Category: Administration

Creation of a formal verification system from scratch. Part 1: Character VM in PHP and Python

Formal verification is the verification of one program or algorithm using another. This is one of the most powerful methods that allows you to find all vulnerabilities in a program or prove that they do not exist. A more detailed description of formal verification can be seen in the example of solving the Wolf, Goat, and Cabbage problem in my previous article. In this article I […]

Statistics and monitoring of PHP scripts in real time. ClickHouse and Grafana go to the aid of Pinba

In this article I will show you how to use pinba with clickhouse and grafana instead of pinba_engine and pinboard. On a php project, pinba is perhaps the only reliable way to understand what is happening with performance. True, pinba is usually implemented only when problems are already observed and it is not clear “where to dig”. Often no one has any idea how many times per second/minute […]

Looking for a problem in the wrong place

This is a small story from real practice, when a small problem, well disguised by fault tolerance, turns into a headache. A small disposition: A small branch, it has its own PBX (asterisk + FreePBX) based on desktop hardware and the same local terminal server with 1C, a file dump and a virtual RO domain controller. The Internet distributes Mikrotik. The branch is small, that's enough for them. It all started […]

Storing, backing up and cataloging photos

Here they periodically write posts about how they store and back up their photos - well, just files. In the last such post, I wrote a rather long comment, thought a little and decided to expand it into a post. Moreover, I have somewhat changed the backup method to the cloud, it may be useful to someone. The home server where much of the above […]

Chiller cooling of the data center: which coolant to choose?

For air conditioning in data centers, centralized multi-zone systems with water cooling machines (chillers) are most often installed. They are more efficient than freon air conditioners, because the coolant circulating between the external and internal units does not go into a gaseous state, and the compressor-condenser unit of the chiller comes into operation only when the temperature rises to a certain level. One of the most fundamental issues when designing [...]

Going through the throes or Encrypting traffic in Direct Connect, part 3

And no one pours new wine into old wineskins; otherwise, the new wine will break through the wineskins and flow out by itself, and the wineskins will be lost; but new wine must be poured into new wineskins; then both will be saved. OK. 5:37,38 In April of this year, the administration of the world's largest DC hub announced the start of support for secure connections. Let's get a look, […]

Finding Bugs in LLVM 8 with the PVS-Studio Analyzer

More than two years have passed since the last check of the LLVM project code using our PVS-Studio analyzer. Let's make sure that the PVS-Studio analyzer is still the leading tool for detecting errors and potential vulnerabilities. To do this, let's check and find new bugs in the LLVM 8.0.0 release. Article to be written To be honest, I didn't feel like writing this article. […]

Installing Zimbra Open-Source Edition on CentOS 7

When planning a Zimbra implementation at an enterprise, the IT manager must also select the operating system on which the Zimbra infrastructure nodes will run. Today, almost all distributions are compatible with Zimbra. Linux, including domestic RED OS and ROSA. Typically, when installing Zimbra in enterprises, the choice falls on either Ubuntu or RHEL, since the development of these distributions […]

Acronis makes API available to developers for the first time

Starting April 25, 2019, partners have the opportunity to get early access (Early Access) to the Acronis Cyber ​​Platform. This is the first stage of a program to create a new ecosystem of solutions, in which companies around the world will be able to use the Acronis platform to integrate cyber protection services into their products and solutions, and also get the opportunity to offer their own […]

CD setup via gitlab

I once thought about automating the deployment of my project. gitlab.com kindly provides all the tools for this, and of course I decided to use it by figuring it out and writing a small deployment script. In this article, I share my experience with the community. TL;DR Configure VPS: disable root, password login, install dockerd, configure ufw Generate certificates for server and client docs.docker.com/engine/security/https/#create-a-ca-server-and-client-keys -with-openssl Enable […]

An Introduction to Kubernetes Network Policies for Security Professionals

Note. Rev .: The author of the article - Reuven Harrison - has over 20 years of experience in software development, and today is the technical director and co-founder of Tufin, a company that creates solutions for managing security policies. Considering Kubernetes network policies as a powerful enough tool for network segmentation in a cluster, he at the same time believes that they […]

Docker: bad advice

When I learned to drive a car, at the very first lesson, the instructor drove to the intersection in reverse, and then said that it was impossible to do this - never at all. I remembered this rule immediately and for the rest of my life. You read Grigory Oster's "Bad Advice" to children, and you see how easily and naturally it dawns on them that this is not the way to do it. About, […]

Buy reliable hosting for sites with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster