kdv

5 ms·

1.
by kdv 6y ago
If you don't need immediate access to the packet payload, I've been enjoying Brim Desktop [1]. It comes pre-packaged with Zeek (formerly Bro) and gives you a UI to view and query those Zeek logs, which will link flows together. It
2.
by kdv 7y ago
How is Cloudflare handling IP allocation here? I might be mis-understanding how WireGuard works, but it doesn't look like there is an official method for IP dynamic assignment.
3.
by kdv 8y ago
I truly appreciate Wireguard's simplicity but what's the best way to handle key management and peer address assignment in larger deployments?
4.
by kdv 8y ago
We have the full support of the network admin staff, so punching out is not an issue, we just want to keep it as clean as possible. My guess is our control channel will likely end up being some combination of WSS/Redis (if it plays nic
5.
by kdv 8y ago
You sound like you have some experience in this area so I'll ask. I'm working with fielded devices that typically sit on enterprise networks. We operate much like an IoT device, but without the hardware constraints. The current c2
6.
by kdv 8y ago
I'm certainly comfortable with WireGuard for machine to machine connections, but I don't see how it would replace traditional VPN w/ 2FA (e.g OVPN w/ Duo) for non-technical staff to access internal apps (at least without
7.
by kdv 8y ago
Edited my question above for clarity. Any info on performance, key management, and managing peer address assignment in larger deployments?
8.
by kdv 8y ago
Is there any info on how many concurrent clients the WireGuard server can handle? I'd be interested in hearing if anyone has used this for management traffic to a large (>100) number of devices Edit: ..and if so, how they handled IP
9.
by kdv 8y ago
Interesting. I'm curious how they compare to Citus and if there are any tight integrations with their over services (managed Kafka or Elasticsearch)
10.
by kdv 8y ago
We get that, but I left off (for brevity) the reasons why Citus would be a net positive for our use case.
11.
by kdv 8y ago
Does anyone have insight or experience using this in production? We're currently running PostgreSQL 10 w/ pg_partman on our own hardware but looking at a several options for cloud migration. Unfortunately, Citus Cloud on GCP doesn
12.
by kdv 8y ago
My understanding is people are able to run and manage Citus themselves on GCP (not Cloud SQL), but Citus Cloud (the managed solution) is only available in AWS.
13.
by kdv 9y ago
Interested to hear more about your use case and why you moved from tinc to zt. Are you usually deployed behind a NAT? Do you use ZT's servers?
14.
by kdv 9y ago
I wouldn't use virtualbox in any situation where security is a concern nor Qubes OS unless you know what you're doing. Your best option for minimal effort is to use VMware workstation or Fusion, avoid shared folders and transfer d
15.
by kdv 9y ago
That's great! Certainly not saying you should abandon those efforts, but see if you can find a security shop that has experienced researchers doing what you want do and sell them on your value based on what you already know and have ex
16.
by kdv 9y ago
I don't know of any security talent with moderate people skills that has trouble getting a job. However, there does seem to be a huge misunderstanding on how to best break into the "security industry", which is just too gener
17.
by kdv 9y ago
That's a reasonable question. You're absolutely correct that security is often highly dependent on account configuration, but Google has invested more into security than any other mail provider and my ridiculous prediction is that
18.
by kdv 9y ago
These days you pretty much have to choose between privacy (e.g Protonmail, Fastmail, self-hosted) and security (Google). Account security should matter more since your primary email address probably holds the keys to the kingdom for the res
19.
by kdv 9y ago
BeyondCorp sounds great in theory, but deployment sounds like a nightmare without going to one of the several companies that are offering it as a service. It's certainly not as accessible as a decent VPN w/ 2FA, and I doubt we&#x2
20.
by kdv 9y ago
Erm I think you're thinking of materialized views. Regular views are essentially stored queries. https://www.postgresql.org/docs/10/static/rules-materialized...
21.
by kdv 9y ago
A simple example is you bucket your data into monthly tables such that when you run a query that has a timestamp constraint, the query analyzer is smart enough to only scan a subset of the tables that are relevant to your query. It's a
22.
by kdv 9y ago
Traditional views are just stored queries that are built on the fly, so there's no performance improvement. Materialized views are stored/cached on disk and will give you some performance improvements but you'll have deal wit
23.
by kdv 9y ago
Is anyone that was using pg_partman before migrated to native partitioning yet? No support for ON CONFLICT and PKs are serious limitations that are available with pg_partman.