Topics /

Infrastructure & DevOps

The most popular blog posts about infrastructure & devops on Hacker News. 50 posts.

2013
7

Air Gaps

Since I started working with Snowden’s documents, I have been using a number of tools to try to stay secure from the NSA. The advice I shared included using Tor, preferring certain cryptography over others, and using public-domain encryption wherever possible. I also recommended using an air gap, which physically…

22

Securing Ubuntu

Table of Contents Initial Setup Setting up iptables and Fail2Ban Fail2Ban iptables rules Make shared memory read-only Setting up Bastille Linux Configuring Bastille sysctl hardening Setting up a chroot environment Securing nginx inside the chroot Extras Initial Setup Let’s login to our new machine and take some…

26

Marelle: logic programming for devops

In the past, walking the uneasy borderline of academia, I used to managed compute servers for my research group. New hardware was a rare godsend, configuring it by hand was natural. At 99designs, I’ve been privy to the opposite approach: machines should be disposable. This requires the entire setup of a new machine to…

29

Things I set on new servers

There are a number of things you can do to make a server more secure whilst protecting your hosted entities and their users. Here are just three of the many things I do on every new server I commission. I hasten to add that these are not necessarily the most effective or at the top of my list - they are just that: 3…

30

CDN vs S3

As I said in my last post: S3 is NOT a CDN. It is an amazing Simple Storage Service, not a Simple Delivery Service. Via AWS: Amazon S3 is storage for the Internet. It is designed to make...