Skip to content

Instantly share code, notes, and snippets.

View okram999's full-sized avatar

Niris Okram okram999

View GitHub Profile
@okram999
okram999 / aws
Last active December 5, 2018 16:31
aws
Some questions on EFS. (Mostly checking concurrent mounting from multiple nodes)
Some on ElasticCache
A lot from S3 and Cloudfront
Good understanding of the Autoscaling
Network security or routing based on security grps
Kenesis (Streams and Firehouse) capacity questions
SQS
VPC Endpoints
Some questions on solution RDS MultiAZ - to check if we know RDS MultiAZ supports mutli region or not
Dynamo db - with very low latency and multi region read and writes
@okram999
okram999 / Security
Created November 6, 2018 21:32
Security
1. Disable 80 listener on ALB Web Listeners (FE UI, BE API, Micro) or confirm they result in 443 redirections
> Done
2. Confirm Port 8080 on the ALB target groups are configured for SSL only
> Primitive approach. Refer this: https://aws.amazon.com/blogs/aws/elastic-load-balancer-support-for-ssl-termination/
3. Confirm that SSL is enabled for the PGSQL listeners on TCP 5432 for AVA Backend and AVA Central Station db’s
> Require changes in the app as well. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.SSL
4. Limit BackEnd service access to FrontEndWeb UI servers
@okram999
okram999 / Lamba
Last active November 6, 2018 19:32
Lamba
502 serverless
503 serverless -version
504 serverless config credentials --provider aws --key XXXXXXX --secret XXXXX --profile serverlessAdmin
### AWS profile for sls cli
You must specify the aws profile | region | timeout | memorySize in the serverless.yml
provider:
name: aws
runtime: python3.6
profile: serverlessAdmin
@okram999
okram999 / ElasticSearch Notes
Last active October 31, 2018 15:44
ElasticSearch Notes
```
Index is like a database
Index can be splited into shared shared accross multiple nodes (it can have replicas)
A node can have more than 1 shards
Each shards is an instance of lucene - and they hence scales horizontally
Schema of the documents are defined by -- "the Type"
Inverted indices - quickly maps the search
@okram999
okram999 / Topics to Revisit
Created October 24, 2018 20:54
Topics to Revisit
Route53
DynamoDB
Kinesis
EMR
ElasticCache
Memcached
- Not persistent
- Cannot be used as a data store
- Supports large nodes with multiple cores or threads
@okram999
okram999 / VPC Peering
Created October 24, 2018 17:36
VPC Peering
Create VPC's
10.200.0.0/16
- 10.200.1.0/24 - public
- 10.200.2.0/24 - private
10.25.0.0/16
- 10.25.0.0/24 - private
Create Subnets
- 10.200.1.0/24 - public
@okram999
okram999 / Sending Amazon Simple Notification Service Alerts for Task Stopped Events
Created October 15, 2018 16:39
Sending Amazon Simple Notification Service Alerts for Task Stopped Events
Follow this https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_cwet2.html
And create the rule and the target.
Note: The document doesnt match the latest AWS web console
@okram999
okram999 / Kafka
Last active November 12, 2018 19:00
Kafka
Kafka:
Topics/Partitions/Offsets:
* Think of it as a database, which have streams of data
* Can have many topics, identified by names
* Topics are splitted into partitions
-- partitions are ordered
-- each msg within each partition gets an incremental id called OFFSETS
-- Order of a msg is only garantueed within a partition. NOT accross partitions
NOkram@TX590-4RYTQN2 MINGW64 ~/Documents/iTrack/s3Test
$ aws s3 mb s3://itrack-okram --profile okram
make_bucket: itrack-okram
NOkram@TX590-4RYTQN2 MINGW64 ~/Documents/iTrack/s3Test
$ aws s3 cp s3://itrack-okram/3/ download/ --recursive --profile okram
download: s3://itrack-okram/3/Config/web-dev.config to download\Config\web-dev.c onfig
download: s3://itrack-okram/3/iTack.zip to download\iTack.zip
/**********************************************
*** GENERAL
**********************************************/
* {
margin: 0;
padding: 0;
box-sizing: border-box;
}