DEV Community: Hari Bantwal

Cost and Competence

Hari Bantwal — Wed, 17 Jul 2024 13:16:17 +0000

Cost and Competence goes hand in hand, with multiverse system out there and the technology to support it, finding the best which fits the purpose and fits the future is the key.

All the Software and Services built in house, Offered by COTS, SaaS or PaaS provides a business value in the value chain.

All these Software and Services run on Infrastructure either on prem, Cloud or SaaS.

With the advancement of Technology, consumers have the privilege to choose the best from, though caution with many options, that drives to Analysis Paralysis

Below is the Comparision of Single Units of Core Infrastructure

Single Unit, gives a direction but not the intensity.

Lets imagine, A typical department/Cost Center catering to business.

The Cost per month to host this light weight infrastructure

IaaS space

Compute: 30% cheaper
Containers: 25% cheaper
Block Storage: 65% cheaper
Egress data(50TB): 91% cheaper

To be ready for the AI/ML/3D modelling surge and migration of Huge System of Records to Cloud,

Oracle is ready with 1.3 million I/O operations per second (IOPS) and up to 12 GB per second throughput per OCI Compute instance with the OCI Block Volume Service. while the immdiate next Compute instances from other providers are providing 800,000 IOPS

Network space

Network is a large space to cover, for the next generation of workload that wants to move to Cloud, mainly the System of Records, an dedicated connectivity service that provides a private, secure, and reliable connection between on-premises network and Cloud Providers on a one time basis if it is a complete lift and shift or eco system where the on prem and different cloud providers work in tandem.

Competence:

Azure ExpressRoute Bandwidth: 100 GB PS
OCI FastConnect: 400 GB PS
Google Cloud Interconnect: 200 GB PS
AWS Direct Connect: 100 GBPS

Cost:

Bandwidth: 10 GBPS
Outbound Data: 50TB
Port Hours: 730

Azure Express Route: USD 4700
OCI Fast Connect: USD 1300
Google Cloud Interconnect: USD 5800
AWS Direct Connect: USD 2075

Database Space:

There is a huge farm of Database that are offered by the Cloud Providers. Comparision is not the sole scope of this Post.
But in general, As of June 2024, the most popular relational database management system (RDBMS) worldwide was Oracle, with a ranking score of 1244.08. Oracle was also the most popular DBMS overall. MySQL and Microsoft SQL server rounded out the top three.

While both, Oracle database and MySQL are covers more than half of the DB ecosystem, Oracle Database the proprietory and flagship product of Oracle.
MySQL which is open source under GNU Public licence was bought by Oracle Corporation during the acquisition of Sun Microsystem.

While the debate is not about, how much Oracle directly influences MySQL outcomes, but thier influence in the Database space cannot be denied.

Competiors turning to Partner:

For organizations seeking to optimize cloud infrastructure capabilities and spending, a multicloud solution might be the best approach. It gives organizations access across cloud providers, so workloads and data can be in an environment best suited to their capabilities. To create an integrated multicloud experience, Oracle and Microsoft offer direct interconnection between Oracle Cloud Infrastructure (OCI) and Azure through FastConnect and ExpressRoute.

https://blogs.oracle.com/cloud-infrastructure/post/oci-azure-interconnect-networking-multicloud

Oracle Database@Azure is an Oracle database service running on Oracle Cloud Infrastructure (OCI), colocated in Microsoft data centers. This ensures that the Oracle Database@Azure service has the fastest possible access to Azure resources and applications

https://learn.microsoft.com/en-us/azure/oracle/oracle-db/database-overview

Google Cloud and Oracle announced an exciting new strategic cloud partnership today that enables customers to migrate and run mission-critical enterprise workloads seamlessly across Google Cloud and Oracle Cloud Infrastructure (OCI).

https://cloud.google.com/blog/products/databases/accelerating-cloud-transformation-with-google-cloud-and-oracle

Oracle, Microsoft, and OpenAl are partnering to extend the Microsoft Azure Al platform to Oracle Cloud Infrastructure (OCI) to provide additional capacity for OpenAl.

https://www.oracle.com/news/announcement/openai-selects-oracle-cloud-infrastructure-to-extend-microsoft-azure-ai-platform-2024-06-11/?source=:so:ch:or:awr::::&SC=:so:ch:or:awr::::&pcode=

Reference:

Size of Cloud
https://ir.aboutamazon.com/news-release/news-release-details/2024/Amazon.com-Announces-First-Quarter-Results-68b9258cd/
https://abc.xyz/assets/91/b3/3f9213d14ce3ae27e1038e01a0e0/2024q1-alphabet-earnings-release-pdf.pdf
https://investor.oracle.com/investor-news/news-details/2024/Oracle-Announces-Fiscal-2024-Fourth-Quarter-and-Fiscal-Full-Year-Financial-Results/default.aspx

