Administration Section
Hello! My name is Mikhail, and I am the Deputy Director of IT at 'Sportmaster.' I want to share a story about how we dealt with the challenges that arose during the pandemic. In the early days of the new reality, the usual offline retail format of 'Sportmaster' came to a standstill, and the load on our online channel, especially in terms of delivery to the customer, increased tenfold. […]
Hi, Habr. I am finishing a series of articles dedicated to the launch of the 'Network Engineer' course from OTUS, focusing on VxLAN EVPN technology for routing within the fabric and using Firewalls to restrict access between internal services. Previous parts of the series can be found at the following links: Part 1 of the series — L2 connectivity between servers Part 2 of the series — Routing between VNIs Part 2.5 of the series — […]
No matter how many myths and legends surround compliance with Federal Law 152-FZ, something always remains in the shadows. Today, we want to discuss the not-so-obvious nuances that both large companies and small businesses might encounter: the subtleties of classifying personal data by categories — when a small online store collects data related to a special category, often without realizing it.
Damn it, Google, I didn't want to write in the blog again. I have so much to do. Blogging takes time, energy, and creativity that I could use for more productive things: my books, music, my game, and so on. But you've annoyed me enough that I have to write this. So let's get it over with. I'll start with a little, […]
Support for black and white lists for agent-side metrics Tikhon Uskov, Integration Engineer, Zabbix Security Issues In Zabbix 5.0, a new feature has been introduced that enhances security in systems using the Zabbix Agent and replaces the old EnableRemoteCommands parameter. The enhancement to the security of systems using the agent is due to the fact that the agent can execute a large number of potentially […]
This is a quote from one of my acquaintances who once approached me with a question about Postgres. Back then, we solved his problem in a couple of days, and after thanking me, he added: 'It's good to have a DBA acquaintance.' But what if you don't have a DBA you know? There could be quite a few options for answers, ranging from searching among friends of friends to […]
In this simple tutorial, we will create a couple of microservices using Spring Boot and organize their interaction via the Axon framework. Let's consider the following task: there is a source of trades from the stock market. This source provides us with trades through a REST interface. We need to retrieve these trades, store them in a database, and create a convenient in-memory storage. This storage should perform […]
Configuring data storage for applications running in a Kubernetes cluster can be done in several ways. Some of these methods are already outdated, while others have emerged very recently. In this article, we will discuss the concept of three types of storage connectivity options, including the latest one — connecting via the Container Storage Interface. Method 1: Specifying a PV in the pod manifest A typical manifest describing a pod in a Kubernetes cluster: Color […]
TL;DR: You can now run Kubernetes on Google’s Confidential VMs. Google announced the expansion of its product line with the launch of a new service at the Cloud Next OnAir event on September 8, 2020. Confidential GKE nodes add more secrecy to workloads running in Kubernetes. In July, the first product named Confidential VMs was launched, and today these virtual machines […]
Regardless of what a company does, DNS security should be an integral part of its security strategy. Name resolution services, which convert network node names to IP addresses, are used by virtually all applications and services on the network. If an attacker gains control over an organization’s DNS, they can easily: take over management of publicly accessible resources and redirect incoming […]
Hello, Habr! In October, OTUS is launching a new stream of the "Linux Security" course. As we approach the course start, we are sharing an article written by one of our instructors — Alexander Kolesnikov. In 2016, Microsoft introduced a new technology to the IT community, WSL (Windows Subsystem for Linux), which aimed at uniting previously irreconcilable competitors fighting for popularity […]
Background I once tried to create an article on a couple of wiki projects, but they were removed because they lacked encyclopedic value, and apparently, if you write about something new and unknown, it's perceived as publicity. After a while, my article was deleted. I was initially upset, but in the discussion, I was invited to another small […]