Engineering👨💻 Ephemeral dev environments Scenario is to create ephemeral dev environmnets in an AWS account with git branches. Note: We assume all dev environments connect to a single database instance. The idea is to create frontend (cloudfront+s3) and backend (ALB+TargetGroup+Ec2) and add respective DNS records. Frontend: AWS Amplify Console is a
Engineering👨💻 Proxy pass with Cloudflare workers This is sample POC for the problem below. Problem For a website, * if http:// and/or www is used, it should be redirected to https://example.com * for /blog, worker should proxy pass to https://blog.example.com * for /pricing, proxy pass to https://pricing.example.com Proxy pass: It
Engineering👨💻 RDS Aurora URLs When we create an Aurora cluster with a writer instance and reader instance(s), there are quite a few URLs to connect our application to. We explore the when and why of each. Cluster URL In the format of .cluster-..rds.amazonaws.com The primary URL sends all queries to
drafts Devops flow Note: This is a draft published without editing. The list isn't exhaustive and definitions are loosely based on personal experience rather than standard. A rough overview of a Devops workflow (as per what's evolved so far) would look like this: At its core.. devops tries to make everything-as-a-code, and easier
Stories 📜 Game of life Game of life is my way of keeping myself entertained and focused. Ever since I could afford to have a lifestyle, I've set myself peculiar interests. While year-long resolutions don't really work out in general, I've figured a way to deal with it. Gamified my daily life. I don't set
Engineering👨💻 Deploy static websites Cloudflare+S3 Guide to deploy a static website with s3 bucket, backed by cloudflare. * Create S3 bucket with the name as intended domain. In this blogpost, I'm using https://travelsanta.com * Enable static website hosting: * Allow Public Access: * Use the bucket policy on S3: { "Version": "2012-10-17", "Statement": [ { "Sid": "PublicReadGetObject", "Effect": "Allow", "Principal"
Engineering👨💻 Gsuite login to AWS Organisation How to setup gsuite Saml login for multiple aws accounts
Engineering👨💻 What is a VPC This post is for beginners. What’s a Virtual Private Cloud (VPC)? VLANs in networking terminology. It’s a private network in cloud where you launch our servers. VPC makes it appear as if all our servers and few cloud services are in a small private network, in complete isolation.
Stories 📜 A thousand and ten It's Monsoon. A thousand ants marched in all corners of the house with a distinct purpose. It is beyond our ability to grasp their goals, and our diplomacy talks failed. The troops started in a kitchen corner, sprawled to the bedroom. They relentlessly marched across the house and built tents
Stories 📜 Featured #BehindTheBills In 2019, I challenged myself in a rather unique way. I told myself I'd write stories behind shopping bills, using the whitespace efficiently. I wrote close to 300 stories in the entire year. Some of them are good, some were meh. The personal challenge improved my perspective to write instant
Thoughts 💭 Trust, zero trust, mistrust Edit: Previously mistrust is worded as anti-trust didn't convey the meaning of context appropriately. As per feedback, mistrust conveys it better. I've often wondered who I'd rather work with. People who trust, or people who have had zero trust? I've made quite a few career switches, sometimes left within two
Engineering👨💻 Monitoring and siblings A quick attempt to explain core differences. Monitoring: "Whats happening currently?" using dashboards and reports based on metrics (what we measure goes here.) ex. all requests are currently processed within 2ms. Alerting: "Something interesting happened, and I've an action to do." ex. 20 requests in last 1 minute took more
Thoughts 💭 Today I don’t feel like doing anything! I procrastinate to kickstart my lazy ass, rolling on wheels. Every night before sleep, we’ve plans for the next day. Let’s accept it, we fail. And it’s okay. Missed out gym yet another day. Couldn’t make the post from drafts to publish. Didn’t reply an
Thoughts 💭 Minus “fuck” and “shit” Just replace them. I’m heavily influenced by the people around me. What they speak is echoed in my words, what they do is tangled in my actions. No, it’s not bad to use these words. It’s not bad to have alcohol. They’re not bad people, they’
Engineering👨💻 Service Discovery and Mesh In the wake of microservices, it's hard to maintain how services communicate with each other. Microservices maintain config files to know how to talk to other services. This is an error prone approach as config file is maintained by humans. The most common solutions to tackle this, are either DNS
Stories 📜 The Monday ride I flicked the butt, paused the music, tied the lace, and stepped out for my usual breakfast place down the lane. The streets are eerily silent for a Monday dawn. I grab my newspaper. The front page said, "A woman stood facing the wall; not an odd sight for the
Engineering👨💻 Quick Ansible to update a file Self reference. Use case was to update a configfile (datadog) in all currently running instances..And restart the process. - hosts: all tasks: - name: line insert lineinfile: path: /etc/datadog-agent/datadog.yaml insertafter: 'collect_ec2_tags: false' line: 'collect_ec2_tags: true' notify: - restarting become: true handlers: -
Engineering👨💻 Blue green deployment Blue-Green is a software deployment strategy that solves a particular problem: Previous version is still available until new version is completely validated. How does it work: Let's say we've to deploy our software. It's a typical 2-tier architecture, with a load balancer and set of servers behind it. For every
Engineering👨💻 Terraform modules What're terraform modules? > Module is an abstraction for multiple resources which can be reused. Let's say we define our website service with the following layers in AWS: * s3 for static resources (html, css, js, images, etc.) * cloudfront for cdn * application load balancer for receiving backend calls * Target group with autoscaling
Engineering👨💻 clear chef nodes: quick and dirty Note: Intended for self reference. We've to delete clients/nodes from chef when an ec2 instance terminates. We've followed the pattern of using instance id as chef node id. And the following script helps to delete nodes that are terminated. The script runs every 15 minutes. #!/bin/bash # Scan for
Engineering👨💻 How long does it take? "It depends." Yes, it depends. We never know how long does a task take with accurate assumption. But that's not helpful. Estimates matter. If time isn't a factor in whatever humans want to acheive, we might've acheived much lesser than where we're today. Those bridges aren't 100% perfect, they may
Engineering👨💻 Continuous integration, delivery and deployment Scenario: Mono-repo with multiple projects hosted on github.. We need a CI/CD setup for this, whenever a pull request is raised. Inputs: * Code hosted on Github Continuous Integration/CI server: * CI server shall merge incoming branch into master in its environment, when a pull request is made. * Run unit
Stories 📜 26..err..27?!? I'm 27 years old. I've counted the years, from my date of birth till today.. we all do this every year despite being fully aware of our age, don't we? As if we question ourselves, did we live these many days?!? When I retrospect events of every year, it amuses
Engineering👨💻 Security group rule as a resource An ongoing document on terraform clean practices I follow. Type 1: Ingress defined inside the same resource as security group. resource "aws_security_group" "sample-sg" { name = "sample-sg" vpc_id = "${aws_vpc.default.id}" ingress { protocol = "tcp" from_port = 443 to_port = 443 cidr_blocks = ["0.0.0.0/0"] } } type
