Building custom Docker images and configuring with Ansible
Due to ever rising popularity of Docker this page will provide a walk through process of building custom Encompass Docker images and creating containers. The image configuration will be executed with our existing Ansible repository. We will store this images…
MySQL SSL and client certificates authentication
First lets create a small Camel database with couple of tables on our server.mydomain.com host using the following script: create database camel; grant usage on camel.* to ‘camel’@’%’ identified by ‘[camel-password]’; grant all privileges on camel.* to ‘camel’@’%’ identified by…
OpenStack Icehouse Multi-node Installation with Ceph backend for Cinder and Glance
This is a standard Installation of OpenStack Icehouse on 3 x VM nodes: Controller, Compute and Networking. Later I decided to create 2 separate storage nodes for the Cinder service that will be using CEPH/RADOS cluster as object storage since…
MySQL High Availability and Load Balancing with Keepalived
What we want to achieve here is have a MySQL HA two nodes cluster in Master-Master mode and load balance the instances using as less hardware as possible. The role of the LB will be given to Keepalived that will…
Secure Nginx with Naxsi, SSL, GeoIP and Google Page Speed modules on Debian/Ubuntu
We will use the latest stable version of nginx-naxsi which has XSS (Cross Site Scripting) protection via Naxsi module. We will also build and install this Debian way on Ubuntu-12.04 Precise since we want to include some other useful modules,…
Nginx LDAP module on Debian/Ubuntu
Nginx by default contains the core modules needed which makes it light and lean web server. Any additional stuff needed have to be recompiled and added as modules since Nginx doesn’t have a dynamic (plug-able) module infrastructure like Apache for…
Ceph cluster on Ubuntu-14.04
As pointed on its home page, Ceph is a unified, distributed storage system designed for performance, reliability and scalability. It provides seamless access to objects using native language bindings or radosgw (RGW), a REST interface that’s compatible with applications written…
VIP(EIP) fail over with Keepalived in Amazon VPC across availability zones
This example covers VIP failover in AWS VPC across AZ’s with Keepalived. The main problem in AWS is that this provider is blocking the multicast traffic in the VPC’s. To circumvent this we need to switch to unicast for the…
Horde Groupware Webserver
Horde Groupware Webserver Edition is a free, enterprise ready, browser based communication suite. Users can read, send and organize server messages and manage and share calendars, contacts, tasks, notes, files and bookmarks. It can be extended with any of the…
IPSEC VPN tunnel setup between two Amazon VPC’s with OpenSwan and EC2 NAT instances’
With services running in multiple VPC’s sooner or later a need will arise for secure clustering of instances across regions. This is especially important in case when such services do not have built in SSL/TLS support or when the services…