Ready to upstart?

It is time to replace the aged SysV init system with someting better At the time when  SysV init (pronounced “System five”) appeared, hardware configurations have been quite static, no hot plug and similar fancy stuff. SysV init is started after the kernel is loaded. The init process reads /etc/inittab and walks trough the runcontrol script and runlevels. This sequential walk-trough takes most of the time when booting a modern Unix system. Upstart follows another approach: Starting daemons and services ….Read More

How are jornaling options affect performance of the ext3 filesystem

The need for speed Everyone looks for the optimum of speed in its servers. Todays servers have plenty of spare CPU power and RAM is dirty cheap. Todays common bottleneck is storage. One way to solve the bottleneck is trowing money on it, the other smarter way is choosing the best matching file system and it options for the purpose of the server. On Linux systems a bunch of file systems is available and ready to use. There are some ….Read More

Directory services and Linux

LDAP is interesting, but not that easy to set up, at least not the server part. I made different approaches to install OpenLDAP without success, the problem was always the schemas and initial data load. With Red Hat Directory Server and its open source pendant CentOS Directory Server I was able to successfully install and maintain a LDAP directory. Red Hat Directory Server is the successor of the Netscape Directory Server which has been purchased by Red Hat some time ….Read More

302 Redirects behind SSL-terminating proxies

You have a web site all with SSL. There is a reverse proxy or load balancer that acts as SSL termination point. Behind that reverse proxy you have an Apache web server running plain http.

Your application uses 302 redirects to announce new URLs or whatever the reason is for doing so. Since the web server does not know that https URLs should be announced the response header looks like following:

Location http://www.example.com/your-fancy-url

The browser interprets that location header and send a request to this non-SSL URL instead of https:///www.example.com/your-fancy-url

Starting with my own blog

Since a long time I wanted to start with my own blog. Why? Actually I’m not sure… I’m working in the IT industry facing strange problems in my job as a Linux system engineer. The most difficult problems are not documented anywhere, I’ll start to post solutions for such usually non-googable problems. From time to time I’ll also going to write about the society and current stuff in the world. Have fun, feedback welcome