Project

General

Profile

Philipp Buehler's activity

From 11/02/2019 to 12/01/2019

12/01/2019

PB 11:41 AM hack4glarus-2019-winter Task #7376: Packer+Vagrant for OpenBSD (cont'd)
Had no time/motivation for vagrant ports(7) (ruby hell + unknown go build) Philipp Buehler
PB 11:40 AM hack4glarus-2019-winter Task #7382 (Waiting): Monitoring at a different level (BPF/Suricata/Cilium)
Time ran out, VM too slow to install all necessary toolchain Philipp Buehler

11/30/2019

PB 01:31 PM hack4glarus-2019-winter Task #7376: Packer+Vagrant for OpenBSD (cont'd)
Working ports(7) Makefile for packer-builder-openbsd-vmm created
624cec4..4563cca master -> master
Philipp Buehler
PB 01:07 AM hack4glarus-2019-winter Task #7382: Monitoring at a different level (BPF/Suricata/Cilium)
The idea is to tproxy chain haproxy traffic and let suricata "inspect" the traffic.
Pull the eve.json output into ELG or so.
haproxy:
listen inbound
bind public-ip:80
server moni 172.23.42.1:80 send-proxy # lives on a loopback i...
Philipp Buehler
PB 01:02 AM hack4glarus-2019-winter Task #7382: Monitoring at a different level (BPF/Suricata/Cilium)
Cilium: https://docs.cilium.io/en/stable/
Suricata: https://suricata-ids.org/docs/
BPF:
http://www.brendangregg.com/blog/2016-03-05/linux-bpf-superpowers.html
https://cilium.io/blog/2018/04/17/why-is-the-kernel-community-replacing-...
Philipp Buehler

11/29/2019

PB 11:02 PM hack4glarus-2019-winter Task #7382 (Closed): Monitoring at a different level (BPF/Suricata/Cilium)
Traditional pull based monitoring (nagios et al) is DEAD>
Push based (partly Prometheus, Riemann) is cooler.
But it's still somewhat superficial requests.. how about
monitoring directly "from the wire".
Reasearch on gathering dat...
Philipp Buehler
PB 07:15 PM hack4glarus-2019-winter Wiki edit: Rookie_Guide (#2)
Philipp Buehler
PB 04:59 PM hack4glarus-2019-winter Wiki edit: Rookie_Guide (#1)
Philipp Buehler
PB 05:53 PM hack4glarus-2019-winter Task #7376 (Closed): Packer+Vagrant for OpenBSD (cont'd)
Continuing https://redmine.ungleich.ch/issues/6736 Philipp Buehler
PB 05:09 PM hack4glarus-2019-summer Wiki edit: Rookie_Guide (#12)
Philipp Buehler
PB 04:58 PM hack4glarus-2019-winter Wiki edit: Wiki (#2)
Philipp Buehler
 

Also available in: Atom