It's Always DNS Part N - Incorrect LAN Interface Edition
Here’s how a LAN cable swap broke my Internet connection.
Sathyajith Bhat on AWS & DevOps
Recent content on Sathyajith Bhat on AWS & DevOps
Latest posts
Clean up pacman cache automatically on Arch Linux
Tired of running out of space on your Arch install? Here’s a simple way to clean up pacman cache automatically on Arch Linux.
Talk to your AWS Resources using Amazon Q Developer Chat
Tired of wrangling JSON blobs representing AWS resources? Amazon Q Developer Chat can help!
Self-hosting your location history with OwnTracks
Looking to find an alternative to Google Maps Timeline? OwnTracks is a self-hosted location history tracker and might be a decent alternative to Google Maps Timeline.
Improve web application performance using AWS Global Accelerator (NET327)
I talk about how we at The Trade Desk serve our users with the AWS Global Accelerator.
Running containers on AWS
This talk looks at the options available and a general guide on what service to pick when running containers on AWS.
Bulk tagging all instances in an Auto Scaling Group (ASG) using AWS CLI and JMESPath Expressions
I dig into AWS CLI a little bit to explain how we can use JMESPath expressions to apply client-side and server-side filtering and bulk tag instances of an Auto Scaling Group.
How do you specify a target hostname for a https request?
I’ve been using hostname spoofing with curl for a while and I find out why hostname spoofing doesn’t work with TLS.
AWS Networking
A brief summary about Networking in the cloud on AWS/GCP that covers VPC, subnets, routing, ingress and engress packet flows.
How to get fzf working in PowerShell
Here’s how you can get the goodness of fuzzy search in your PowerShell terminal with fzf.
Enabling automated multi-region failover and failback using Route 53
Presented at AWS Community Day 2022 - I talk about using Route 53 and enabling automated multi-region failover and failback using Route 53.
Self-hosting FreshRSS (for free) on Fly.io in under 10 minutes
Here’s how you can self-host FreshRSS on Fly.io in under 10 minutes
Migrating Route 53 records from Latency Based Routing to Geolocation routing with zero downtime
I had some fun playing with Route 53’s routing policies.
Notes on moving Amazon Linux AMI to Amazon Linux 2
I picked up a task to migrate our base image from Amazon Linux to Amazon Linux 2. Here’s what I needed to get it to work.
Infrastructure as code and Getting started with AWS CDK
I brief on what infrastructure as code (IaC) is, the options available for IaC and then do a deep dive into the AWS CDK.
Taking on the DigitalOcean Kubernetes Challenge - GitOps CI/CD with Argo CD and Tekton
I attempt to complete the DigitalOcean Kubernetes Challenge and deploy a GitOps CI/CD solution using Tekton and Argo CD
Second Edition of Practical Docker With Python is now available
The second edition of my book - Practical Docker with Python is now available.
AWS Fargate instead of Amazon EC2 instances for one-off tasks
This talk looks at why you should be using AWS Fargate for one-off tasks.
Checking for connectivity of ElastiCache Redis instances across peering connections using VPC Reachability Analyzer
The VPC Reachability Analyzer tool is a network diagnostic tool from AWS. In this post I look at how effective the VPC Reachability Analyzer tool to diagnose a network connectivity issue from a VPC peering connection to a private subnet.
How to Remove Subnet Delegations associated with an Azure Virtual Network(VNET) Subnet
Removing Subnet delegations for an Azure VNET that might block deployments.
CDK Day is here
The CDK Day is here!
Getting Terraform to apply only when a change exists using Make
This post explains Terraform’s exit codes in detail and how you can use them to skip a terraform apply when no changes are needed.
Welcome to re:Invent 2020 and see you in Neon City
November end/December is a fairly exciting time for a lot of AWS enthusiasts - it’s time for re:Invent, AWSs’ annual event which brings in tens of thousands of AWS users, enthusiasts, power users, customers and more. For the AWS Heroes, it’s also the time to get together, talk, mingle, discuss and debate on all things AWS and more. It’s the time where we pack our bags and…
Migrating my WordPress blogs to Hugo
I started blogging with WordPress about 13 years ago. I had some free time since the joining date for my first job was about a month or so away. Armed with boredom, an Internet connection and an ample amount of free time, I started Sathya Says on WordPress.com hosting. Soon after, I came to know about domains, shared hosting and self-hosted WordPress and with my first ever salary, purchased…
Securing your workloads on Azure
I had the privilege of being able to talk about what you can do to improve your Azure account security and improve the security posture of your workloads running on Azure as part of Microsoft For Startups’ Highway to a 100 Unicorns - Scale Up Thursdays webinar series. You can catch the video on demand by registering over at https://aka.ms/secgen. The slides are available on SpeakerDeck as…
Securing workloads on Azure
This talk looks at some of the guidelines to be followed when improving the security of your workloads.
