jedisct1

#!/bin/sh

yum -y update

# Replace with SERVER="your host name" for a custom host name
SERVER="$(hostname)"
export SERVER
SERVER_IP="$(ip route get 1 | awk '{print $NF;exit}')"
export SERVER_IP
echo "$SERVER"

jedisct1

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT

-A INPUT -p udp --dport 443 -j ACCEPT
-A INPUT -p tcp --dport 443 -j ACCEPT
-A INPUT -s 127.0.0.1 -j ACCEPT

jedisct1

___chkstk_darwin
___chkstk_darwin_probe
_argon2_ctx
_argon2_decode_string
_argon2_encode_string
_argon2_fill_memory_blocks
_argon2_fill_segment_avx2
_argon2_fill_segment_avx512f
_argon2_fill_segment_ref
_argon2_fill_segment_ssse3

jedisct1

_PBKDF2_SHA256
_alloc_region
_argon2_ctx
_argon2_hash
_argon2_pick_best_implementation
_argon2_verify
_argon2i_hash_encoded
_argon2i_hash_raw
_argon2i_verify
_argon2id_hash_encoded

jedisct1

_PBKDF2_SHA256
___chkstk_darwin
___chkstk_darwin_probe
_alloc_region
_argon2_ctx
_argon2_hash
_argon2_pick_best_implementation
_argon2_verify
_argon2i_hash_encoded
_argon2i_hash_raw

jedisct1

#define _GNU_SOURCE

#include <signal.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>

static void
handler(int sig)
{

jedisct1

[
 {
  "name": "aaflalo-me-gcp",
  "proto": "DoH",
  "ipv6": false,
  "addrs": [
   "dns-gcp.aaflalo.me",
   "35.231.69.77"
  ],
  "ports": [

jedisct1

The following instructions require Lucet, although they can be easily adapted to other WebAssembly runtimes.

Save the following script as /opt/lucet/bin/lucet-ondemand:

#! /bin/sh

wasm_file="$1"
if [ -n "$wasm_file" ]; then
  if od -x "$wasm_file" | head -n1 | grep -Fq '0000000 6100 6d73 0001'; then

jedisct1

Docker - How to cleanup (unused) resources

Once in a while, you may need to cleanup resources (containers, volumes, images, networks) ...

delete volumes

// see: https://github.com/chadoe/docker-cleanup-volumes

$ docker volume rm $(docker volume ls -qf dangling=true)

$ docker volume ls -qf dangling=true | xargs -r docker volume rm

jedisct1

#define KBUILD_MODNAME "load_balancer"
#include <uapi/linux/bpf.h>
#include <linux/in.h>
#include <linux/if_ether.h>
#include <linux/if_packet.h>
#include <linux/if_vlan.h>
#include <linux/ip.h>
#include <linux/ipv6.h>

BPF_HASH(counter, uint32_t, long);