Random Crap

[seshupasam]

log4j2 CVE-2021-44228 - Log4Shell

log4j2 CVE-2021-44228 – Log4Shell

What is it? One of the most severe security vulnerability in recent timesOnly impacts Java application which are using a very popular logging library (many)Application does not need to be Internet facing. If user provided input makes its way to the application and is processed by the logging library, it may be vulnerableA well crafted string sent as a part of HTTP header(s) or the HTTP body, if…

View On WordPress

[seshupasam]

Kafka producer routing

Kafka producer partition selection optimizations #kafka #routing

If you are using Kafka and AWS you probably have something like the following in one of the AWS regions. Multiple availability zones (AZs). One or more Kafka brokers in each AZ. Probably multiple producers sending data to one or more topics in each AZ.

This is AWS/Cloud best practice for high availability and scalability. For each topic replication factor should be more than one and should have…

View On WordPress

[seshupasam]

Docker and osquery

If you are into security you might have heard about osquery. It is extremely powerful tool that can be used for various purposes:

Real time endpoint monitoring

Anomaly detection

File integrity monitoring

Metrics (prometheus)

Container (docker) monitoring

syslog aggregation

…

Numerous enterprises big and small from all verticals are using it, or planning on using it. It is being deployed to…

View On WordPress

[seshupasam]

AWS VPN High Availability

There are other documented approaches, that use two servers per VPC (OpenVPN or OpenSWAN/StrongSWAN etc) connecting to r…