Reputation
5,312
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
14 20
Newest
 Good Answer
Impact
~226k people reached

Feb
9
awarded  Good Answer
Jan
17
comment Why run SSH on a different port
There's a difference between ssh allowing you to login as root and the ssh daemon itself needing root access to that it can open a privileged port. The question relates to the second of those two, not to the first.
Jan
17
comment if you have your entire infra on Amazon VPC, what kind of uptime guarantee is a safe committment?
@Jay If reliability and uptime are a concern, then a single EC2 machine can't handle it. You need multiple machines in different AZs, or preferably different regions.
Jan
16
answered SSL certificate for CNAME redirected domain
Jan
14
comment Updating OpenSSH on Amazon Linux - Amazon repository out of date
As you suggested in your question, Amazon backport security fixes. Version 6.6.1p1-22.58.amzn1 isn't old at all; it was released last month as a security fix. It's based on an older version of openssh because that makes it easier to keep it stable, secure and supported, since they don't run the risk of introducing new bugs that have been added to new openssh releases.
Jan
14
answered Updating OpenSSH on Amazon Linux - Amazon repository out of date
Dec
10
awarded  Yearling
Nov
29
comment Redirect one public IP to another public IP, different subnets and servers
Your best workaround at this point is to physically move server B to the same location as server A, so that you can give it server A's IP address. And then rewrite your software to use DNS properly.
Nov
28
answered Any ideas on how to run maintenance on a site that is always under use?
Nov
19
comment mod_deflate and Pagespeed
You can remove the lines that account for buggy gzip support in Mozilla (Netscape) 4, which was distributed between 1997 and 1998 and is no longer in significant use.
Sep
10
comment SSL/TLS via Tomcat - replaced keystore, still weak DH
It's not the number of bits in your key; it's the number of bits used to generate ephemeral keys, which is independent of the bit-length of your key. The ephemeral keys are used to achieve perfect forward secrecy, but it's not very perfect if they can be broken.
Sep
10
answered SSL/TLS via Tomcat - replaced keystore, still weak DH
Aug
30
answered How to redirect one domain to the other with SSL?
Aug
16
comment Connection refused on Ubuntu EC2 after EBS expansion
When you mounted the volumes on another instance, did you have a look at the syslog and messages files? What was in them?
Aug
14
answered Limit User Linux Login using IPTABLES
Jul
25
comment How to create a private network between a VPS and 4 IPs?
Note: this doesn't create a private network. It permits you to secure connections over a public network, which is not the same thing.
Jul
23
comment How to setup redundancy for AWS Elastic Load Balancers?
Note that by default an ELB node will only direct traffic to instances in the Availability Zone that node is in. For improved resilience and load balancing, you should enable cross-zone load balancing on your ELBs.
Jul
23
comment Scaling Multiple SSL Domains on Multiple EC2 instances in AWS ELB
If you're not using Route 53 for DNS, you basically can't use SSL ELBs for your naked domain. You'll have to handle it some other way, typically by serving a 301 redirect from http://example.com/ to https://www.example.com/.
Jul
15
awarded  Good Answer
Jul
14
comment Is this a sensible way to scale Nginx for static content serving?
If you're going to cache files or use a CDN, you need a careful file naming strategy. Most important, every modification to a file must generate a new filename -- you can never change a file while keeping the name the same. Also think carefully about how you will delete files and invalidate them in the cache or CDN.