Iaas Comparison

Network

https://www.oracle.com/cloud/networking/fastconnect/
https://azure.microsoft.com/en-us/products/expressroute/
https://cloud.google.com/network-connectivity/docs/interconnect/quotas
https://docs.aws.amazon.com/directconnect/latest/UserGuide/dedicated_connection.html
https://www.megaport.com/blog/comparing-cloud-providers-private-connectivity/

Network Pricing

https://www.oracle.com/cloud/networking/fastconnect/pricing/?source=:ow:o:s:po:0917CloudSEEDIF
https://azure.microsoft.com/en-us/pricing/details/expressroute/
https://cloud.google.com/network-connectivity/docs/interconnect/pricing
https://www.oracle.com/cloud/price-list/#networking

Database space

https://library.ethz.ch/en/locations-and-media/media-types/databases-standards-patents/statista.html
https://www.statista.com/statistics/1131568/worldwide-popularity-ranking-relational-database-management-systems/

FX/OTC Volumes and Settlement Components

Hari Bantwal — Sat, 06 Jul 2024 05:02:17 +0000

Every three years, the Swiss National Bank conducts a survey on the turnover1 in the foreign exchange and over-the-counter derivatives markets in Switzerland. This survey is coordinated worldwide by the Bank for International Settlements (BIS).

In April 2022, the 30 reporting banks recorded turnover in foreign exchange and derivatives transactions of USD 367 billion per trading day. Foreign exchange transactions accounted for USD 350 billion (95%) of this total, and interest rate derivatives transactions for USD 18 billion (5%).
Swiss National Bank Report

FX/OTC is huge value, but very low margin business, which is core for the functioning of the Banks, Markets and Country in General

Below are the 10 steps involved in FX/OTC settlement business

1. Trade Capture

Trade Execution: The initiation of a trade in the FX or OTC derivatives market, where two parties agree on the terms of the transaction.
Trade Recording: The details of the executed trade are captured in the trading system. This includes information such as the type of instrument, trade date, value date, counterparties, notional amount, and agreed price.

2. Trade Validation

Confirmation Matching: Both parties to the trade send confirmations of the trade details to each other. These confirmations are matched to ensure both parties agree on the trade details.
Trade Validation: Internal validation processes ensure that the trade details are correct and conform to the organization's policies and regulatory requirements.

3. Settlement Instructions

Instruction Generation: Based on the trade details, settlement instructions are generated. These instructions detail the accounts and the amounts to be settled.
Instruction Transmission: Settlement instructions are sent to the appropriate clearing or settlement systems. In FX markets, this might involve sending instructions to an FX settlement system like CLS (Continuous Linked Settlement).

4. Reconciliation

Internal Reconciliation: Comparing internal records of trades and settlements to ensure consistency.
External Reconciliation: Comparing internal records with external records from counterparties, custodians, or settlement systems to identify and resolve discrepancies.

5. Settlement

Payment Processing: The actual transfer of funds or assets between parties. In FX settlements, this often involves the simultaneous exchange of different currencies.
Delivery vs. Payment (DVP): In the case of securities, ensuring that the delivery of the security and the payment occur simultaneously to mitigate settlement risk.

6. Risk Management

Exposure Management: Monitoring and managing the financial exposure resulting from open FX and derivatives positions.
Collateral Management: Managing the collateral posted against derivatives positions to mitigate counterparty risk.

7. Reporting

Regulatory Reporting: Providing required reports to regulatory bodies, which may include transaction details, valuations, and risk metrics.
Internal Reporting: Generating reports for internal stakeholders, including risk management, finance, and compliance teams.

8. Post-Settlement Processing

Accounting: Recording the settled trades in the accounting systems.
Dispute Resolution: Handling and resolving any disputes or discrepancies that arise from the settlement process.

9. Technology and Infrastructure

System Integration: Ensuring that trading, risk management, and settlement systems are properly integrated to facilitate smooth processing.
Data Management: Managing the data required for the entire settlement process, ensuring accuracy and integrity.

10. Continuous Improvement

Process Review: Regularly reviewing and improving settlement processes to enhance efficiency, reduce risk, and comply with evolving regulatory requirements.
Automation: Implementing automated solutions to reduce manual intervention and errors in the settlement process.

Things to Expect from a System

Hari Bantwal — Tue, 02 Jul 2024 13:52:06 +0000

Every System out there which serves a purpose, have all this.

Leaders are those, who actively identify, adapt and even change before the due time.

Performance: The speed at which a system operates and processes data, including response time, throughput, and latency.

Reliability:The ability of a system to operate consistently and accurately over time without failures.

Availability: The degree to which a system is operational and accessible when required for use, often expressed as a percentage of uptime.

