Author: Yuri Gagarin

Iptables and traffic filtering for the poor and lazy dissenters

The relevance of blocking access to prohibited resources concerns any admin who may officially be accused of failing to comply with laws or orders from relevant authorities. Why reinvent the wheel when there are specialized programs and distributions for our tasks, such as: Zeroshell, pfSense, ClearOS. Another question arose from management: Does the product we use have a security certificate from our country? We had experience […]

Orphan services: the flip side of (micro)service architecture

The Operations Director of the portal Banki.ru, Andrey Nikolsky, spoke at last year's DevOpsDays Moscow conference about orphan services: how to identify orphans in the infrastructure, the issues with orphan services, what to do with them, and how to cope when nothing helps. Below is the text version of the report. Hello, colleagues! My name is Andrey, I lead the operations at Banki.ru. We have large services, […]

The Suricata 5.0 attack detection system is available.

The OISF (Open Information Security Foundation) has released version 5.0 of the Suricata network intrusion detection and prevention system, which provides tools for inspecting various types of traffic. Suricata configurations allow for the use of a signature database developed by the Snort project, as well as the Emerging Threats and Emerging Threats Pro rulesets. The project's source code is distributed under the GPLv2 license. Key changes: New modules have been introduced […]

Khronos has provided the opportunity for free certification of open drivers

The Khronos consortium, responsible for developing graphics standards, has granted developers of open graphics drivers the ability to certify their implementations for compliance with the OpenGL, OpenGL ES, OpenCL, and Vulkan standards, without the need to pay royalties or join the consortium as members. Applications are accepted for both hardware open drivers and fully software-based implementations developed under the auspices of […]

The Tor Project has released OnionShare 2.2

The Tor Project has released OnionShare 2.2, a tool that allows for secure and anonymous file sharing and the setup of a public file exchange service. The project's code is written in Python and is distributed under the GPLv3 license. Pre-packaged versions are available for Ubuntu, Fedora, Windows, and macOS. OnionShare runs a web server on the local system that operates as a hidden service […]

League of Free Internet

How to resist authoritarian regimes on the Internet Are we disconnecting? A woman in an internet café in Beijing, July 2011 Im Chi Yin / The New York Times / Redux Yes, I will have to preface with a "translator's note." The discovered text struck me as intriguing and debatable. The only edits made to the text are in "bold." I allowed myself to express my personal view in the tags. The era of emergence […]

Is it possible to earn more as an engineer in another country?

Contents: How can we compare countries by cost of living today? About purchasing power parity Why BIM (engineers and coordinators) Conclusion 1. Different gross = equal net Conclusion 2. The lower the gross, the more m² Where the data came from Methodology for calculating PPP indicators Quite often, in conversations with people from other countries, we start comparing salary levels. […]

Admin without hands = hyper-convergence?

This is a fairly common myth in the server hardware industry. In practice, hyper-converged solutions (where everything is in one) are needed for many purposes. Historically, the first architectures were developed by Amazon and Google for their services. The idea at that time was to create a computing farm consisting of identical nodes, each with its own disks. All of this […]

Liveness probes in Kubernetes can be dangerous

Note from the translator: Lead engineer at Zalando, Henning Jacobs, has repeatedly noticed that Kubernetes users struggle to understand the purpose of liveness and readiness probes, as well as their proper application. Hence, he gathered his thoughts in this concise note, which will eventually become part of the K8s documentation. Health checks, known in Kubernetes as liveness probes (i.e., literally, […]

AMD Zen 3 architecture will boost performance by more than eight percent

The architecture development for Zen 3 is already complete, as indicated by AMD representatives at industry events. By the third quarter of next year, the company plans to closely collaborate with TSMC to initiate the production of EPYC server processors of the Milan generation, which will be manufactured using second-generation EUV lithography based on 7nm technology. It is already known that the third-level cache for processors with […]

Mozilla ends support for search add-ons based on OpenSearch technology

Mozilla's developers announced a decision to remove all extensions for integration with search engines that use OpenSearch technology from the Firefox add-ons catalog. It is also reported that support for OpenSearch XML markup in Firefox will be removed in the future, which allowed websites to define scripts for integrating search engines into the browser's search panel. OpenSearch-based add-ons will be removed on December 5.

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster