Skip to main content

Posts

Linux Systems Performance/Observability (BPF (bpfcc-tools), BCC Tools

Linux System Performance/Observability Tools BPF (bpfcc-tools), BCC Tools, and Complete Observability Toolkit Assuming you have Linux Server in place and have the required BPF aka BCC related packages installed on the system(s) for Linux distribution. BPF(eBPF) aka BCC Tools (bpfcc-tools): BPF , which originally stood for Berkley Packet Filter is the dynamic tracing tools for Linux Systems. BPF initially used for the speeding up for the tcpdump expressions and since then it has been know as the extended Berkley packet Filter (eBPF). Its new uses are Tracing Tools where it provides programmability for the BPF Compiler Collection (BCC) and bpftrace front ends. Example: execsnoop, biosnoop etc is a BCC Tool. When facing production performance crisis these such list of tools comes handy to trace and fix the issue. However, it requires certain KERNEL level config options to be enabled such as CONFIG_FTRACE, CONFIG_BPF. Profiling tools typically required complie...

EKS Cluster and Create CSI Driver to store credentials in AWS Secrets Manager via SecretProviderClass

EKS Cluster and Create CSI Driver to Store Credentials in AWS Secrets Manager Setup EKS Cluster and Manage Credentials at Runtime using CSI Driver with SecretProviderClass and AWS Secrets Manager Assuming you have configured/installed AWS CLI, EKSCTL, KUBECTL, and HELM. 📦 CSI Basic Information CSI (Container Storage Interface) is widely used as a Storage Technology. Created by Google | Mesosphere | Docker. It has two plugins : one runs on the Master Node (Centralized Controller Plugin) and another on Worker Nodes (Decentralized headless Node Plugin). CSI communication protocol is gRPC. The communication between Container Orchestration to Controller Plugin (Master) and to Node Plugin (Worker Node) happens using gRPC . CSI Drivers: vendor-specific, compiled into Kubernetes/OpenShift binaries. To use a CSI driver, a StorageClass needs to be assigned first. The CSI driver is then set as the Provisioner for the Storage Class. CSI drivers provide three main ser...

Basic things about ECS and Kubernetes

Basic Things About ECS & K8s AWS ECS, Kubernetes & Their Components 📦 AWS ECS Basic Information AWS ECS is the Docker-compatible container orchestration solution from Amazon. It allows us to run containerized applications on EC2 instances and scale both of them. ECS Clusters consist of Tasks which run in Docker containers, and container instances, among many other components. AWS Services Commonly Used with ECS: Elastic Load Balancer: This component can route traffic to containers. 3 kinds of load balancing are available: application, network, and classic. Elastic Block Store: This service provides persistent block storage for ECS tasks (workloads running in containers). CloudWatch: This service collects metrics from ECS. Based on CloudWatch metrics, ECS services can be scaled up or down. Virtual Private Cloud: An ECS cluster runs within a VPC. A VPC can have one or more subnets. CloudTrail: This service can log ECS API calls. Details cap...

cPanel Script to Dump Data and RYSNC

cPanel Script to Migrate Data In One Shot cPanel Script to Migrate Data In One Shot What Does This Script Do : "cPanel Migration Script" This script is used to take the Input when you Initiate the Script and Prompts for the Directory to provide and to store the cPanel backup files under the same. Once the backup for the accounts has been done which are mentioned in the file name which is "/root/rohit/24.txt".This File contains the Usernames (cPanel accounts) which needs to be moved from the Source Server to the Target Server. Once the Backup is done then it uses the command known as "sshpass" to rsync the data from the source server to the target server. In "sshpass" we need to provide the destination server password as an argument to that command, so that it will simultaneously move the accounts without asking for the Password. Note : SSHPASS can be downloaded from the below mentioned link which is - http://www.nexts...

Defacing Sites via HTML Injections (XSS)

Defacing Sites via HTML Injections Defacing Sites via HTML Injections What Is HTML Injection: "HTML Injection" is called as the Virtual Defacement Technique and also known as the "XSS" Cross Site Scripting. It is a very common vulnerability found when searched for most of the domains. This kind of a Vulnerability allows an "Attacker" to Inject some code into the applications affected in order to bypass access to the "Website" or to Infect any particular Page in that "Website". HTML injections = Cross Site Scripting, It is a Security Vulnerability in most of the sites, that allows an Attacker to Inject HTML Code into the Web Pages that are viewed by other users. XSS Attacks are essentially code injection attacks into the various interpreters in the browser. These attacks can be carried out using HTML, JavaScript, VBScript, ActiveX, Flash and other clinet side Languages. Well crafted Malicious Code can even hep the ...