dave/site
1
0
Fork 0
mirror of https://github.com/davegallant/davegallant.github.io.git synced 2025-08-07 09:02:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add socat mention in aks post

Browse Source
This commit is contained in:
Dave Gallant
2023-12-13 22:39:26 -05:00
parent 91427fdcb5
commit 3c1f66efe7
129 changed files with 611 additions and 268 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
public/blog/2020/03/16/appgate-sdp-on-arch-linux/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2020/03/16/appgate-sdp-on-arch-linux/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2020-03-16T22:00:15-04:00" />
<meta property="article:modified_time" content="2020-03-16T22:00:15-04:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="AppGate SDP on Arch Linux"/>
<meta name="twitter:description" content="AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP 4.3.2 working on Arch Linux."/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

3
public/blog/2021/09/06/what-to-do-with-a-homelab/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2021/09/06/what-to-do-with-a-homelab/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2021-09-06T01:12:54-04:00" />
<meta property="article:modified_time" content="2021-09-06T01:12:54-04:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="What To Do With A Homelab"/>
<meta name="twitter:description" content="A homelab can be an inexpensive way to host a multitude of internal/external services and learn a lot in the process."/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

3
public/blog/2021/09/08/why-i-threw-out-my-dotfiles/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2021/09/08/why-i-threw-out-my-dotfiles/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2021-09-08T00:42:33-04:00" />
<meta property="article:modified_time" content="2021-09-08T00:42:33-04:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Why I Threw Out My Dotfiles"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

3
public/blog/2021/09/17/automatically-rotating-aws-access-keys/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2021/09/17/automatically-rotating-aws-access-keys/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2021-09-17T12:48:33-04:00" />
<meta property="article:modified_time" content="2021-09-17T12:48:33-04:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Automatically Rotating AWS Access Keys"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

3
public/blog/2021/10/11/replacing-docker-with-podman-on-macos-and-linux/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2021/10/11/replacing-docker-with-podman-on-macos-and-linux/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2021-10-11T10:43:35-04:00" />
<meta property="article:modified_time" content="2021-10-11T10:43:35-04:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Replacing docker with podman on macOS (and Linux)"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

3
public/blog/2021/11/14/running-k3s-in-lxc-on-proxmox/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2021/11/14/running-k3s-in-lxc-on-proxmox/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2021-11-14T10:07:03-05:00" />
<meta property="article:modified_time" content="2021-11-14T10:07:03-05:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Running K3s in LXC on Proxmox"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

3
public/blog/2022/03/13/backing-up-gmail-with-synology/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2022/03/13/backing-up-gmail-with-synology/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2022-03-13T18:49:10-04:00" />
<meta property="article:modified_time" content="2022-03-13T18:49:10-04:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Backing Up Gmail With Synology"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

3
public/blog/2022/04/02/virtualizing-my-router-with-pfsense/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2022/04/02/virtualizing-my-router-with-pfsense/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2022-04-02T18:50:09-04:00" />
<meta property="article:modified_time" content="2022-04-02T18:50:09-04:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Virtualizing My Router With pfSense"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

3
public/blog/2022/12/10/watching-youtube-in-private/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2022/12/10/watching-youtube-in-private/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2022-12-10T21:46:55-05:00" />
<meta property="article:modified_time" content="2022-12-10T21:46:55-05:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Watching YouTube in Private"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />

34
public/blog/2023/05/22/using-aks-and-socks-to-connect-to-a-private-azure-db/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2023/05/22/using-aks-and-socks-to-connect-to-a-private-azure-db/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2023-05-22T16:31:29-04:00" />
<meta property="article:modified_time" content="2023-05-22T16:31:29-04:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Using AKS and SOCKS to connect to a Private Azure DB"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />
@@ -118,6 +117,11 @@
<p>Azure has a fully-managed service called <a href="https://azure.microsoft.com/en-ca/products/azure-bastion">Azure Bastion</a> that provides secure access to virtual machines that do not have public IPs. This looks interesting, but unfortunately it <a href="https://azure.microsoft.com/en-ca/pricing/details/azure-bastion/#pricing">costs money</a> and requires an additional virtual machine.</p>
<p>Because this adds cost (and complexity), it does not seem like a desirable option in its current state. If it provided a more seamless connection to the database, it would be more appealing.</p>
<h2 id="socks">SOCKS<a href="#socks" class="hanchor" ariaLabel="Anchor">#</a></h2>
<blockquote>
<p><strong>2023-12-13:</strong>
An alternative to using a socks proxy is <a href="http://www.dest-unreach.org/socat/">socat</a>. This would allow you to relay tcp connections to a pod running in k8s, and then port-forward them to your localhost.
If this sounds more appealing, install <a href="https://github.com/antitree/krew-net-forward/tree/master">krew-net-forward</a> and then run &ldquo;kubectl net-forward -i mydb.postgres.database.azure.com -p 5432 -l 5432&rdquo; to access the database through &ldquo;localhost:5432&rdquo;</p>
</blockquote>
<p><a href="https://en.wikipedia.org/wiki/SOCKS">SOCKS</a> is a protocol that enables a way to proxy connections by exchanging network packets between the client and the server. There are many implementations and many readily available container images that can run a SOCKS server.</p>
<p>It&rsquo;s possible to use this sort of proxy to connect to a private DB, but is it any simpler than using a virtual machine as a jumphost? It wasn&rsquo;t until I stumbled upon <a href="https://github.com/yokawasa/kubectl-plugin-socks5-proxy">kubectl-plugin-socks5-proxy</a> that I was convinced that using SOCKS could be made simple.</p>
<p>So how does it work? By installing the kubectl plugin and then running <code>kubectl socks5-proxy</code>, a SOCKS proxy server is spun up in a pod and then opens up port-forwarding session using kubectl.</p>
@@ -147,28 +151,30 @@ pod/davegallant-proxy created
<nav class="nav tags">
<ul class="tags">
<li><a href="/tags/azure">azure</a></li>
<li><a href="/tags/database">database</a></li>
<li><a href="/tags/proxy">proxy</a></li>
<li><a href="/tags/socks">socks</a></li>
<li><a href="/tags/aks">aks</a></li>
<li><a href="/tags/k8s">k8s</a></li>
<li><a href="/tags/aws">aws</a></li>
<li><a href="/tags/bastion">bastion</a></li>
<li><a href="/tags/azure">azure</a></li>
<li><a href="/tags/eks">eks</a></li>
<li><a href="/tags/bastion">bastion</a></li>
<li><a href="/tags/cloud-sql-proxy">cloud-sql-proxy</a></li>
<li><a href="/tags/database">database</a></li>
<li><a href="/tags/eks">eks</a></li>
<li><a href="/tags/k8s">k8s</a></li>
<li><a href="/tags/kubectl-plugin-socks5-proxy">kubectl-plugin-socks5-proxy</a></li>
<li><a href="/tags/proxy">proxy</a></li>
<li><a href="/tags/socat">socat</a></li>
<li><a href="/tags/socks">socks</a></li>
</ul>
</nav>

3
public/blog/2023/12/10/setting-up-gitea-actions-with-tailscale/index.html
View File

@@ -10,7 +10,6 @@
<meta property="og:url" content="/blog/2023/12/10/setting-up-gitea-actions-with-tailscale/" /><meta property="article:section" content="post" />
<meta property="article:published_time" content="2023-12-10T17:22:11-05:00" />
<meta property="article:modified_time" content="2023-12-10T17:22:11-05:00" />
<meta name="twitter:card" content="summary"/>
<meta name="twitter:title" content="Setting Up Gitea Actions With Tailscale"/>
<meta name="twitter:description" content=""/>
@@ -21,7 +20,7 @@
<link rel="stylesheet" type="text/css" media="screen" href="/css/main.0e5aa3b634b92d61bafebfd908290cc7a034e4d50e6a0c59ce50044560179c4e.css" />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.b11f422ffce8151207bad84653d44cb512043f9efe93a0a049f836b9cc32b34a.css" disabled />
<link id="darkModeStyle" rel="stylesheet" type="text/css" href="/css/dark.0b62b6a8c9bc96baf3dd0b8690823918769e50f96220bad87969bb570d1febfe.css" disabled />