Engineering👨💻 Deploy static websites Cloudflare+S3 Guide to deploy a static website with s3 bucket, backed by cloudflare. * Create S3 bucket with the name as intended domain. In this blogpost, I'm using https://travelsanta.com * Enable static website hosting: * Allow Public Access: * Use the bucket policy on S3: { "Version": "2012-10-17", "Statement": [ { "Sid": "PublicReadGetObject", "Effect": "Allow", "Principal"
Engineering👨💻 Gsuite login to AWS Organisation How to setup gsuite Saml login for multiple aws accounts
Engineering👨💻 What is a VPC This post is for beginners. What’s a Virtual Private Cloud (VPC)? VLANs in networking terminology. It’s a private network in cloud where you launch our servers. VPC makes it appear as if all our servers and few cloud services are in a small private network, in complete isolation.
Stories 📜 A thousand and ten It's Monsoon. A thousand ants marched in all corners of the house with a distinct purpose. It is beyond our ability to grasp their goals, and our diplomacy talks failed. The troops started in a kitchen corner, sprawled to the bedroom. They relentlessly marched across the house and built tents
Stories 📜 Featured #BehindTheBills In 2019, I challenged myself in a rather unique way. I told myself I'd write stories behind shopping bills, using the whitespace efficiently. I wrote close to 300 stories in the entire year. Some of them are good, some were meh. The personal challenge improved my perspective to write instant
Thoughts 💭 Trust, zero trust, mistrust Edit: Previously mistrust is worded as anti-trust didn't convey the meaning of context appropriately. As per feedback, mistrust conveys it better. I've often wondered who I'd rather work with. People who trust, or people who have had zero trust? I've made quite a few career switches, sometimes left within two
Engineering👨💻 Monitoring and siblings A quick attempt to explain core differences. Monitoring: "Whats happening currently?" using dashboards and reports based on metrics (what we measure goes here.) ex. all requests are currently processed within 2ms. Alerting: "Something interesting happened, and I've an action to do." ex. 20 requests in last 1 minute took more
Thoughts 💭 Today I don’t feel like doing anything! I procrastinate to kickstart my lazy ass, rolling on wheels. Every night before sleep, we’ve plans for the next day. Let’s accept it, we fail. And it’s okay. Missed out gym yet another day. Couldn’t make the post from drafts to publish. Didn’t reply an
Thoughts 💭 Minus “fuck” and “shit” Just replace them. I’m heavily influenced by the people around me. What they speak is echoed in my words, what they do is tangled in my actions. No, it’s not bad to use these words. It’s not bad to have alcohol. They’re not bad people, they’
Engineering👨💻 Service Discovery and Mesh In the wake of microservices, it's hard to maintain how services communicate with each other. Microservices maintain config files to know how to talk to other services. This is an error prone approach as config file is maintained by humans. The most common solutions to tackle this, are either DNS
Stories 📜 The Monday ride I flicked the butt, paused the music, tied the lace, and stepped out for my usual breakfast place down the lane. The streets are eerily silent for a Monday dawn. I grab my newspaper. The front page said, "A woman stood facing the wall; not an odd sight for the
Engineering👨💻 Quick Ansible to update a file Self reference. Use case was to update a configfile (datadog) in all currently running instances..And restart the process. - hosts: all tasks: - name: line insert lineinfile: path: /etc/datadog-agent/datadog.yaml insertafter: 'collect_ec2_tags: false' line: 'collect_ec2_tags: true' notify: - restarting become: true handlers: -
Engineering👨💻 Blue green deployment Blue-Green is a software deployment strategy that solves a particular problem: Previous version is still available until new version is completely validated. How does it work: Let's say we've to deploy our software. It's a typical 2-tier architecture, with a load balancer and set of servers behind it. For every
Engineering👨💻 Terraform modules What're terraform modules? > Module is an abstraction for multiple resources which can be reused. Let's say we define our website service with the following layers in AWS: * s3 for static resources (html, css, js, images, etc.) * cloudfront for cdn * application load balancer for receiving backend calls * Target group with autoscaling
Engineering👨💻 clear chef nodes: quick and dirty Note: Intended for self reference. We've to delete clients/nodes from chef when an ec2 instance terminates. We've followed the pattern of using instance id as chef node id. And the following script helps to delete nodes that are terminated. The script runs every 15 minutes. #!/bin/bash # Scan for
Engineering👨💻 How long does it take? "It depends." Yes, it depends. We never know how long does a task take with accurate assumption. But that's not helpful. Estimates matter. If time isn't a factor in whatever humans want to acheive, we might've acheived much lesser than where we're today. Those bridges aren't 100% perfect, they may
Engineering👨💻 Continuous integration, delivery and deployment Scenario: Mono-repo with multiple projects hosted on github.. We need a CI/CD setup for this, whenever a pull request is raised. Inputs: * Code hosted on Github Continuous Integration/CI server: * CI server shall merge incoming branch into master in its environment, when a pull request is made. * Run unit
Stories 📜 26..err..27?!? I'm 27 years old. I've counted the years, from my date of birth till today.. we all do this every year despite being fully aware of our age, don't we? As if we question ourselves, did we live these many days?!? When I retrospect events of every year, it amuses
Engineering👨💻 Security group rule as a resource An ongoing document on terraform clean practices I follow. Type 1: Ingress defined inside the same resource as security group. resource "aws_security_group" "sample-sg" { name = "sample-sg" vpc_id = "${aws_vpc.default.id}" ingress { protocol = "tcp" from_port = 443 to_port = 443 cidr_blocks = ["0.0.0.0/0"] } } type
Engineering👨💻 Recover mongo secondary Due to various reasons, mongodb secondary goes out of sync and might be dead/stuck in recovered state or replication lag grows beyond acceptable limit. Instructions 1. Make sure primary is up and running. Login to primary mongo, let’s say calendar-mongo-rs-1-1. 2. Check acceptable mongodb replication lag. You can
Engineering👨💻 Pets and cattle of infrastructure The metaphor is quite common in cloud for servers. Gist: We name pets and take care of them, nurse them. We ensure pets are in healthy state always and attend immediately if otherwise. We number cattle. When one gets ill, we shoot them. We ensure new cattle spawns up, by
Engineering👨💻 Don't wait for customer to report errors: A sales pitch of Sentry. In a typical setup, we need a resilient way to track down the errors. To think of it, we're writing code and we're generating the error. Thus, we should know it even before a user reports. While tracking logical errors might be a technical challenge, it's not difficult to track
Travel 🧗♂️ A walk with self Every other morning I wake up, I kill myself a bit for a few earnings. Be it dreaming what others told to dream of, be it making a visual of else's dream, it always tends to kill myself a bit. I kept on wondering what do I dream if none
Engineering👨💻 Mongodb with Chef and Terraform I want to launch mongodb sharded cluster with chef and terraform on AWS.. show me steps! Let's name our mongos cluster as "Roads". Assumptions: There's a private VPC in AWS with subnets in multiple AZs. There's a bastion host launched in same VPC for ssh connectivity, as mentioned here: GHOST_
