IPSEC (Internet Protocol Security) is a framework of open standards for ensuring private, secure communications over Internet Protocol (IP) networks through cryptographic security services. It provides essential security features such as authentication, integrity, and confidentiality, making it a crucial component in the establishment of secure virtual private networks (VPNs) and…
In today's digital landscape, the Domain Name System (DNS) plays a critical role in ensuring that internet traffic is properly directed to its intended destination. To improve the speed and reliability of DNS queries, many organizations rely on distributed DNS anycast systems. However, as we learned the hard way, even…
ProxySQL is a high performance database aware proxy for MySQL and MariaDB servers. ProxySQL can be deployed in a cluster and supports dynamic routing of SQL traffic to multiple backend database servers for high availability and efficient workload management. ProxySQL Installation The following deployment is based on Ubuntu 22.04 with…
As more and more business-critical applications move to the cloud, ensuring that your network infrastructure can handle the traffic and deliver optimal performance is becoming increasingly important. Linux, being one of the most popular operating systems used for hosting servers, provides several built-in tools to fine-tune the network performance. In…
Border Gateway Protocol (BGP) is a routing protocol that is used to exchange routing information between routers in different autonomous systems (ASes) on the Internet. BGP supports the exchange of both IPv4 and IPv6 prefixes. When BGP is used to exchange IPv6 prefixes, it can be done via an IPv6…
On Linux Servers With IPTABLES Rate limiting is a technique used to control the rate at which network traffic is sent or received. It can be used to prevent network congestion and protect against malicious attacks such as denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks. One way to implement rate…
Redis is an open-source in-memory key-value data store. It can be used as a database, cache, and message broker. It supports various data structures such as strings, hashes, lists, sets, and sorted sets, with atomic operations for manipulating them. Redis also supports simple, powerful commands for working with data, such…
Wordpress is one of the widely deployed CMS platforms and it is also very popular target for hackers. In order to provide security to Wordpress deployment we can configure the web server with private IP and publish the website using a Reverse Proxy. The following guide provides details on installing…
Apache Guacamole is a Remote Desktop Gateway. The purpose of this application is to provide secure access for enterprise servers to the remote workers. The application supports protocols like SSH, RDP and VNC. The end user only requires an HTML5 capable browser and Internet connection to use the remote gateway…
DRBD provides replication of storage across multiple servers. Its a software solution to perform block level replication. DRBD is able to perform real-time replication of data which is transparent to the upper layer applications. The replication can be done synchronously or asynchronously. The DRBD block replication requires a raw disk…
