Jayson LP Chen eit

Client-side SSL

For excessively paranoid client authentication.

Updated Apr 5 2019:

because this is a gist from 2011 that people stumble into and maybe you should AES instead of 3DES in the year of our lord 2019.

some other notes:

This gist shows how to create a GIF screencast using only free OS X tools: QuickTime, ffmpeg, and gifsicle.

To capture the video (filesize: 19MB), using the free "QuickTime Player" application:

Measure time spend on index, flush, refresh, merge, query, etc. (TD - done)
Take hot threads snapshots under read+write, read-only, write-only (TD - done)
Adjust refresh time to 10s (from 1s) and see how load changes (TD)
Measure time of a rolling restart doing disable_flush and disable_recovery (TD)
Specify routing on query -- make it choose same node for each shard each time (MD)
GC new generation size (TD)
Warmers

This gist assumes:

you have a local git repo
with an online remote repository (github / bitbucket etc)
and a cloud server (Rackspace cloud / Amazon EC2 etc)
- your (PHP) scripts are served from /var/www/html/
- your webpages are executed by apache
apache's home directory is /var/www/

	#!/bin/bash

	# Author: Alexander Schulz

	VHOSTEN="/etc/nginx/sites-enabled/"

	if [[ $1 == "-h" ]] \|\| [[ $1 == "--help" ]]
	then
	echo 'Usage: n2dissite VHOST'
	echo 'Disables Nginxs virtualhost VHOST.'

	##################################################################
	# /etc/elasticsearch/elasticsearch.yml
	#
	# Base configuration for a write heavy cluster
	#

	# Cluster / Node Basics
	cluster.name: logng

	# Node can have abritrary attributes we can use for routing

	# make CTRL+a the 'prefix' ala screen.
	bind C-a send-prefix
	set -g prefix C-a
	# get rid of the tmux standard of CTRL+b
	unbind C-b
	set -s escape-time 1
	set -g base-index 1
	setw -g pane-base-index 1

	# make it easy to reload the config (CTRL+r)

	#!/bin/sh

	# OPTIONAL FLAGS:
	#
	# -geoip true
	# this will install maxmind geoip and auto update crontab file
	#
	# -cloudwatch true
	# this will install aws cloud watch metrics and send them to aws dashboard
	#

	<?php namespace App\Providers;

	use Illuminate\Support\ServiceProvider;

	/**
	* If the incoming request is an OPTIONS request
	* we will register a handler for the requested route
	*/
	class CatchAllOptionsRequestsProvider extends ServiceProvider {

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048