Archive for the ‘Networking’ Category
I’m running a HA ldap setup however I keep hitting illumos issue #13326, hoping to mitigate this a tiny bit by using a VIP instead of multiple A records behind a ldap.example.org host name. (Sadly that doesn’t help as the connection state itself ends up in the bad state, but it did send me down […]
Hey Guys, Lately I’ve been thinking about replacing my ESXi setup I have at OVH with a SmartOS one. I got a cheap kimsufi server for one month to play around. As you know those do not have multiple IP’s/NIC’s. I wrote a little dirty how to on how to setup NAT in the global […]
It’s been a while since I posted but I only recently started tinkering with things again in my free time. I travel a lot now for work so I spend some lonely nights in hotel rooms with no internet. I have time to play. Anyway, I wanted to host a repository for OmniOS because I’m […]
For work I was migrating an old undocumented reverse proxy configuration from 2.0 to 2.2. It contained some old perl scripts nobody understood and some strange bits here an there. Long story short I started from scratch. I ran into the usual problems like redirects and hyperlinks being broken if they use full self referencing […]
I’ve been wanting to write about this for a bit. I usually VPN (to the gateway at home) for surfing when roaming. This also gives me access to my shellbox and with my ssh key. You can usually connect to port 443 (https) on most networks, even those that force you to use a socks […]
Here is a short tutorial on how to setup a multi stage authentication with an Apache HTTPd 2.4 server. The first stage will do a 2-way SSL encryption, so both server and client will need to present a certificate. The second stage will be password authentication, the username has to match the username in the […]
I previously mentioned rpmbuild. I wanted to write a little post on what it does and how useful it is. But I though it would be easier to just show you. So what is rpmbuild? It is a tool for building rpm packages based on a spec file. The resulting rpm should be close to […]
Here is a little trick to connect to a server that requires a SSL Client certificate when your client does not support it. To make it work your client must be able to use a proxy. We will use this proxy to rewrite certain servers to a reverse proxy that injects the client certificate. Lets […]
Due to popular demand (I got 1 e-mail, but hey they’ve been gone for a few days). I’ve added some of the old Apache HTTPd 64-bit binaries to the download page under archive. Please use them with care. It is possible I’ll redo the compile tutorial at some point but I currently don’t have access […]
Some of you may have noticed, but most probably haven’t. All my important public facing services are now IPv6 ready! DNS (caveat only my primary ns server is IPv6 ready – including glue) HTTP(s) (This website and webmail are available over IPv6) SSH SSL VPN IMAP SMTP (This was my main motivation to move to […]
