Hi! My name is Sergey, and I am a DevOps at Surf. The DevOps department at Surf aims not only to establish interaction between specialists and integrate workflows but also to actively research and implement current technologies in both our infrastructure and that of our clients. Below, I will share a bit about the changes in the technology stack for containers that we […]
Corrective updates have been released for the stable branches of the DNS server BIND 9.11.22 and 9.16.6, as well as for the experimental branch 9.17.4 currently in development. The new releases fix five vulnerabilities. The most critical vulnerability (CVE-2020-8620) allows remote denial of service to be triggered by sending a specific set of packets to the TCP port on which BIND accepts connections. Sending abnormally large AXFR requests to the TCP port may lead to […]
Microsoft announced support for the WSL2 (Windows Subsystem for Linux) in Windows 10 releases 1903 and 1909, which were formed in May and November of last year. Initially, the WSL2 subsystem, allowing for the execution of Linux executables on Windows, was introduced in the Windows 10 2004 release. Now, Microsoft has backported this subsystem to earlier Windows 10 updates, which […]
openITCOCKPIT is open-source software for configuring Nagios or Naemon. The most significant changes in this version include: Data collection via its own agent The frontend and backend fully interact through the API Notifications through various chat systems (Slack, RocketChat, Mattermost, …) Automatic conversion of measurement units in graphs to simpler units Numerous improvements to the web interface and much […]
Sometimes, you need to obtain a full copy of a volume within a single storage system (SAN), not a snapshot, but a complete volume. However, not all SANs allow this to be done using their own tools. It seems that the only option is to copy through the server, but in this case, the entire volume of data will be routed through the server itself, the network to the SAN, and the SAN ports, […]
LOST by sophiagworld This article compiles some general templates that help engineers work with large-scale services that are queried by millions of users. Based on the author's experience, this is not an exhaustive list, but truly effective advice. So, let's get started. Translated with the support of Mail.ru Cloud Solutions. Beginner Level The measures listed below are relatively easy to implement, but provide high returns. If […]
Daria Vilkova's report for Zabbix Meetup Online I want to introduce you to the monitoring tool for PostgreSQL and the operating system that our company is developing using Zabbix. We chose Zabbix as our monitoring tool a long time ago because it's an open-source platform supported by an active community and is quite popular in Russia. We created an active agent […]
Hello, LOR! Mesosphere is an open version of the Horizon operating system kernel for the Nintendo Switch gaming console, compatible with the original. The development is being handled by the creator of the custom firmware Atmosphere and a team of developers. Currently, the kernel loads and operates on the console, and games are functioning as well. However, there are still many bugs and missing features. The source code is published under […]
Co-founder and CEO of Paragon Software Group, Konstantin Komarov, published a patch in the Linux-Fsdevel mailing list implementing the NTFS filesystem driver, supporting all major operations — reading, writing, working with sparse and packed files, extended attributes, and data recovery and filesystem journaling. The code is provided under the GPL license and meets all basic patch acceptance requirements […]
TL;DR: I'm setting up Wireguard on a VPS, connecting to it from my home router on OpenWRT, and gaining access to my home subnet from my phone. If you have a personal infrastructure on your home server or multiple IP-managed devices at home, you certainly want to access them from work, on the bus, train, or metro. More often […]
In brief, MTA-STS is a way to further secure emails against interception (i.e., man-in-the-middle attacks aka MitM) during transmission between mail servers. It partially addresses inherited architectural issues of email protocols and is described in a relatively recent standard RFC 8461. Mail.ru is the first major mail service in RuNet to implement this standard. A more detailed discussion can be found […]
Guardicore, a company specializing in data center and cloud system protection, has identified a new high-tech malware called FritzFrog, which targets Linux-based servers. FritzFrog combines a worm that spreads through a brute-force attack on servers with an open SSH port, and components for building a decentralized botnet that operates without control nodes and has no single point of failure. A proprietary […]