SSL Termination vs SSL Passthrough: balance between performance and easy management

Depending on management cost and user experience requirements, it might be more sensible to configure internal service as https or as http. I give example of 2 backend exposing NodePort on Kubernetes, just to keep proxy concern clearly separated. SSL Termination at the Proxy (HTTP Mode) Concept HAProxy Example (HTTP/2 Termination) Notes: NGINX Example (HTTP/2 […]

Read More…

Building Reliable Air-Quality Monitoring with Open Hardware and Open Data

How Community Sensors Taught Me More Than Any Enterprise Project** For years, I’ve worked on data-driven systems and IoT architectures. But nothing has clarified the importance of clean data pipelines, consistent units, and transparent hardware more than building and deploying my own air-quality monitoring device and contributing that data to sensor.community — one of the […]

Read More…

import service architecture example

How to deal with change management: plan and actions

One of the most important strategy asset in a IT company is to deal with change.
We live in a World where everything change, and it change quickly: the market, the customer expectation, the software.
Being a technician and working on IT, I mostly focused on customer expectation (in term of UI/UX), and software changes (in term of service provided) […]

Read More…

Define API by Composable Gateway API Manager

An Gateway API Manager able easy to define by self-explaining GUI in React: Features Status of the project Frontend is producing a JSON payload, this is consumed by cogwbackend that calls internal service and returns back the response. Streaming feature is in development. For more infos, contact me […]

Read More…

My latest LLM code nightmare

Customer needs to automate code statical analysis into the integration workflow using a SAST tool. The detailed task specification comes from ChatGPT, suggesting semgrep ran from a docker image semgrep/semgrep. I thought it wasn’t a bad idea. ChatGPT suggested to integrate the tool as a pre-commit git hook, that is fair for local development, but […]

Read More…

The tale of Jenkins update to Java Jdk21 and Matrix Auth plugin

I passed a long day dealing with Jenkins runtime update (from jdk17 to jdk21), and authorisation plugin (Matrix Auth) stopping to work. Here is the tale. Involved system: Error log messages was related to hudson, and to matrix, and to authorization: Caused: jenkins.util.xstream.CriticalXStreamException: [LF]> —- Debugging information —-[LF]> cause-exception : com.thoughtworks.xstream.mapper.CannotResolveClassException[LF]> cause-message : hudson.security.GlobalMatrixAuthorizationStrategy[LF]> class […]

Read More…

Dealing with new .kube/config

Video: https://youtu.be/oBF-dUXZwrA Once you get a new config from a remote kubernetes installation you need to integrate it to existing local .kube/config file. Sometime, you or others, are doing experiments with kubernetes, so repeat the .kube/config integration steps over and over again, dealing with -data blobs List of ingredients Getting the scripts Retrieve the scripts […]

Read More…

ssh tunnel on https

How to expose ssh over https

By the mean of a reverse proxy installed on a Proxmox machine, is possible to expose also ssh access to the single machine. List of ingredients Preparing The Server To generate an self signed certificate, use the command: In /etc/nginx/nginx.conf add these lines: Preparing The Client Copying minihost.crt in The Client from The Server by: […]

Read More…