public

More
Playing certificate authority: Using Cloud KMS to sign certificate signing requests
Playing certificate authority: Using Cloud KMS to sign certificate signing requests

An interesting idea. Use GCP Cloud KMS as a CA, so anyone in your org with IAM permissions to the KMS key can generate certificates signed by the CA.

Could be used in any x509 environment (like git commit signing, or mutual TLS auth) to prove the certificate holder has certain IAM access. Maybe is an employee of your company, or a member of a particular team.

#x509#security
·jpassing.com·
Playing certificate authority: Using Cloud KMS to sign certificate signing requests
The Iron Road: Level crossing-free lines
The Iron Road: Level crossing-free lines
"The level crossing removal program has clearly been a winner for the Andrews government, so it's odds-on they'll announce more crossings in the leadup to the 2022 election. They seem to like big round numbers, so I'm guessing they'll announce 15 more to bring it to a round 100. Given these assumptions, and what we know about the prioritisation framework and the remaining crossings, which 15 are they likely to be? And what does that mean for completing crossing-free corridors? "
#trains#levelcrossings
·the-iron-road.blogspot.com·
The Iron Road: Level crossing-free lines
NLB slow to react to target group changes? : aws
NLB slow to react to target group changes? : aws
"There is another issue with idle timeout (it is set to 350s and cannot be changed) then when timeout expires NLB doesn't send FIN packet or even RST. It aborts connections quietly, it only sends RST to a node after node sends a packet. This causes both client and server to hold connections that are invalid and only learn about it when they try to use it (this adds extra latency when client needs to reconnect, and if server is only waiting for client and doesn't send anything it will have high number of invalid connections opened)."
#aws#nlb#networking#tcp
·reddit.com·
NLB slow to react to target group changes? : aws