Skip to content

Instantly share code, notes, and snippets.

@odewahn
Created August 26, 2015 19:41
Show Gist options
  • Save odewahn/5c8bedf8a1acefafb455 to your computer and use it in GitHub Desktop.
Save odewahn/5c8bedf8a1acefafb455 to your computer and use it in GitHub Desktop.

Network Notes

Set up a Docker of Vagrant-based lab where you set up your own network and topologies to learn, with a final case study on setting up a secure (!) VPC on AWS.

tcp/ip on Linux

  • IP addresses
  • sub-nets and CIDR
  • IPv6
  • Ports

DNS

  • Host names
  • All the files (/etc/hosts and so forth)
  • Tools to know
    • dig
    • ltr (linux traceroute)
    • nmap -- port scanner w/stack signature

dhcp leases ACL / roles / users / groups

Firewalls

  • iptables
  • portscanners / other tools

Security overview

  • SSH
  • HTTPS / TLS
  • how to get a certificate

HAProxy

  • An aside on Regexs for system administration
  • Load balancing
  • Reverse proxy
  • Configuring a cert

Docs for 1.5 (latest stable): http://cbonte.github.io/haproxy-dconv/configuration-1.5.html

Load Balancing examples: https://serversforhackers.com/load-balancing-with-haproxy https://www.digitalocean.com/community/tutorials/an-introduction-to-haproxy-and-load-balancing-concepts

Reverse Proxy examples: http://oskarhane.com/haproxy-as-a-static-reverse-proxy-for-docker-containers/ https://github.com/foosel/OctoPrint/wiki/Reverse-proxy-configuration-examples http://www.javacodegeeks.com/2015/07/using-haproxy-as-a-reverse-proxy-for-aws-microservices.html

Websockets

Pulling it all together with Consul

VPCs on AWS

Other Linux stuff

package managers (apt, etc, sources)

availability and discovery agents tripwire (etc) netcat (swiss army knife for sysadmins) open

config (ansible, puppet, cfengine)

elastic provisioning and autoscaling pods/kubernetes configuring ubuntu

graphite statsd new relic

latency (etc)

  • Application security
  • OAuth
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment