Security, software development and devops in a cloud world

Author John Hanley

I design software for enterprise-class systems and data centers. My background is 30+ years in storage (SCSI, FC, iSCSI, disk arrays, imaging) virtualization. 20+ years in identity, security, and forensics.

For the past 14+ years, I have been working in the cloud (AWS, Azure, Google, Alibaba, IBM, Oracle) designing hybrid and multi-cloud software solutions. I am an MVP/GDE with several.

Google Cloud Run – Debugging an ASP.NET Core Time Zone Issue

Introduction I am writing ASP.NET Core code for an automated cloud directory synchronization process that will run on Google Cloud Run and Kubernetes. This code requires the current date and time in the local time zone. Simple problem, or so… Continue Reading →

Hostwinds – Virtual Private Servers

Introduction One of the things that I love about the cloud, is that you can deploy servers in minutes. What previously took weeks of time, purchase orders, etc. is now a few clicks of the mouse. One of my action… Continue Reading →

What programming language do I write software in?

Introduction I recently had a conversation with the Principle Security Architect for a large company concerned with security, identity, and access management. He asked me, “What language do you write your code in and why?”. I answered his question with… Continue Reading →

Google Cloud – Improving Security with Impersonation

Introduction A common practice in Google Cloud is to create one or more service accounts to authorize the Google Cloud CLI. Using service accounts is recommended by Google instead of user accounts. However, a service account JSON or P12 file… Continue Reading →

PowerShell – Impersonate Google Service Account

Introduction This article shows how to impersonate a service account from user account credentials. To understand how to set up everything, read the companion article: Google Cloud – Improving Security with Impersonation Save the following PowerShell script as a file… Continue Reading →

Google Cloud Compute – Mastering SSH

Introduction One of the more frequent problems on Stackoverflow is Compute Engine SSH. This article will dive into how SSH is configured on Compute Engine and how to connect using various SSH tools. I will also cover how to create… Continue Reading →

Certification Practice Tests

What is a Certification Practice Test? There are two types: Practice Questions and Practice Tests. Practice Questions help you test your knowledge and prepare for certification. These could be as simple as a list of questions where you select an… Continue Reading →

Microsoft Security Certifications – New Year’s Resolution

Introduction I am working on two new security certifications for my new year’s resolution. My specialties include security, identity, access management, and networking with a focus on hybrid and multi-cloud. For the first quarter, I plan to prepare for and… Continue Reading →

HashiCorp Nomad – Executing the CLI Remotely

This article discusses how to set up SSH tunnels to run the HashiCorp Nomad CLI remotely from a Windows desktop. I recently built a single node HashiCorp Nomad cluster in dev mode on IBM Cloud. This is a single Virtual… Continue Reading →

IBM Cloud – Provisioning a Windows Server

I am currently involved in a project building a medium scale Docker Swarm cluster. This cluster comprises both Linux and Windows worker nodes. This article is about how to provision a Windows Server 2019 Standard Version 1809 in IBM Cloud…. Continue Reading →

Red Hat – OpenShift Online Free Tier

Introduction Red Hat has several resources to help you get started with OpenShift. This is my second article on Red Hat OpenShift. This article will cover the free test drive for the OpenShift Container Platform. OpenShift® Online is hosted and managed… Continue Reading →

IBM Cloud – Getting Started with Kubernetes

This article is the second in my series about IBM Cloud Kubernetes. This article requires that you have set up your IBM Cloud Kubernetes cluster. See my article IBM Cloud – Getting Started with a Free Kubernetes Cluster In this article,… Continue Reading →

IBM Cloud – Getting Started with a Free Kubernetes Cluster

Introduction IBM Cloud has a vast array of services. Over 190 services today. One of those services is Kubernetes. This article shows how to set up a free Kubernetes cluster in IBM Cloud. Kubernetes is an open-source container-orchestration system for automating… Continue Reading →

Getting Started with IBM Cloud, Red Hat OpenShift & Serverless Containers

The following podcast was recorded by Mike Pfeiffer of Cloud Skills. Check out the other podcasts on his site: CloudSkills.fm. Mike has very good industry information within his podcasts. In this episode, I discuss getting started with IBM Cloud, Red Hat OpenShift,… Continue Reading →

Red Hat – OpenShift for Operations

Introduction Red Hat has several resources to help you get started with OpenShift. This is my first article on Red Hat OpenShift. This article will cover the free test drive for the OpenShift Container Platform. The Red Hat® OpenShift® Container Platform test… Continue Reading →

IBM Cloud – Creating a Lite Account

Introduction IBM Cloud offers three types of accounts: Lite, Pay-As-You-Go and Subscription. This article will detail creating a Lite account. This account type does not require a credit card and guarantees zero cost (link). This account type never expires. IBM… Continue Reading →

IBM Cloud – Securing a Cloud Server

Introduction This is part 2 of my series on IBM Cloud – Provisioning a Cloud Server. In this part, we will perform several tasks to improve the virtual server’s security and access. Review hardware firewall options. Lockdown external access by… Continue Reading →

IBM Cloud – Provisioning a Cloud Server

Introduction Today is Saturday, so I decided to write another article about IBM Cloud. Today, I will build an IBM Cloud Virtual Server Instance (VSI) running Ubuntu 18.04. This article is the first part of a series on provisioning virtual… Continue Reading →

Socratica Python Kickstarter Project

 Socratica Python Kickstarter Campaign Introduction from Socratica’s Kickstarter Campaign Socratica – a small educational film studio with big dreams. You know us for our high-quality video lessons about math, science, and programming, especially PYTHON. Over the course of five… Continue Reading →

Never Implement Proxy TLS Interception

Introduction I was answering a question on StackOverflow. The questioner has implemented Proxy TLS Interception which is very dangerous. I am reposting this thread on my website to share the details of my answer. The Question: how to configure Google… Continue Reading →

Google Cloud – SSL Certificates the Easy Way

Introduction I use SSL certificates for everything. I am constantly creating them for internal systems and cloud services. This includes services such as web servers, SQL servers, anything where you might use a paid SSL certificate, or a self-signed certificate… Continue Reading →

Cloud Storage Bytes – New Training Videolab

This training videolab is a collection of videos Google Cloud created by Jennifer Brown @jbrojbrojbro. Jennifer is a Google Cloud Developer Advocate and a Google employee. Her videos are very good and average about 3 minutes each. This lab combines… Continue Reading →

Get Cooking in Cloud – New Training Videolab

Introduction This training videolab is a collection of videos Google Cloud created by Priyanka Vergadia @pvergadia. Priyanka is a Google Cloud Architect and a Google employee. Her videos are very good and average about 5 minutes each. This lab combines her… Continue Reading →

Google Cloud SQL for MySQL – Connection Security, High Availability and Failover

Introduction Designing an application that incorporates Google Cloud SQL requires some thought. There are several factors to consider regarding security, performance, fault tolerance and availability. Incorrectly implementing one of these areas can affect the other areas, usually negatively. In this… Continue Reading →

Introduction to Python – New Training Videolab

Introduction I watch a lot of training material from all the major education vendors (Pluralsight, Linux Academy, Cloud Academy, A Cloud Guru, and many others). For a long time, I have been wanting to add professional scriptwriting, and professional graphics… Continue Reading →

« Older posts Newer posts »

© 2024 John Hanley — Powered by WordPress

Theme by Anders NorenUp ↑