Running Folding@Home on AWS with AWS CDK
Folding@Home(aka FAH) is a distributed computing project. To quote from their website, FAH is a distributed computing project for simulating protein dynamics, including the process of protein folding and the movements of proteins implicated in a variety of diseases. Folding@Home involves you donating your spare computing power by running a small client on your computer. The client then contacts…
AWS Fargate instead of Amazon EC2 instances for one-off tasks
This talk looks at why you should be using AWS Fargate for one-off tasks.
At AWS re:Invent 2019
I’ve always dreamed of being at reInvent and this year, not only do I get to be at re:Invent, I also get a chance to lead a Dev Chat. I’m really excited to be there, to present and more importantly, to meet and interact with other AWS Heroes and re:Invent participants. Last year, I was honoured to being named as one of the Community Heroes and almost made it to re:Invent 2018.
So I wrote a book: presenting Practical Docker With Python
So yeah that actually happened! I’ve always wanted to publish a book and thanks to Apress publishing - that is a reality now. The book is titled “Practical Docker With Python: Build, Release and Distribute your Python App with Docker” and is targeted at people who are new to Docker and want to containerize their application (with an example Python chat bot). The book starts with…
Securing Containers
The talk looks at threat vectors to containers and how they can be mitigated.
On Securing Containers and Open Source tools for scanning vulnerabilities in Docker images
I recently published couple of articles elsewhere: How to Increase Container Security and Ward Off Threats - Adobe Tech Blog 5 OpenSource tools for container security - OpenSource.com Scanning Docker Images for Vulnerabilities with Aqua Microscanner - previously, on my blog Do give them a read.
E3 2018 Round up of trailers/games that I liked
E3 has come and gone by and most of the year’s press conferences were boring (what was EA even smoking?). Having said that, some of these did grab my attention. Below are a list (in no specific order) of gameplay/trailers/things I’m looking for and thought were good. Enjoy Skyrim Very Special Edition - Hilarious and very well done The Elder Scrolls Blades - FPS RPG for mobile, play on…
Scanning Docker Image for Vulnerabilities with Aqua MicroScanner
Containers are slowly becoming the standardized units of deployment. As containers become more popular, they also become the focus targets for attacking the system via vulnerabilities present in the packages within the image. There are quite a few container vulnerability scanning solutions (example: Clair, Twistlock, now Prisma Cloud, Aqua – however most of them are either commercial or require an…
Convert newsletters to RSS feeds with Kill-The-Newsletter
Long time, no write! Newsletters have become all the rage these days and I guess for good reason - they’re curated, come in (usually) once a week and typically offer a respite from the deluge of news that comes in why typical RSS Feeds or via Twitter. Naturally I subscribed to few initially and then the list of newsletters increased - and now I am stuck with a newsletter bomb in my Inbox
A Brief Look at the Oculus Rift
VR and me go like chalk and cheese - ever since a kid, I’ve had motion sickness which limited me from playing most FPS games and my last attempt at VR(at IGX 2016) was a disaster - I barely could withstand 30 seconds of VR. Granted the game selection was bad - for me anyway (Driveclub on PSVR) - still I didn’t expect that bad of a reaction. With that bit of context, the reactions that…
Creating a Kubernetes Cluster on AWS Using Kubernetes Operations
A 5-minute speedrun on how to create a Kubernetes cluster using KOPS.
