Kubernetes vs Swarm: the most basic primer

Context Docker Swarm is a great orchestration tool for getting into container orchestration platforms and an excellent starting point for simple to moderately complex workloads and app deployment topologies. A lot of companies still use it, and it works pretty well for production workloads; however for long running clusters you may start to run into …

Slack Slash Command security

Slack "Slash Commands" can be a very useful tool to write a CLI to interact with other applications that you manage. In short the contract works something like this; from within a slack channel that the commands are available you would type: /my-command [text arguments] Seems simple enough, however you need to implement a REST …

Slack alerts for testssl.sh

This article is a followup to my previous post about testssl.sh-processor. In short, now that I had mass execution of many endpoints, I now needed to be able to do something with all the testssl.sh command invocation JSON result files laying around. My goal was to be able to react to each JSON result file …

Batch processing testssl.sh commands

If you secure your entire infrastructure at the transport layer with end to end SSL for both internal and external traffic, then you likely have a ton of endpoints, each with their own SSL software stacks and a wide array of different certificates, some CA signed, others not etc. Both the amount of these and …

Mocking a rate limiting endpoint 429

Ever have some client code that needs to call another endpoint which rate limits you? Join the club. I recently did, and honestly I didn't care at all about the ONE particular rest client that needed to backoff appropriately when the 429s were being barfed back; instead what I did care about was implementing a …

Migrating APIs to Tyk

In the recent past I was helping on a project who's objective was to migrate off of a very costly proprietary appliance based API gateway solution, and move into a cheaper alternative; preferably an open source api gateway offering. The main challenge was that a large percentage of the APIs to be migrated were legacy …

Google Wifi router, port forwarding, you have no devices, privacy

Had an Asus router die today, so in a pinch I went out and bought a Google WiFi router after hearing "good things". I have a few wired devices and several wifi connected devices and I also have needs for port forwarding. The first thing you will notice that is quite different from other routers …