Administration Section
The release of Linux kernel 5.6 is scheduled for the end of March. In today's material, we discuss the upcoming changes — the new file system, the WireGuard protocol, and driver updates. Photo — lucas huffman — Unsplash The long-awaited VPN protocol David Miller, responsible for the Linux networking subsystem, has decided to include WireGuard in the core. This is a VPN tunnel developed by the cybersecurity company Edge Security. […]
The canary is a small bird that sings continually. These birds are sensitive to methane and carbon monoxide. Even at low concentrations of excess gases in the air, they can lose consciousness or die. Gold miners and other miners took canaries with them as an indication: while the canaries sing, work can continue, but if they fall silent—it's time to leave the mine due to gas. Miners often sacrificed the little bird to escape.
This year, we plan to seriously develop themes around containers, Cloud-Native Java, and Kubernetes. A logical continuation of these themes will be a discussion of the Quarkus framework, which has already been covered on Habr. Today's article is dedicated not so much to the workings of 'subatomic super-fast Java' but rather the prospects that Quarkus brings to the Enterprise. Java and the JVM remain exceptionally popular, but when dealing with serverless technologies...
Introduction On March 7th, RedHat (soon to be IBM) introduced a new framework—Quarkus. According to the developers, this framework is based on GraalVM and OpenJDK HotSpot and is designed for Kubernetes. The Quarkus stack includes: JPA/Hibernate, JAX-RS/RESTEasy, Eclipse Vert.x, Netty, Apache Camel, Kafka, Prometheus, and more. The aim of creating it is to make Java the leading platform for deployment in Kubernetes...
Recently, WireGuard has garnered significant attention, practically becoming the new 'star' among VPNs. But is it as good as it seems? I would like to discuss some observations and examine the implementation of WireGuard to explain why it isn't a solution that will replace IPsec or OpenVPN. In this article, I aim to debunk some myths [surrounding […]
The analytical database ClickHouse manages various string types, consuming resources. To accelerate system performance, new optimizations are continually being added. ClickHouse developer Nikolai Kochetov discusses the string data type, including a new type, LowCardinality, and explains how to speed up operations with strings. — First, let’s understand how we can store strings. We have string data types. […]
Greetings to all of you, my dear readers! Today, I want to share my thoughts on a long-debated topic and perhaps discuss it in the comments. I often come across articles about bad practices for interviewing programmers, which I believe are quite relevant and, hopefully, readable by HR departments of both large and small companies. In our region, as far as I am concerned […]
I read the articles by the author Interfer about the challenges in IoT and decided to share my experience as an IoT provider. The first article is not promotional, and most of the content does not include device models. I will try to write the details in upcoming articles. I do not see issues with using GSM modems for data collection from metering devices, as I was involved in creating a data collection system for 795 residential buildings, with a frequency […]
Connection tracking (“conntrack”) is a core feature of the Linux kernel's networking stack. It allows the kernel to track all logical network connections or flows and thus identify all packets that constitute each flow, so they can be processed sequentially together. Conntrack is an important kernel feature used in several key cases: NAT relies on information from conntrack […]
I uploaded a new project to Github: A Simple GPU Hash Table. This is a simple hash table for GPU that can handle hundreds of millions of insertions per second. On my laptop with an NVIDIA GTX 1060, the code inserts 64 million randomly generated key-value pairs in about 210 ms and removes 32 million pairs in about 64 ms. So, the speed is around […]
pfSense + Squid with HTTPS filtering + Single Sign-On (SSO) technology with filtering by Active Directory groups. Background: There was a need in the company to implement a proxy server with the ability to filter access to websites (including HTTPS) by AD groups so that users wouldn’t need to enter any additional passwords, and administration could be done via a web interface. Quite a request, isn't it? […]
The computer that operated in the launch vehicle (Launch Vehicle Digital Computer, LVDC) played a key role in the Apollo lunar program, controlling the Saturn V rocket. Like most computers of that time, it stored data in tiny magnetic cores. In this article, Cloud4Y discusses the LVDC memory module from Steve Jurvetson's luxurious collection. This memory module was enhanced in the mid-1960s […]