Craig Wickesser mindscratch

How to setup a practically free CDN using Backblaze B2 and Cloudflare

⚠️ Note 2023-01-21
Some things have changed since I originally wrote this in 2016. I have updated a few minor details, and the advice is still broadly the same, but there are some new Cloudflare features you can (and should) take advantage of. In particular, pay attention to Trevor Stevens' comment here from 22 January 2022, and Matt Stenson's useful caching advice. In addition, Backblaze, with whom Cloudflare are a Bandwidth Alliance partner, have published their own guide detailing how to use Cloudflare's Web Workers to cache content from B2 private buckets. That is worth reading,

start w/ plain ole postgresql with replication

RLS should work for visibility on rows

we will need to set (session variables)[https://stackoverflow.com/questions/50589871/postgresql-row-level-security-with-session-variable] with visibility keys
we will need to write a (policy)[https://dba.stackexchange.com/questions/129869/optimize-row-level-security-expression-in-postgres] to apply those keys to the row vis key.

Ageing data off.

Partion Day 1: https://www.postgresql.org/docs/current/ddl-partitioning.html

On master and nodes

Pull images form internet access laptop

docker pull gcr.io/google_containers/kube-apiserver-amd64:v1.5.0
docker pull gcr.io/google_containers/kube-controller-manager-amd64:v1.5.0
docker pull gcr.io/google_containers/kube-proxy-amd64:v1.5.0
docker pull gcr.io/google_containers/kube-scheduler-amd64:v1.5.0
docker pull weaveworks/weave-npc:1.8.2
docker pull weaveworks/weave-kube:1.8.2

	#include <time.h> // Robert Nystrom
	#include <stdio.h> // @munificentbob
	#include <stdlib.h> // for Ginny
	#define r return // 2008-2019
	#define l(a, b, c, d) for (i y=a;y\
	<b; y++) for (int x = c; x < d; x++)
	typedef int i;const i H=40;const i W
	=80;i m[40][80];i g(i x){r rand()%x;
	}void cave(i s){i w=g(10)+5;i h=g(6)
	+3;i t=g(W-w-2)+1;i u=g(H-h-2)+1;l(u

	package main

	import (
	"context"
	"fmt"
	"log"
	"net/http"
	"time"
	)

	" A minimal vimrc for new vim users to start with.
	"
	" Referenced here: http://www.benorenstein.com/blog/your-first-vimrc-should-be-nearly-empty/

	" Original Author: Bram Moolenaar <[email protected]>
	" Made more minimal by: Ben Orenstein
	" Last change: 2012 Jan 20
	"
	" To use it, copy it to
	" for Unix and OS/2: ~/.vimrc

	##TCP FLAGS##

	Unskilled Attackers Pester Real Security Folks
	==============================================
	TCPDUMP FLAGS
	Unskilled = URG = (Not Displayed in Flag Field, Displayed elsewhere)
	Attackers = ACK = (Not Displayed in Flag Field, Displayed elsewhere)
	Pester = PSH = [P] (Push Data)
	Real = RST = [R] (Reset Connection)
	Security = SYN = [S] (Start Connection)

	// source: http://stackoverflow.com/a/11058858
	function ab2str(buf) {
	return String.fromCharCode.apply(null, new Uint16Array(buf));
	}