Daniel Law iDanielLaw

With heightening concern regarding the state of internet privacy (fuelled in part by the passing of the Investigatory Powers Act in the UK), I have set up a VPN server on the virtual server I have hosted with Mythic Beasts. This uses strongSwan and certificate-based IKEv2 authentication.

Assumptions:

Debian Jessie server already set up and accessible via debian.example.com, a public IPv4 of 203.0.113.1 and a public IPv6 of 2001:db8::1
Client username of me
Clients are running the latest versions of macOS and iOS (Sierra and 10 respectively at the time of writing)
No need to support any other operating systems (although the setup is easily translated)

For automated deployment of a similar setup, albeit Ubuntu-based and using ansible for deployment, I recommend you take a look at Algo VPN. I used that project as a basis for my configuration.

React lifecycle cheatsheet

Method	Side effects¹	State updates²	Example uses
Mounting
`componentWillMount`		✓	Constructor equivalent for `createClass`
`render`			Create and return element(s)
`componentDidMount`	✓	✓	DOM manipulations, network requests, etc.
Updating
`componentWillReceiveProps`		✓	Update `state` based on changed `props`

React Best practices

I have summarized and compiled a list of React.JS best practices from various sources across the internet.

From the React docs

https://reactjs.org/docs/components-and-props.html
- props must be readonly
https://reactjs.org/docs/state-and-lifecycle.html

What you'll need

nginx
nginx-x-rid-header module (https://github.com/newobj/nginx-x-rid-header)

Why?

We want to track image downloads from client side and in javascript we cannot get the header values:(.

Logging

Below is the list of modern JS frameworks and almost frameworks – Angular, Ember and React.

All files were downloaded from https://cdnjs.com and named accordingly. Output from ls command is stripped out (irrelevant stuff)

As-is (minified)

$ ls -lhS
566K Jan 4 22:03 angular2.min.js

	# for ISAKMP (handling of security associations)
	iptables -A INPUT -p udp --dport 500 --j ACCEPT
	# for NAT-T (handling of IPsec between natted devices)
	iptables -A INPUT -p udp --dport 4500 --j ACCEPT
	# for ESP payload (the encrypted data packets)
	iptables -A INPUT -p esp -j ACCEPT
	# for the routing of packets on the server
	iptables -t nat -A POSTROUTING -j SNAT --to-source %IP% -o eth0
	# internet access
	iptables -t nat -A POSTROUTING -s 10.0.42.0/24 -o eth0 -m policy --dir out --pol ipsec -j ACCEPT

	var app = require('express').createServer()
	var io = require('socket.io').listen(app);
	var fs = require('fs');

	app.listen(8008);

	// routing
	app.get('/', function (req, res) {
	res.sendfile(__dirname + '/chat.html');
	});

	#@ /etc/quagga/bgpd.conf (Centos & Ubuntu)

	hostname <Local OS hostname>
	password <Any random phrase>
	enable password <Any random phrase>
	!
	log file /var/log/quagga/bgpd
	!debug bgp events
	!debug bgp zebra
	debug bgp updates

	#@ /etc/quagga/bgpd.conf (Centos & Ubuntu)

	hostname <Local OS hostname>
	password <Any random phrase>
	enable password <Any random phrase>
	!
	log file /var/log/quagga/bgpd
	!debug bgp events
	!debug bgp zebra
	debug bgp updates

	package main

	import (
	"crypto/rand"
	"flag"
	"log"
	mrand "math/rand"
	"net"
	"os"
	"os/signal"