479 reputation
517
bio website nuovolabs.com
location Jupiter, FL
age
visits member for 4 years, 8 months
seen 2 hours ago

I am a Python / Django developer. I specialize in developing SAAS applications using Django. My language of choice is Python, but I am sometimes forced to use English.


Jun
21
comment What is this in my syslog and should I be concerned?
Thanks, +1 - Regarding "private network", I should rather say that my "cloud" hosting provider's local network that can be accessed via all "cloud" servers.
Jun
21
comment What is this in my syslog and should I be concerned?
There are other machines that aren't mine, in the same network. Regarding unconfigured interfaces, I didn't create any interfaces or even do anything to the server, pertaining to networking (aside from add gratuitous rules to iptables).
Jun
21
comment What is this in my syslog and should I be concerned?
Thanks. Is it safe to ignore it (i.e., is it common to have this running constantly), or is it something I should disable? The private network that my server is in blocks bcast, FWIW.
Jun
21
comment Is is possible for rsync to partly copy a file, if a process gets killed?
Great. Thanks again, espenfjo.
Jun
21
comment Is is possible for rsync to partly copy a file, if a process gets killed?
Thanks. Do you happen to know if rsync will return a 0 response in any situation that hasn't resulted in the file being created exactly as you intended it (baring kernel bugs and hardware issues)? I'm using rsync to archive my WAL logs and I just want to make sure it'll never lie to my database.
Jun
20
comment How can I use SSL behind a load balancer and still get the client IP?
@CrazyDart - thanks. It's a Rackspace "cloud load balancer". I told them that same thing "just decrypt, add headers, re-encrypt, transfer back to my server"...
Jun
9
comment Redirect from HTTP to HTTPS with respect to the X-Forwarded-For header (SSL termination used)
Oh :/ thanks again, that's good to know. Man, people like you make the tech world go round.
Jun
8
comment Redirect from HTTP to HTTPS with respect to the X-Forwarded-For header (SSL termination used)
Thanks. I ended up deciding that termination of SSL at the LB isn't a good idea for my use-case and instead will be creating a 80 and a 443 server in Nginx.
Jun
6
comment How can I allow traffic only from my load balancer, if the private IP of the load balancer changes all the time?
Excellent, +1 - Do you know happen to know how I would get the mac address of a cloud load balancer? Also, does it not seem feasible that the mac address would change, since it's a virtual appliance, vs a dedicated piece of hardware?
Jun
5
comment Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?
Thanks, guys. I appreciate it. I was really hoping to offload SSL to the LB, cause it means reducing my server's CPU utilization by at least 20% in some cases.
Jun
5
comment Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?
Ha, fair enough +1 Also, I've read that PCI compliance means encryption from the client to the gateway :(
Jun
5
comment Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?
My speculation wasn't about that. I understand that bit completely. My speculation is that the reason they recommend not using SSL termination for sensitive data is that your web server has no idea whether the X-Forwarded-For is from the load balancer or from some shady client who simply modified their headers. My question is, therefore, given second case isn't a problem (due to my iptables not allowing any traffic from anywhere but the load balancer), and that my servers are in the same private network, are there other concerns that remain?
Jun
5
comment Can I use SSL termination for sensitive data, and if not what is the point of even using SSL with termination?
If I'm transferring the data in a private network, why does it matter?
Jun
5
comment Ubuntu Precise server (basic install) using a lot of memory
Thanks so much. I cannot believe all this time that I've been looking at the wrong value in that output.
Jun
5
comment Ubuntu Precise server (basic install) using a lot of memory
@Flup - ah, thanks so much. Would you mind putting something akin to that in an answer, so that I can accept it?
Jun
5
comment Ubuntu Precise server (basic install) using a lot of memory
@Flup - you mean, the 72 in my posted output is the memory that is currently actually in use, and the 128 is not?
Jun
5
comment Ubuntu Precise server (basic install) using a lot of memory
@Flup - I just added it (replacing my prior note about after-reboot memory usage). The used therein was 558 prior to the reboot, and the free subsequently being 1437. What I don't know is what the buffers/cache values were before.
Jun
3
comment If I `sudo reboot` my Ubuntu 12.04.2 server with Postgres running, can I lose data?
@Wow - this, combined with the blog post linked herein, makes the best answer I've ever received here.
Jun
2
comment If I use iptables to allow TCP connections only from a specific IP, can it be faked?
Excellent explanation, thanks Evan.
Jun
2
comment If I use iptables to allow TCP connections only from a specific IP, can it be faked?
Ah, makes perfect sense now. Thanks!