Administration Section
Hello everyone. This article is written for those who are still torn between choosing virtualization platforms and after reading the article from the series āWe installed Proxmox and everything is great, 6 years uptime without a single downtimeā. But after installing one or another boxed solution, the question arises: how can we tweak this and that so that monitoring is more […]
On September 23 at 20:00 MSK, Sergey Bondarev will conduct a free webinar āOverview of Kubespray Capabilitiesā, where he will explain how to prepare Kubespray for speed, efficiency, and fault tolerance. Sergey Bondarev will discuss the differences between the original version and our fork: Differences between the original version and our fork. Those who have already dealt with Kubespray might be wondering why I am contrasting Kubeadm with Kubespray, since Kubespray is for […]
How did I come to this? Not long ago, I had to work on the backend of a high-load project, where it was necessary to organize the regular execution of a large number of background tasks with complex calculations and requests to third-party services. The project is asynchronous and before I arrived, it had a simple cron task execution mechanism: a loop checking the current […]
Hello, Habr! Last week, our online conference dedicated to Google Cloud solutions, Google Cloud Next ā20: OnAir, concluded. Although the conference featured many interesting sessions and all content is available online, we understand that a single global conference cannot meet the interests of all developers and companies around the world. Thatās why, to address the unique needs of users […]
Container Storage Interface (CSI) is a unified interface that facilitates interaction between Kubernetes and storage systems. Weāve previously provided a brief overview of it, and today we will take a closer look at the integration of CSI and Ceph: demonstrating how to connect a Ceph storage system to a Kubernetes cluster. The article contains real, albeit slightly simplified, examples for ease of understanding. Instructions for installing and configuring Ceph and Kubernetes clusters […]
Whether to update the firmware on personal phones is a personal decision. Some opt for CyanogenMod, while others feel they do not own the device without TWRP or jailbreak. In the case of corporate mobile phone updates, the process should be relatively standardized; otherwise, even Ragnarok would seem like fun to the IT team. Read on to learn how this occurs in the corporate world. A brief overview […]
A new hacking technique overcomes the problem of 'network jitter', which can affect the success of attacks through third-party channels. This technique, developed by researchers at Leuven University (Belgium) and New York University in Abu Dhabi, has shown that attackers can exploit network protocol features to orchestrate confidential information leaks. This method, called Timeless Timing Attacks, was demonstrated this year at the Usenix conference, […]
1. Introduction Every company, even the smallest, has a need for authentication, authorization, and accounting of users (the AAA protocol family). At the initial stage, AAA is quite effectively implemented using protocols such as RADIUS, TACACS+, and DIAMETER. However, with the growth in the number of users and companies, the tasks increase: maximum visibility of hosts and BYOD devices, multi-factor […]
Everyone loves alerts. Of course, it's much better to receive a notification when something happens (or gets fixed) than to sit and look at graphs searching for anomalies. There are quite a few tools created for this. Alertmanager from the Prometheus ecosystem and vmalert from the VictoriaMetrics product group. Zabbix notifications and alerts in Grafana. Custom bash scripts and Telegram bots that periodically trigger some […]
You've probably noticed: when facing a long task or a challenging path to a goal, heavy procrastination sets in. The fear of starting to write text, code, focus on your health, or pursue learningā¦ The outcome is simple and incredibly frustrating: time passes, yet nothing changes; you havenāt done anything to ease your life. At some point, it becomes distressing to think about the wasted time […]
Hello, Habr. Today, I continue the series of publications that I wrote specifically for the launch of the new stream of the 'Software Architect' course. Introduction Choosing an architectural style is one of the fundamental technical decisions when building an information system. In this series of articles, I propose to explore the most popular architectural styles for building applications and answer the question of when each architectural style is most preferable. […]
For a number of reasons, it was necessary to set up a VPN connection between the network in VMWare Cloud Director and a separate Ubuntu machine in the cloud. This note does not claim to be a complete description; it is just a small how-to. The only article found on this topic is from 2015: 'Site to Site IPSEC VPN between NSX Edge and Linux strongSwan.' Unfortunately, it cannot be used directly […]