Ingress-NGINX to Istio Migration on RKE2Overview This post is a proof of concept (POC) for a migration scenario. It moves an RKE2 cluster from the bundled ingress-nginx controller to an Istio gateway that uses the Kubernetes Gateway API. WhSep 24 · 19 min readblog-alfian.hashnode.dev
Intercepting Dangerous Shell Commands with ShellfirmShellfirm is a lightweight safety layer for interactive shells that helps prevent accidental or malicious execution of destructive commands. It works by installing a small shell hook that inspects eacApr 18 · 3 min readblog-alfian.hashnode.dev
Auditing Command Execution with SnoopySnoopy is a lightweight, unobtrusive auditing tool for Unix-like systems that records every command executed on the host. It works as a small library wrapper that logs command execution details (timesApr 18 · 2 min readblog-alfian.hashnode.dev
Sending SSH Login Alerts to TelegramMonitoring SSH logins is a simple but powerful way to improve the security and situational awareness of your servers. By sending immediate alerts when someone authenticates (or fails to authenticate) Apr 18 · 3 min readblog-alfian.hashnode.dev
Preventing Brute Force Attacks with Fail2banFail2ban is a lightweight, widely used intrusion prevention tool that helps protect servers from brute-force attacks and other repeated authentication failures. It continuously monitors log files (forApr 18 · 5 min readblog-alfian.hashnode.dev