This is a reprint of my article Manager Math on LinkedIn. I delight in the privilege of leading teams of some of the top software engineers in the world. As an old school geek, I starting coding in 1984 at the age of twelve. I’m a tech enthusiast and have been writing software ever since.… Continue reading Manager Math
The Amazing AirPods Max
You buy premium headphones for the immersive, other worldly transport, the enraptured engagement with the music that moves in you, through you, and around you. And that, the AirPods Max accomplish magnificently.
New Relic & Cloudflare a nice 1-2 Ops Punch
The observability culture shapes development and devops in powerful ways. We were able to identify a signal indicating that the server was handling traffic that was nefarious and took resources away from legitimate users. We made a hypothesis about what we wanted to try and do to positively impact that signal. Since we started with observability, we have the ability to evaluate the work we did and determine if we were successful or not and if more work is needed.
03.2 Cloudflared Argo Tunnel for SSH
What if we could also guarantee that any ssh requests had to also go through Cloudflare? In other words, what if we didn’t accept ssh requests to the server IP but could force those through Cloudflare as well? This post describes options for just that through Cloudflare’s `cloudflared` service.
03.1 only allow Cloudflare IPs
If you use Cloudflare, this post walks you through how to limit traffic to only their IP addresses, forcing access to your server to be subjected to Cloudflare security features.
03 Ubuntu 20.04 LTS Advanced Security Setup
At this point, you’ve set up your Ubuntu server and added some initial security. There are three more things I like to do when setting up an Ubuntu server. Add a firewall with IP Tables, install fail2ban, and set up email alerts for anytime a user invokes sudo.
02 Ubuntu 20.04 LTS Basic Security Setup
In this step we’ll create a new user, setup ssh, and configure it to not allow root user logins. There’s also a brief discussion of some of the sshd_config settings we used.
01 Ubuntu 20.04 LTS Basic Installation
In this series of posts in the journey to set up LAMP server using Ubuntu 20.04 LTS, Apache 2.4, MySQL 8, and PHP 7.4.