Trying to deploy fabric recipes to an auto-scaling group on EC2 could prove pretty painful, except if you have this slick code snippet to define your server group in Fabric.
Basically I’m using boto to list all of the instances currently running in a specific security group, and then populate env.hosts.
This solves the problem for pushing to running hosts. In order to pull the latest codebase when a new instance fires up, we just stuck some scripts in /etc/rc.local – more on that later.
I needed a quick and simple script to monitor some of the API’s I manage. Since I already build in methods that fully test the webservice and backend database, I just had to wrap a single call and check the results from this method. Also I don’t want to rely on my servers being able to send mail, so I added support for AWS SES.
I checked out DNSCrypt today, a new tool to help secure DNS resolution by encrypting the lookups from your machine to the DNS server.
The tool was developed by OpenDNS and is currently a preview release.
I just wanted to see the DNS traffic, so I performed a few lookups while capturing the packets…
Here is an example of a non-encrypted query:
And an encrypted query:
If you enable the lookups to traverse port 443, there will be tons of packets and I didn’t look at them.
One note worth mentioning – The client app creates a bunch of connections back to OpenDNS whenever you modify the settings.
This is some great technology and it is open-sourced. I’m assuming the networks who want total control of their users will just block the OpenDNS IP blocks to prevent users from encrypting their lookups.
You can fetch the source on GitHub – The entire Mac OS app is there!
Mac OS is great, but is not 100% secure.. Nothing is.
In addition to using the built-in security features (ie. FileVault), I run 3rd party anti-virus and firewall tools. This helps me trust my machine a little bit more.
Little Snitch is a firewall and network monitor for Mac OS. It allows you to permit or deny any network connection on a temporary or permanent basis. There is also a network monitor window that displays all of your current connections.
Sophos Anti-Virus is an anti-virus tool that actively monitors your machine for malware. This is a free tool and has proved to detect virii not only for Mac OS, but other platforms as well (such as Windows and Linux).