All posts by kobaan

Uncategorized

Yihaa – Rancher

I’m so amazed. Discovered Rancher today, a fully GUI enabled containerized platform to orchestrate other docker instances within docker masters on different hosts.

Although the GUI needs more work, the generel idea of having a docker based orchestration frontend, which by the way can be updated/replaced on the fly without disrupting
the other containers services.

Other worker docker nodes can be easily attached to the master orchestrator, as well as almost any known cloud technology/distributor private/non-private/public.

Definitely worth a look:
http://rancher.com

Uncategorized

Evaluating SELKS – Suricata Elasticsearch Logstash Kibana Scirius

 

https://www.stamus-networks.com/open-source

Still thinking about mirroring my DSL traffic to Suricata.
But I might need some redesign first, as my fritzbox is serving Wifi users directly without the chance to mirror the traffic before it goes to the internal DSL modem.

Need to split up the modem/routing from the routing/wifi part.
Draytek Vigor in front of the fritzbox would be an idea, or lose the fritzbox completely, as vigor could do all by itself I guess.
Otherwise sending all the traffic to pfSense would also be nice…
…I can’t decide right now.

So much options so less time.

Uncategorized

OpenStack and OpenDaylight with Juju+MaaS

I’m experimenting with OpenStack and OpenDaylight for 4 weeks now, and managed to crash the whole installation 4 times, when enabling OpenDaylight.

https://www.openstack.org
https://www.opendaylight.org
http://www.ubuntu.com/cloud/maas
http://www.ubuntu.com/cloud/juju

It’s really frustrating having to re-setup everything over and over again, even manually, so I decided to invest more time in setup automation via JuJu and freeze some snapshots before doing any further experiments.
But even automated setups keep hanging here and there and cost a lot of time.
Plus MaaS needs to be patched each time to be able to Wake On LAN my VM’s within Virtualbox.

Real hardware would be much easier, although I need at least 8 hosts with dual network cards, that’s out of reach for me at the moment.
My wife already complains about splashing VM windows on her iMac 😀

Uncategorized

Wrote a F5 Networks BigIP ASM Audit Tool

https://devcentral.f5.com/articles/the-big-ip-application-security-manager-part-1-what-is-the-asm

Today I spent some time to write an automatic audit tool to
crosscheck various configuration parameters within F5’s
Application Security Manager on their BigIP Loadbalancer.

In addition to daily config change diffs which are monitored in subversion, now IPv6 typos will be reported, missing iRules for certain services detected, assigned ASM policies per vServer and assigned certificates checked.

Also expiration times of SSL certificates reported, amongst a few other things.

Very useful now.
This should have been done within the box itself.