineer' yielded approximately three hundred vacancies throughout Russia. In comparison, a search for the phrase 'System Administrator' returns nearly 2.5 thousand vacancies, while 'DevOps Engineer' shows almost 800. Does this mean that network professionals are no longer needed in the age of dominant clouds, Docker, Kubernetes, and ubiquitous […]
Recently, I had the time to reconsider how the password reset function should work, first while embedding this functionality into ASafaWeb, and then when I helped someone else create something similar. In the second case, I wanted to provide him with a link to a canonical resource with all the details about securely implementing the reset function. However, the problem is that, […]
Minimizing the risks of using DoH and DoT Protecting against DoH and DoT Do you control your DNS traffic? Organizations invest a lot of time, money, and effort into securing their networks. However, one area that often doesn't receive adequate attention is DNS. A good overview of the risks associated with DNS is presented in Verisign's presentation at the Infosecurity conference. 31% of respondents […]
The capabilities of modern surveillance systems have long gone beyond mere video recording. Detecting movement in the area of interest, counting and identifying people and vehicles, tracking an object in motion—today, even the most affordable IP cameras can accomplish all this. With a sufficiently powerful server and the right software, the possibilities for security infrastructure become virtually limitless. And yet, […]
I have never used Dr. Web. I have no idea how it works. But that didn't stop me from writing a series of automated tests for it (only my laziness prevented me from writing a hundred more): Installation test for Dr. Web; Access restriction test for removable devices (flash drives); Directory access segregation test between programs; Test […]
This post is written because our employees have had quite a few conversations with clients about application development on Kubernetes and the specifics of such development on OpenShift. We usually start with the thesis that Kubernetes is just Kubernetes, while OpenShift is already a Kubernetes platform, like Microsoft AKS or Amazon EKS. Each of these platforms has its own […]
Even during a disaster, there's always time for a cup of tea. A disaster recovery plan (DRP) is something that ideally you'll never need. But if suddenly beavers migrating during mating season chew through the main fiber optic line or a junior admin drops the production database, you definitely want to be sure you have a pre-prepared plan for what to do about all this […]
Foreword Our 'friendship' began two years ago. I started a new job where the previous admin casually left me this software as an inheritance. I couldn't find anything online apart from the official documentation. Even now, if you Google 'rudder', in 99% of the cases, you will get results about ship steering wheels and drones. I managed to find an approach to it. Since the Community […]
In my work, I often encounter new technical solutions/software products for which there is very little information available in Russian online. This article aims to fill one such gap with an example from my recent practice when it was necessary to set up CDC event sending from two popular DBMS (PostgreSQL and MongoDB) to a Kafka cluster using Debezium. I hope this overview article, which has appeared due to […]
Among our clients, there are companies that use Kaspersky solutions as their corporate standard and manage antivirus protection independently. It might seem that the virtual desktop service, where the provider monitors the antivirus, wouldn't fit them at all. Today, I'll show how clients can manage protection themselves without compromising the security of virtual desktops. In the last post, we already shared in […]