Said by Dan Kaminsky at the Forensecure’12 conference
If you trust everything, you might as well not trust anybody
For the record.. In addition to being an awesome speaker, he is also a down to earth guy. Makes us geeks proud :).
Said by Dan Kaminsky at the Forensecure’12 conference
If you trust everything, you might as well not trust anybody
For the record.. In addition to being an awesome speaker, he is also a down to earth guy. Makes us geeks proud :).
We finally come to one of the last posts of Project Uptime. Now that all the components have been setup, I finally copied the wordpress directory from my old server to the new one. The only changes, I had to make after copying the files were
[code]sudo chmod -v 664 $WORDPRESS_DIRECTORY/.htaccess
sudo chmod 755 $WORDPRESS_DIRECTORY/wp-content [/code]
Most of us worry about paging to disk (swap), but if you are running a transaction intensive application the paging that happens in RAM also starts to impact the application performance. This happens due to the size of the “block” that is used to store data in memory. Hugepages allows you to store the data in bigger blocks, hence reducing the need to page while interacting with the data.
Here is how you can enable hugepages and configure jboss (actually any Java app) to use hugepages on a RHEL/CentoOS system.
OS CONFIGURATION
If you see the response as below, you should be good[code]CONFIG_HUGETLBFS=y
CONFIG_HUGETLB_PAGE=y
[/code]
(note: I put in 1536 since that was the value I got from the above example)
JBOSS CONFIGURATION
note : A lot articles that I read online say that hugepages are effective when you are allocating large amounts of RAM to the application. The use case of just using 3GB above was just that.. a use case.
While I cannot personally vouch for it, a lot of users have noted that they saw >2 fold increase in performance.
This is on RHEL and CentOS distros. If you want to install packages without checking the GPG key (hope you know why you are doing this!!), here is the command line option
[code]sudo yum install package_to_install –nogpgcheck [/code]
I have recently started using git as a source control for the various scrips that I write. As I also mentioned in this post, I use dropbox to synchronize my data across workstations. Here is my setup for synchronizing git clients across multiple workstations using the same SSH keys (note: this is not a recommended setup from a security prospective. you are recommended to generate different SSH key pairs per workstation to ensure one key getting lost doesn’t compromise your entire account).
The server has held up pretty well, since the installation of varnish. Based on this wiki post, I added the following to /etc/varnish/default.vcl
[code]
<pre>
# Drop any cookies sent to WordPress.
sub vcl_recv {
if (!(req.url ~ "wp-(login|admin)")) {
unset req.http.cookie;
}
}
# Drop any cookies WordPress tries to send back to the client.
sub vcl_fetch {
if (!(req.url ~ "wp-(login|admin)")) {
unset beresp.http.set-cookie;
}
}
[/code]
I think the comments are pretty self explanatory.
Quick how to for finding out the list of processes, including threads spawned by these processes
[code] ps -eLf | grep USERNAME [/code]
Explanation of the options
For my own notes.. very nice post on perishablepress.com regarding using the different capabilities of mod_rewrite to secure your website (application)
http://perishablepress.com/eight-ways-to-blacklist-with-apaches-mod_rewrite/
When I was ~9 years old, my dad bought home a Commodore 64K. It was slow.. it was terrible graphics and it took for ever to load a program using it’s “tape” drive. But boy was it fascinating to load up basic and write your own programs!!. I can’t say how many summer hours were spent staring at the screen and trying to get things to work.
Looking back, I can say that I probably wouldn’t have been in the technology field, if not for that first taste of computing.
Thank you Mr.Tramiel. RIP.
Apache configuration to redirect traffic to a particular URL based on the pattern in the URL (AKA URI). In this particular example, I want to redirect any traffic that does not have the URL starting with /application or /content to redirect to https://domain_name/application
Explanation of the rule