This has happened twice in the last two months - during a weekend the entire GKE cluster is restarted.
It happens even though the cluster is set to manual upgrade (release channel is set to "None").
Is there a way to find out why the GKE cluster was restarted?
I know I can print out a site's certificate with OpenSSL like this:
openssl s_client -showcerts -connect sni.velox.ch:443
But on some sites it doesn't work because they rely on SNI.
Is there a way to send an SNI request via openssl?
I'm using certbot --webroot plugin and certbot renew to renew the certificate, which does work, but it looks like httpd is caching the certificate and does not "see" that it's been updated.
Is there a signal for httpd to reload the certificates?
p.s. I prefer not to restart httpd to avoid downtime.
I'm running a BIND 9.10.2 port on FreeBSD 10 in a jailed configuration, and I'm having a problem that rndc reload does not pick up any (primary master) zone file changes, even though the SOA serial is properly incremented.
The command itself seems to succeed:
#rndc reload
server reload successful
In the logs I see:
May 9 16:03:47 y named[81516]: all zones loaded
May 9 16:03:47 y named[81516]: running
And yet only a restart of named picks up the zone updates.
rndc zonestatus my_zone.com prints the old serial. So BIND is somehow failing to re-read the zone file.
How can I debug this?
I have some binary data that is compressed with Microsoft's LZNT1 compression.
Apparently it can be decompressed by calling RtlDecompressBuffer ntdll API.
But is there an easier way to decompress it, without having to write an app?
I'm running FreeBSD and I'd like to have user's files stored encrypted using his/her password, and have seamless SSH access to those files as well (provided that the user always uses password-based authentication).
In Ubuntu this exact process is possible with Encrypted Home Directory.
Is it possible in FreeBSD?
Tried pefs but couldn't get it to fetch the password from ssh.
Is co-existence of SPF and DKIM specified somewhere (assuming the absence of DMARC)?
I want to put only my own IPs in the SPF and let 3rd parties send mail on behalf of my domain using DKIM.
What happens to e-mail that has a valid DKIM signature but fails SPF check (SPF FAIL)?
I currently have a custom implementation in PHP/mysql that keeps track of web hits and blocks those that exceed a certain rate for the same IP. I.e. if a given source IP hits the server more than X times in the last Y seconds then it will be served a redirect to a predefined location Z and the normal request processing will be aborted.
It works OK, but puts significant stress on MySQL.
So I was wondering if there is a special tool for this available? Maybe an Apache module or some kind of filter?
My Win 7 machine is in a workgroup and is not a domain member (and cannot be made a domain member). It has a share (and some DCOM components) that need to be accessible by an AD account that is a domain member.
Is that possible?
When I go to the security tab / Locations..., I cannot see the domain, I only see the local PC name in the list of locations.
Is it possible to implement a server-relative redirect using existing Apache features?
mod_alias does have a Redirect command, but that one always generates an absolute redirect even if configured like
Redirect /asdf /qwer
Also tried using mod_rewrite like this:
RewriteEngine On
RewriteRule /asdf(.*) /qwer$1 [R,L]
The end result of either of these settings is the same:
HTTP/1.0 302 Found
Location: http://my-host.blah.blah:20085/qwer
But what I really need is:
HTTP/1.0 302 Found
Location: /qwer
--- EDIT ---
Yes, I know this is against RFC spec. But all modern browsers support a relative redirect, and I really need it for a temporary fix.
I know cat can concatenate files, but I need to concatenate a mix of files and streams and pipe the result to another process.
To make the question more concrete, I want to concatenate cat abc.sql together with gzip -dc xyz.sql.gz and cat qvf.sql and pipe it all as a single stream to mysql.
What's the best way to achieve this?
I don't use AJP for load-balancing; I have a single Apache 2.2 instance that proxies some URLs to a single Tomcat 7 instance via AJP.
When Tomcat is down, the AJP proxy becomes disabled on the first failed request, and is not re-enabled when Tomcat is brought back up.
Is it possible to instruct Apache to not disable AJP connection, even though the backend is down, so that the proxy starts working the moment the backend is back online?
Here's an excerpt from my httpd.conf:
ProxyPass /my-web-app ajp://localhost:8009/my-we-app-1.0.2
And here's the log file when the backend is down:
[error] (OS 10061)No connection could be made because the target machine actively refused it.
[error] ap_proxy_connect_backend disabling worker for (localhost)
[error] proxy: AJP: failed to make connection to backend: localhost