If you don't need immediate access to the packet payload, I've been enjoying Brim Desktop [1]. It comes pre-packaged with Zeek (formerly Bro) and gives you a UI to view and query those Zeek logs, which will link flows…
How is Cloudflare handling IP allocation here? I might be mis-understanding how WireGuard works, but it doesn't look like there is an official method for IP dynamic assignment.
I truly appreciate Wireguard's simplicity but what's the best way to handle key management and peer address assignment in larger deployments?
We have the full support of the network admin staff, so punching out is not an issue, we just want to keep it as clean as possible. My guess is our control channel will likely end up being some combination of WSS/Redis…
You sound like you have some experience in this area so I'll ask. I'm working with fielded devices that typically sit on enterprise networks. We operate much like an IoT device, but without the hardware constraints. The…
I'm certainly comfortable with WireGuard for machine to machine connections, but I don't see how it would replace traditional VPN w/ 2FA (e.g OVPN w/ Duo) for non-technical staff to access internal apps (at least…
Edited my question above for clarity. Any info on performance, key management, and managing peer address assignment in larger deployments?
Is there any info on how many concurrent clients the WireGuard server can handle? I'd be interested in hearing if anyone has used this for management traffic to a large (>100) number of devices Edit: ..and if so, how…
Interesting. I'm curious how they compare to Citus and if there are any tight integrations with their over services (managed Kafka or Elasticsearch)
We get that, but I left off (for brevity) the reasons why Citus would be a net positive for our use case.
Does anyone have insight or experience using this in production? We're currently running PostgreSQL 10 w/ pg_partman on our own hardware but looking at a several options for cloud migration. Unfortunately, Citus Cloud…
I wouldn't use virtualbox in any situation where security is a concern nor Qubes OS unless you know what you're doing. Your best option for minimal effort is to use VMware workstation or Fusion, avoid shared folders and…
I don't know of any security talent with moderate people skills that has trouble getting a job. However, there does seem to be a huge misunderstanding on how to best break into the "security industry", which is just too…
That's a reasonable question. You're absolutely correct that security is often highly dependent on account configuration, but Google has invested more into security than any other mail provider and my ridiculous…
These days you pretty much have to choose between privacy (e.g Protonmail, Fastmail, self-hosted) and security (Google). Account security should matter more since your primary email address probably holds the keys to…
Erm I think you're thinking of materialized views. Regular views are essentially stored queries. https://www.postgresql.org/docs/10/static/rules-materialized...
Traditional views are just stored queries that are built on the fly, so there's no performance improvement. Materialized views are stored/cached on disk and will give you some performance improvements but you'll have…
If you don't need immediate access to the packet payload, I've been enjoying Brim Desktop [1]. It comes pre-packaged with Zeek (formerly Bro) and gives you a UI to view and query those Zeek logs, which will link flows…
How is Cloudflare handling IP allocation here? I might be mis-understanding how WireGuard works, but it doesn't look like there is an official method for IP dynamic assignment.
I truly appreciate Wireguard's simplicity but what's the best way to handle key management and peer address assignment in larger deployments?
We have the full support of the network admin staff, so punching out is not an issue, we just want to keep it as clean as possible. My guess is our control channel will likely end up being some combination of WSS/Redis…
You sound like you have some experience in this area so I'll ask. I'm working with fielded devices that typically sit on enterprise networks. We operate much like an IoT device, but without the hardware constraints. The…
I'm certainly comfortable with WireGuard for machine to machine connections, but I don't see how it would replace traditional VPN w/ 2FA (e.g OVPN w/ Duo) for non-technical staff to access internal apps (at least…
Edited my question above for clarity. Any info on performance, key management, and managing peer address assignment in larger deployments?
Is there any info on how many concurrent clients the WireGuard server can handle? I'd be interested in hearing if anyone has used this for management traffic to a large (>100) number of devices Edit: ..and if so, how…
Interesting. I'm curious how they compare to Citus and if there are any tight integrations with their over services (managed Kafka or Elasticsearch)
We get that, but I left off (for brevity) the reasons why Citus would be a net positive for our use case.
Does anyone have insight or experience using this in production? We're currently running PostgreSQL 10 w/ pg_partman on our own hardware but looking at a several options for cloud migration. Unfortunately, Citus Cloud…
I wouldn't use virtualbox in any situation where security is a concern nor Qubes OS unless you know what you're doing. Your best option for minimal effort is to use VMware workstation or Fusion, avoid shared folders and…
I don't know of any security talent with moderate people skills that has trouble getting a job. However, there does seem to be a huge misunderstanding on how to best break into the "security industry", which is just too…
That's a reasonable question. You're absolutely correct that security is often highly dependent on account configuration, but Google has invested more into security than any other mail provider and my ridiculous…
These days you pretty much have to choose between privacy (e.g Protonmail, Fastmail, self-hosted) and security (Google). Account security should matter more since your primary email address probably holds the keys to…
Erm I think you're thinking of materialized views. Regular views are essentially stored queries. https://www.postgresql.org/docs/10/static/rules-materialized...
Traditional views are just stored queries that are built on the fly, so there's no performance improvement. Materialized views are stored/cached on disk and will give you some performance improvements but you'll have…