Category: Administration

How a pod in Kubernetes receives an IP address

Note: This article, written by an SRE engineer from LinkedIn, details the 'internal magic' in Kubernetes — specifically, the interaction between CRI, CNI, and kube-apiserver — and what happens when a pod requests an IP address. One of the fundamental requirements of the Kubernetes networking model is that each pod must have its own IP address, and any other […]

Using inventory plugins from Ansible Content Collections in Ansible Tower

IT environments are becoming increasingly complex. In these conditions, having up-to-date information about the nodes present in the network and subject to processing is critically important for IT automation systems. In Red Hat Ansible Automation Platform, this issue is addressed through so-called inventories — lists of managed nodes. In its simplest form, an inventory is a static file. This is the ideal […]

Overview of the Main Features of Sophos XG Firewall (Part 1: Monitoring and Analytics)

Hello everyone! Following this article, I want to tell you more about the functionality offered by the Sophos XG Firewall solution and introduce you to the web interface. Commercial articles and documents are good, but it’s always interesting to see how the solution looks in real life. How is everything arranged there? So, let’s get started with the review. This article will show the first part […]

How to get a NextGen Firewall for free at home

Hello everyone! Today we will discuss how to get enterprise-class products with full functionality for free at home. For home, I use the following features: filtering the web traffic of home users (the modern internet, even with legitimate use, can be treacherous at home); establishing communication between apartments and a summer house (this allows streaming 4K movie multicast from […]

How to Write Rules for Checkmarx Without Losing Your Mind

Hello, Habr! In our work, our company often deals with various static code analysis tools (SAST). Out of the box, they all perform moderately. Of course, it depends on the project and the technologies used in it, as well as how well these technologies are covered by analysis rules. In my opinion, one of the key criteria for choosing a SAST tool […]

Network-as-a-Service for large enterprises: a custom case

How to upgrade network equipment at a large enterprise without halting production? Project manager at Linxdatacenter, Oleg Fedorov, discusses a large-scale project resembling 'open-heart surgery.' In recent years, we have noticed an increased demand from clients for services related to the networking component of IT infrastructure. The need for connectivity among IT systems, services, applications, monitoring tasks, and operational management of businesses […]

First Look: How the New Corporate Mail System Mailion from M оиОфис Works.

Almost four years ago, we started designing a fundamentally new distributed email system, Mailion, intended for corporate communications. Our solution is built on a Cloud Native microservices architecture, capable of supporting over 1,000,000 users simultaneously, and will cater to 100% of the needs of large corporations. During the development of Mailion, the team has grown several times, and […]

Why is my NVMe slower than SSD?

In this article, we will look at some nuances of the input-output subsystem and their impact on performance. A couple of weeks ago, I encountered the question of why NVMe on one server is slower than SATA on another. I checked the server specifications and realized it was a trick question: the NVMe was from the consumer segment, while the SSD was from the server segment. It is clear that […]

1. Training users in the basics of cybersecurity. Fighting phishing.

Today, a network administrator or security engineer spends a lot of time and effort protecting the enterprise network perimeter from various threats, mastering new prevention and event monitoring systems, yet even this does not guarantee full security. Social engineering is actively used by attackers and can lead to serious consequences. How often have you caught yourself […]

Moving to ClickHouse: 3 years later.

Three years ago, Viktor Tarnavskiy and Alexey Milovidov from Yandex spoke on the HighLoad++ stage about how good ClickHouse is and how it doesn’t slow down. Meanwhile, on the adjacent stage, Alexander Zaitsev presented on migrating to ClickHouse from another analytical DBMS, concluding that ClickHouse is indeed good but not particularly user-friendly. When in 2016 the company […]

How to connect the HX711 ADC to the NRF52832

1. Introduction The task at hand was to develop a communication protocol for the nrf52832 microcontroller with two half-bridge Chinese strain gauges. The challenge was significant due to the lack of clear information available. Likely, the root of the problem lies within the SDK from Nordic Semiconductor — its constant version updates, some redundancy, and the complexity of the functionality. I had to write everything […]

The most accurate weather forecast: a bot for Telegram on cloud functions.

There are many services that provide weather information, but which one should you trust? When I started cycling frequently, I wanted the most accurate information about the weather conditions in the places I ride. My first thought was to build a small DIY weather station with sensors and gather data from it. However, I did not want to "reinvent […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster