SRE & DevOps Blog

Sign in Subscribe

Security

CrowdStrike's Blue Screen Outage: An Overview

CrowdStrike's Blue Screen Outage: An Overview

On July 20, 2024, CrowdStrike encountered a critical issue where a faulty content update for its Falcon sensor caused widespread "blue screens of death" (BSOD) on Windows systems. This affected approximately 8.5 million devices globally, leading to significant disruptions for businesses relying on their security solutions. CrowdStrike swiftly responded

A Deep Dive into WebRTC's DTLS-SRTP: Securing Real-time Communication

A Deep Dive into WebRTC's DTLS-SRTP: Securing Real-time Communication

WebRTC empowers browsers and mobile platforms with real-time communication capabilities. Central to WebRTC is ensuring secure and encrypted data and media streams, primarily delivered through DTLS-SRTP. Let's delve into its mechanisms and explore its significance, including textual representation schemas for better clarity. Understanding DTLS-SRTP DTLS-SRTP stands for Datagram Transport Layer

Securing WebRTC-to-SIP when using FreeSWITCH

Securing WebRTC-to-SIP when using FreeSWITCH

Securing WebRTC when using FreeSWITCH involves multiple layers. Here's a step-by-step guide to ensure your WebRTC communications through FreeSWITCH are secure: 1. Transport Layer Security (TLS) for SIP: * This ensures that the SIP traffic between your WebRTC client and FreeSWITCH is encrypted. * Modify your SIP profile (often located in /etc/

Implementing Rate Limiting in Nginx for Node.js Applications

Implementing Rate Limiting in Nginx for Node.js Applications

Introduction: Rate limiting is a crucial mechanism for protecting your Node.js application from abuse, ensuring fair usage, and preventing overloading of your server. In this tutorial, we'll walk you through the process of implementing rate limiting in Nginx for a Node.js application. By the end of this tutorial,

Securing Websockets

Securing Websockets

Securing WebSocket connections is crucial to protect your application and data from various security threats. Here's a comprehensive checklist to help you secure WebSocket communication: Use Secure WebSocket (WSS): * Always use the WebSocket Secure protocol (WSS) over HTTPS (SSL/TLS) to encrypt data in transit. This ensures that data exchanged

Obtaining a Multi-Level Wildcard Let's Encrypt Certificate and Storing it in AWS Secrets Manager

Obtaining a Multi-Level Wildcard Let's Encrypt Certificate and Storing it in AWS Secrets Manager

In this tutorial, we will walk you through the process of obtaining a multi-level wildcard Let's Encrypt certificate and storing it in AWS Secrets Manager. We'll also use Ansible to deploy an Nginx web server and retrieve the SSL/TLS keys from Secrets Manager to secure the web server. Step

Obtaining a Let's Encrypt Certificate with DNS Verification

Obtaining a Let's Encrypt Certificate with DNS Verification

Let's Encrypt is a free and widely used Certificate Authority (CA) that allows you to obtain SSL/TLS certificates for your websites. In this tutorial, we will walk you through the process of obtaining a Let's Encrypt certificate using DNS verification. DNS verification is a method that verifies your domain