Accessing Chef Databag Items from within attributes
In Chef parlance, databags are global variables saved in JSON format and are stored and accessible on the Chef server. Given that these are indexed and can be searched up along with the fact that they can be encrypted make them ideal candidates to store secrets such as credentials/ssh keys. Chef provides an easy way to search and fetch databag and databag items from within a recipe: For ex to…
Of nginx’s mid cut off responses and proxy buffers
Among the services I look after, the biggest and high-profile - is the user facing website. The website is your bog-standard typical frontend(powered by Express/Angular) which fetches data via an API which is powered by the backend(built on Rails). Typical flow is that Express receives the request from the browser, makes a request to the backend which is then served using Rails API via nginx which…
Xenserver and adding/attaching a new storage to a VM
I had an instance today where a local VM(which is provisioned by Xenserver) was running low on disk space and wanted to increase the disk space allocated to it. Last time when I did it by increasing the space from within Xen Manager, I failed miserably(the VM was configured with LVM and neither pvscan or lvscan was able to see the increased space). This time I tried a different approach:
Gaming Report for 2016
End of the year is here and while other services are busy sending Year in 2016 report, there sparked a mini gaming report in our telegram group and I decided to compile my gaming in 2016 report. At the start of the year I had decided to finish more games this year and I guess I did a pretty decent in accomplishing this. So here’s my summary Games finished this year: # PC:
Statutory warning: Decimals in your logrotate config can be bad for your server’s disk space
Last night as I was about to head to sleep, Sensu started emailing me about disk space warnings on one of the backend servers. That’s strange, I thought. I had set up logrotate with appropriate limits to ensure the log file size is reasonable and rotation happens on a daily basis. Curious, I ssh’d into the server to investigate. Running a df -h indicated as expected the disk space in…
Broken KDE Plasma 5.6 on Linux Mint 18
I’ve been a long time KDE user, loved the KDE 4.0 SC when it first arrived and probably one of the most vocal supporters for it when people were hating it. Since my recent job move, I’ve been using Linux desktop full-time. Since Linux Mint 18 was the only distro which supported WiFi/Display/Multi-monitor/HDMI out on my Lenovo E41-80(which comes with Skylake chipset), I stuck to it with…
Chef Zero, Cookbooks and Data Bags locations
I like chef-zero a lot. There’s so much overlap between chef’s products: chef-zero, chef-solo, chef-apply - yes, each have their own uses, but I digress. Chef-zero has been relatively pain-free for me - except when I tried to get it running - trying to figure out why it wasn’t fetching the cookbooks was so annoying! I went and RTFM couple of times, no dice. Then I decided to not…
DevOps Diaries: When Terminator terminates your MySQL imports onto an AWS Instance…
I have begun to use Terminator quite a lot. Terminator’s quite handy when you want to connect to multiple servers on a single terminal thanks to its split pane feature. (And yes I know about tmux & screen - I have screen on my servers, don’t want to get into the headache that is nested screen panes). Few days back we were preparing for a big migration & deploy and I was tasked upon to…
Bash bashings..
Since my new job involves lot more of Linux, shell scripting bash and automation, I’ve been trying to brush up my Linux skills. Ran into this “problem” today where there’s an init script which handles unicorn start/stop/reload and we were debugging some kinks around this. The init script had a chain of cd to the directory and the unicorn invoke script. Was trying to figure…
Review of Supergiant Games’ Transistor
Transistor is the second game made by Supergiant Games following up on their previous game, Bastion. Bastion didn’t hold my attention long enough so I really can’t say much about it, except at first glance, Bastion seemed to have great artwork and music. Story # Transistor follows the story of Red, a singer in a city called Cloudbank who gets nearly killed. She manages to escape and…
GOG Connect – import few of your Steam games into Gog.com library
Gog.com(formerly Good Old Games) is part of CD Projekt Group - the publishers of the fantastic Witcher series of games. GOG started off as a firm which (re)distributed classic games without DRM and ensuring they run on modern systems. Off late, they have evolved into digital distribution - and they’re going against the likes of Steam (and to much lesser extent, Origin). Most digital…
Some thoughts on the PlayStation 4
Few months ago for our second wedding Anniversary, after much discussions on what to get for each other - we decided to get a PlayStation 4. This was a rather surprising decision considering I’ve never been a console gamer(barring the SNES clones that Dad got for my Brahmopadesham) I’ve had a fairly decent gaming computer and spend a lot of time in front of the computer than a TV I…
Implementing and Triggering Google Now Cards & Gmail actions from Email
For every Barcamp event that comes and goes by, I try to think of what new thing I can do to make it a bit better. Off late, I’ve been using Inbox by Gmail almost exclusively. I love the product, particularly for the cards that show up that gives you a brief info about the mail(ex: Event reservation details/Flight details etc) without even opening the email. I noticed that Meetup does the…