Viewing profile — kdv

If you don't need immediate access to the packet payload, I've been enjoying Brim Desktop [1]. It comes pre-packaged with Zeek (formerly Bro) and gives you a UI to view and query t…

How is Cloudflare handling IP allocation here? I might be mis-understanding how WireGuard works, but it doesn't look like there is an official method for IP dynamic assignment.

I truly appreciate Wireguard's simplicity but what's the best way to handle key management and peer address assignment in larger deployments?

We have the full support of the network admin staff, so punching out is not an issue, we just want to keep it as clean as possible. My guess is our control channel will likely end …

You sound like you have some experience in this area so I'll ask. I'm working with fielded devices that typically sit on enterprise networks. We operate much like an IoT device, bu…

I'm certainly comfortable with WireGuard for machine to machine connections, but I don't see how it would replace traditional VPN w/ 2FA (e.g OVPN w/ Duo) for non-technical staff t…

Edited my question above for clarity. Any info on performance, key management, and managing peer address assignment in larger deployments?

Is there any info on how many concurrent clients the WireGuard server can handle? I'd be interested in hearing if anyone has used this for management traffic to a large (>100) numb…

Interesting. I'm curious how they compare to Citus and if there are any tight integrations with their over services (managed Kafka or Elasticsearch)

We get that, but I left off (for brevity) the reasons why Citus would be a net positive for our use case.

Does anyone have insight or experience using this in production? We're currently running PostgreSQL 10 w/ pg_partman on our own hardware but looking at a several options for cloud …

My understanding is people are able to run and manage Citus themselves on GCP (not Cloud SQL), but Citus Cloud (the managed solution) is only available in AWS.

Interested to hear more about your use case and why you moved from tinc to zt. Are you usually deployed behind a NAT? Do you use ZT's servers?

I wouldn't use virtualbox in any situation where security is a concern nor Qubes OS unless you know what you're doing. Your best option for minimal effort is to use VMware workstat…

That's great! Certainly not saying you should abandon those efforts, but see if you can find a security shop that has experienced researchers doing what you want do and sell them o…

I don't know of any security talent with moderate people skills that has trouble getting a job. However, there does seem to be a huge misunderstanding on how to best break into the…

That's a reasonable question. You're absolutely correct that security is often highly dependent on account configuration, but Google has invested more into security than any other …

These days you pretty much have to choose between privacy (e.g Protonmail, Fastmail, self-hosted) and security (Google). Account security should matter more since your primary emai…

BeyondCorp sounds great in theory, but deployment sounds like a nightmare without going to one of the several companies that are offering it as a service. It's certainly not as acc…

Erm I think you're thinking of materialized views. Regular views are essentially stored queries. https://www.postgresql.org/docs/10/static/rules-materialized...

A simple example is you bucket your data into monthly tables such that when you run a query that has a timestamp constraint, the query analyzer is smart enough to only scan a subse…

Traditional views are just stored queries that are built on the fly, so there's no performance improvement. Materialized views are stored/cached on disk and will give you some perf…

Is anyone that was using pg_partman before migrated to native partitioning yet? No support for ON CONFLICT and PKs are serious limitations that are available with pg_partman.