IPSEC (Internet Protocol Security) is a framework of open standards for ensuring private, secure communications over Internet Protocol (IP) networks through cryptographic security services. It provides essential security features such as authentication, integrity, and confidentiality, making it a crucial component in the establishment of secure virtual private networks (VPNs) and…
ProxySQL is a high performance database aware proxy for MySQL and MariaDB servers. ProxySQL can be deployed in a cluster and supports dynamic routing of SQL traffic to multiple backend database servers for high availability and efficient workload management. ProxySQL Installation The following deployment is based on Ubuntu 22.04 with…
Redis is an open-source in-memory key-value data store. It can be used as a database, cache, and message broker. It supports various data structures such as strings, hashes, lists, sets, and sorted sets, with atomic operations for manipulating them. Redis also supports simple, powerful commands for working with data, such…
Wordpress is one of the widely deployed CMS platforms and it is also very popular target for hackers. In order to provide security to Wordpress deployment we can configure the web server with private IP and publish the website using a Reverse Proxy. The following guide provides details on installing…
Apache Guacamole is a Remote Desktop Gateway. The purpose of this application is to provide secure access for enterprise servers to the remote workers. The application supports protocols like SSH, RDP and VNC. The end user only requires an HTML5 capable browser and Internet connection to use the remote gateway…
DRBD provides replication of storage across multiple servers. Its a software solution to perform block level replication. DRBD is able to perform real-time replication of data which is transparent to the upper layer applications. The replication can be done synchronously or asynchronously. The DRBD block replication requires a raw disk…
Database High Availability can be done in two modes. One is Primary-Secondary configuration which allows one DB server to act as Primary and perform Read-Write operations. The data is replicated to Secondary nodes which can perform Read-Only operations. Another mode is Multi-Master configuration which allows Multiple DB Servers to act…
DNS Response Policy Zone (RPZ) is a method to modify or block the DNS requests of end clients. It was developed as a standard to block end users from accessing malicious domains. The RPZ is implemented as an authoritative zone configured in DNS Authoritative Server. The RPZ is transferred into…
The PowerDNS Recursor is a high-performance DNS recursor with built-in scripting capabilities. The following guide outlines the deployment methodology and installation instructions for performing Domain Name filtering via DNS servers. The solution includes PowerDNS Recursor application deployed on Ubuntu 20.04 servers.The domain block list will be stored in SQLITE3 database…
The following guide outlines the deployment methodology and installation instructions for DNS based Global Load Balancing service. The solution includes PowerDNS Authoritative application deployed on Centos 7.9 servers. The application supports static as well as dynamic DNS records. The dynamic records contain small snippets which can perform different checks based…
