ma.tome
  • Member for 7 years, 8 months
  • Last seen more than a month ago
How to secure Redis cluster on AWS elasticache
Accepted answer
12 votes

Currently, Elasticache does not provide authentication mechanisms like, for example, RDS does. The only security available is SecurityGroups, limiting network traffic from specific sources. Should ...

View answer
Use Windows Hosts File To Redirect External Url to Subdomain?
Accepted answer
5 votes

DNS resolution and HTTP redirections are completely different things and this approach is wrong. Poisoning your local DNS resolution to enforce "amazon.com" resolution to fake "smile.amazon.com" IP ...

View answer
Setting up multiple redis masters
5 votes

You can deploy as many masters as you want, with any number of slaves each, but they will behave like a single separated cluster with their own memory space, and it will be your responsibility at the ...

View answer
Routing from mikrotik two IP addresses to same gateway
Accepted answer
5 votes

Due to the fact that both links have the same IP gateway, you must set in some way the interface you want to use in your routing tables. The syntax is the following: gateway=[ip]%[interface] + ...

View answer
Instances slow when connected to AWS load balancer
5 votes

Sounds like requests queuing in your ELBs due to (maybe) long Keep-Alive headers. ELBs will try to minimize the number of connections to the backend by honoring the Keep-Alive header. Short (or ...

View answer
AWS autoscaling and ec2 t2
4 votes

T2 instances should be absolutely avoided in scenarios where your applications consistently consume their credits, precisely due to this kind of issues with the CPU credits system provided by AWS. If ...

View answer
IOPS super low after creating volume from snapshot (AWS)
Accepted answer
3 votes

EBS snapshots are stored in S3. When you create a volume from a snapshot, blocks are first pulled incrementally from S3 to EBS in the FIRST read operation, and from that point all subsequent reads for ...

View answer
Dual-boot EC2 instance
3 votes

Dual instance boot goes against the basics of cloud computing and it is by all means discouraged in such environments. You may accomplish that by tuning GRUB but, as AWS does not provide KVM access, ...

View answer
How can I start replication of on premise Postgres 8.4 into AWS RDS Postgres 9.x?
3 votes

I think your best approach is using the Database Migration Service AWS launched past year. https://aws.amazon.com/dms/ This service is specifically designed for your use case. It is "simply" a ...

View answer
How do I set the ntp server of an AWS RDS instance?
Accepted answer
3 votes

Amazon does not provide details about it, but theory says that RDS runs the SQL software on top of moreless standard EC2 instances, both Amazon Linux and Windows Server ones depending on the selected ...

View answer
MongoDB with NVMe SSD
3 votes

Using NVMe or traditional HDD drives do not override the purposes of RAID, which is providing better IO rates than a single drive can, replication for increased data durability and larger storage ...

View answer
What AWS service to avoid CORS issues with S3 static content and aws backends
3 votes

You may accomplish your goal with Cloudfront and a reverse proxy approach: First create your distribution with app.acmecorp.com as allomed CNAME and upload a custom SSL certificate for this subdomain....

View answer
Improving connection to amazon RDS from EC2
Accepted answer
3 votes

You are comparing a local database against a network connected node. Simply negotiating a TCP connection, the authentication process and data transfer can easily eat those 90ms in many scenarios. You ...

View answer
ELB with SSL pass through to either nginx or haproxy. Which is suited to handle more certs?
2 votes

As per the Elastic Load Balancer documentation, Classic Load Balancers allow a single certificate per listener, with up to 100 listeners (on different ports). Application Load Balancers in the other ...

View answer
Prevent AWS ELB from setting x-forwarded-proto
Accepted answer
2 votes

No, or at least not yet. X-Forwarded-Proto and X-Forwarded-For headers are added by design for all HTTP/S listeners.

View answer
Get an AWS EC2 ebs volume to perform over 20,000 IOPS
2 votes

That such IO rates in a single EBS volume are simply not possible, at least not right now. As mentioned, RAIDs of EBS volumes should fit your needs, both GP2 and PIOPS, but an upper limit per instance ...

View answer
AWS autoscaling cooldown
2 votes

I think you should better set shorter cooldowns and play with the Cloudwatch thresholds to make them more or less sensitive depending on your needs. Typically, the cooldown should be the minimum ...

View answer
AWS autoscaling. Launch Config/Auto Scaling Group and VPC instance with two ifaces
Accepted answer
2 votes

Unfortunately, right now it is not possible to assign multiple ENIs through auto-scaling, but only when launching single instances, but it is possible to provision and attach a new ENI on startup ...

View answer
Mangling traffic from a Mikrotik Router
Accepted answer
2 votes

You will need to mangle your connections at the output chain level so your router can take advantage of load balancing for his own outgoing connections, but... You must be extremely careful when ...

View answer
How best to structure Glacier backups?
2 votes

The "best of both worlds" approach would be the following: Create a S3 bucket for backups Configure a lifecycle rule, so items older than 2 weeks (for example) are automatically transitioned to ...

View answer
Amazon EBS Durability
1 votes

You are comparing a physical disk against a network connected volume which enables, among others: Take and share snapshots, which also enables easily and fast cloning of data. Dynamic size expansion ...

View answer
Certificate Mismatch setting up Route53, CloudFront, Custom Origin
1 votes

First of all, you need to upload your custom SSL certificate to Cloudfront in order to avoid issues during the SSL validation. If you do not upload a custom certificate valid for your website name, ...

View answer
AWS, software slow first start
Accepted answer
1 votes

AMIs are no more than collections of EBS snapshots, which are stored in S3 for increased durability and lower storage costs. Instances launched from custom AMIs need to read the initial data from S3, ...

View answer
Make a server manage several sites
1 votes

With Nginx, you should create as many site config files as required and simply modify the server_name and root sentences to map external domains to their content and code.

View answer
What is my nginx + php server bottleneck?
1 votes

500 concurrent requests are way too much for such a little PHP process pool. Try raising your min and max php processes and test again until you reach the maximum CPU usage. Most surely, if you ...

View answer
Is it possible to migrate a Parallels Desktop Windows VM to Mac OS X BootCamp?
Accepted answer
1 votes

No, you cannot. Bootcamp is nothing more than an assistant to perform the somewhat risky tasks required to partition your hard drive and boot a new OS installer in a moreless controlled way. I'm ...

View answer
How can you re-download your personal key (pk) .pem file? amazon
1 votes

SSH keys can only be downloaded at the moment of creation. You can create an image from your instance and redeploy it with a new SSH keypair.

View answer
How to best backup AWS-hosted systems?
1 votes

For full system backups in EC2, you should go with EBS Snapshots. For data backup in S3/Glacier I would go with S3cmd in Linux systems and Cloudberry Backup tools in Windows (Not free, but worths each ...

View answer
Need to check disk size for folder mounted volume using check_nt from Nagios
1 votes

I think the best approach is to check the SMB share directly instead of using the check_nt on a Windows host with the SMB mounted share. SMB shares exist in a logged in user context and not as a ...

View answer
Sharing authentication data between servers in nginx
1 votes

The auth issue does not come from Nginx, but from your browsers. Web browsers distinguish authentication domain using the whole tuple "[scheme]://[domain]:[port]" so, it doesn't matter if your servers ...

View answer