Ingress-NGINX to Istio Migration on RKE2Overview This post is a proof of concept (POC) for a migration scenario. It moves an RKE2 cluster from the bundled ingress-nginx controller to an Istio gateway that uses the Kubernetes Gateway API. Wh19 min read·blog-alfian.hashnode.devSep 24
Intercepting Dangerous Shell Commands with ShellfirmShellfirm a lightweight safety layer to shells, inspecting commands and warning or blocking risky invocations (rm -rf, dd) to help prevent data loss.3 min read·blog-alfian.hashnode.devApr 18
Auditing Command Execution with SnoopyRecord every command executed on Unix-like systems with Snoopy and forward logs via syslog to SIEMs for auditing, forensics, and compliance.2 min read·blog-alfian.hashnode.devApr 18
Sending SSH Login Alerts to TelegramSend immediate Telegram alerts for SSH logins on Ubuntu 24.04 with secure alerting script and integrate with PAM3 min read·blog-alfian.hashnode.devApr 18
Preventing Brute Force Attacks with Fail2banFail2ban Gide. Includes installation, custom jails, ban tuning, iptables/nftables integration, and Telegram alerts.5 min read·blog-alfian.hashnode.devApr 18
