Fraggle's questions

I'm trying to communicate from the tx.py program to send packets (UDP) down to device 1 and device 2 shown in the picture. Currently we have OpenVPN clients running on 2 of our VMs and if I run tx.py on those vms I can communicate fine to each device that is connected to that vpn tunnel (so from vm2 I can reach device 1, but not device 2).

I want to be able to route from vm1 so that I can send to device 1 or device 2 from this central location. I tried adding a route on vm1 to device 1 (via VM 2) like route add -net 100.64.226.0 netmask 255.255.255.0 gw 10.2.6.20 dev eth0 but was still not able to receive packets on Device 1. Also tried toggling ip forwarding on for both vm1 and vm2 but this didn't fix it.

What is the way to do this?

Note that I don't need to communicate back up from the devices to vm1.

Note: I don't control the openVPN servers and cannot change configs there.

I've used jMeter proxy to inspect SSL traffic coming from my iPhone, by installing the jMeter certificate on the iPhone and then configuring my wifi on the phone to use the jMeter proxy.

If I want to prevent this MITM sniffing for a particular website/server can I just enforce TLS 1.2 on the server?

Does TLS1.2 actually prevent this kind of MITM sniffing if it is enforced throughout?

My EC2 instance is blocking all outbound connections.

wget http://www.google.com  ==> Hangs
ping google.com ==>hangs
ssh user@anyserver ==>hangs

I ran : sudo iptables -F to eliminate all rules to no avail

AWS Management console shows Security Group for that instance has Inbound rule allowing ssh and port 80. Can't find anything about Outbound rules there.

Rebooted instance, no change.

If anyone knows how to diagnose or fix, please help.

Adding info:

[ec2-user@ip-10-112-62-73 ~]$ ifconfig
eth0      Link encap:Ethernet  HWaddr 12:31:3D:06:31:BB  
          inet addr:10.112.62.73  Bcast:10.112.63.255  Mask:255.255.254.0
          inet6 addr: fe80::1031:3dff:fe06:31bb/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1933 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1764 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:164075 (160.2 KiB)  TX bytes:343256 (335.2 KiB)
          Interrupt:9 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:8 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:672 (672.0 b)  TX bytes:672 (672.0 b)


[ec2-user@ip-10-112-62-73 ~]$ ip route show
10.112.62.0/23 dev eth0  proto kernel  scope link  src 10.112.62.73 
default via 10.112.62.1 dev eth0 

I'm wondering if Amazon EC2+EBS can handle large Oracle databases (7TB to start with). Sounds like EBS can have storage volumes of up to 1TB and I could have many storage volumes attached to the same EC2 instance, but is it possible then to configure Oracle to use those storage volumes so that the database can grow to 7TB and beyond?

To pursue this I would bring in Oracle DBAs to assist, but I want to figure out if this is even a valid approach, or should we look elsewhere?

What other options are there for large (7-15 TB) databases in the cloud?

[Note: I posted original question on Stackoverflow, but this site may be more appropriate]

Website(s) were up. I changed my config files in sites-enabled, then ran:

apache2ctl configtest

Got: Syntax OK

Then ran:

apache2ctl graceful

Got returned to the command prompt. No messages. The websites went down, did not restart. Also, I wasn't prompted for a passphrase which I should have been since my key has it.

So I put back the old configs (quickly) and restarted.

Does apache2ctl graceful not support the passphrase ? No error messages were in error.log files. Just "[notice] Graceful restart requested, doing restart", then nothing.

UPDATE 7/8 : After searching other error logs (previously just checked main one), I found this:

SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch