MAMuhammad Alfian Tirta Kusumainblog-alfian.hashnode.dev·Sep 24 · 19 min readIngress-NGINX to Istio Migration on RKE2Overview This post is a proof of concept (POC) for a migration scenario. It moves an RKE2 cluster from the bundled ingress-nginx controller to an Istio gateway that uses the Kubernetes Gateway API. Wh00
MAMuhammad Alfian Tirta Kusumainblog-alfian.hashnode.dev·Apr 18 · 3 min readIntercepting Dangerous Shell Commands with ShellfirmShellfirm is a lightweight safety layer for interactive shells that helps prevent accidental or malicious execution of destructive commands. It works by installing a small shell hook that inspects eac00
MAMuhammad Alfian Tirta Kusumainblog-alfian.hashnode.dev·Apr 18 · 2 min readAuditing Command Execution with SnoopySnoopy is a lightweight, unobtrusive auditing tool for Unix-like systems that records every command executed on the host. It works as a small library wrapper that logs command execution details (times00
MAMuhammad Alfian Tirta Kusumainblog-alfian.hashnode.dev·Apr 18 · 3 min readSending SSH Login Alerts to TelegramMonitoring SSH logins is a simple but powerful way to improve the security and situational awareness of your servers. By sending immediate alerts when someone authenticates (or fails to authenticate) 00
MAMuhammad Alfian Tirta Kusumainblog-alfian.hashnode.dev·Apr 18 · 5 min readPreventing Brute Force Attacks with Fail2banFail2ban is a lightweight, widely used intrusion prevention tool that helps protect servers from brute-force attacks and other repeated authentication failures. It continuously monitors log files (for00