Scalability: The capacity of a system to handle increased load or expand to accommodate growth without compromising performance.

Security: The protection of a system against unauthorized access, data breaches, and other vulnerabilities. This includes aspects like authentication, authorization, encryption, and auditing.

Maintainability: The ease with which a system can be maintained, including aspects of code readability, modularity, and documentation.

Usability: The ease with which users can interact with a system, including interface design, accessibility, and user experience.

Portability: The ability of a system to operate on different platforms or environments with minimal modifications.

Interoperability: The capability of a system to interact and communicate effectively with other systems.

Compliance: Adherence to laws, regulations, guidelines, and specifications relevant to the industry or domain.

Flexibility: The ease with which a system can adapt to changes in requirements or environments.

Efficiency: The optimal use of resources by a system, including processing power, memory, and bandwidth.

Auditability: The ability to trace system activities and operations to support auditing and compliance requirements.

Recovery: The ability of a system to recover from failures, including backup, failover, and disaster recovery mechanisms.

Localization: The ability of a system to support different languages, regional settings, and cultural expectations.

Azure Express Route: Unlimited data

Hari Bantwal — Fri, 28 Jun 2024 08:53:26 +0000

ExpressRoute Circuit Fee (10 Gbps):

Unlimited Data Plan: $88,000 per month for Zone 2 (Europe) locations (Azure).

Additional Costs:

Global Reach Add-On (if needed for connecting multiple data centers): $0.055 per GB for outbound data transfer within Zone 2 (Azure).
Virtual Network Gateway: Depending on the type, this can be up to $1.36 per hour for the Ultra Performance Gateway, which supports 10 Gbps bandwidth .

Breakdown:

ExpressRoute Circuit Fee: $88,000 per month.
Virtual Network Gateway:
Ultra Performance Gateway: $1.36 per hour * 730 hours (approx. 1 month) = $992.80 per month.

Total Estimated Monthly Cost:

ExpressRoute Circuit Fee: $88,000
Virtual Network Gateway: $992.80

Total: $88,992.80 per month

Please note that these are approximate costs and actual expenses might vary based on additional factors like specific data transfer volumes, additional add-ons, and regional pricing adjustments. For a more precise estimate, you can use the Azure Pricing Calculator and input the specific details of your setup.

Hybrid Cloud Topology Service Controller

Hari Bantwal — Tue, 11 Jun 2024 09:09:53 +0000

The "Topology Service Controller" in a cloud environment typically refers to a component within a cloud infrastructure that manages and controls the topology of the services running within the cloud. This can include various tasks such as:

Service Discovery and Registry: Keeping track of all services running in the cloud, including their status, locations, and interdependencies.

Network Management: Managing the network topology, including routing, load balancing, and ensuring optimal communication paths between services.

Scaling and Resilience: Monitoring the health of services and automatically scaling them up or down based on demand, as well as handling failover and redundancy to ensure high availability.

Configuration Management: Managing and distributing the configuration of services across the cloud environment, ensuring consistency and correctness.

Monitoring and Logging: Collecting and analyzing metrics and logs from services to monitor performance, detect issues, and enable troubleshooting.

OKE: Simple Steps

Hari Bantwal — Wed, 29 May 2024 12:00:47 +0000

Create an OKE Cluster in OCI, with default settings

Create kubeconfig file in your connecting machine.

oci ce cluster create-kubeconfig --cluster-id ocid1.cluster.oc1.eu-zurich-1.aaaaaaaa5s4il4pmzpg274oahr4z2at5do3ws7pemss3svdp2cbaobenjnoa --file $HOME/.kube/config --region eu-zurich-1 --token-version 2.0.0  --kube-endpoint PUBLIC_ENDPOINT

kubectl create -f https://k8s.io/examples/application/deployment.yaml

kubectl get pods

HTTPS Enablement with DNS Registrar: AWS Route 53, DNS Management: Cloudflare, Loadbalancer:OCI

Hari Bantwal — Tue, 30 Apr 2024 08:22:46 +0000

The post below describes SSL enablement for a domain registered with AWS Route 53, DNS management in Cloudflare, and the setup of load balancers and compute instances hosted on Oracle Cloud Infrastructure (OCI).

The background involves three actors due to the domain's previous use for other purposes. Keeping the status quo helps understand the complexities involving multiple actors. The DNS management part can be shifted to either AWS or OCI, reducing the number of actors in the value chain to two.

Starting Point.

bantwal.ch domain obtained from AWS Route 53
NS Records in AWS Route 53 pointing to Cloudflare
OCI Instance instance-web-1 and instance-web-2 serves Apache webserver on http://PUBLICIP:80

Objective
1) LoadBalancer in OCI pointing to OCI Instance instance-web-1 and instance-web-2
2) Associate domain bantwal.ch to Loadbalancer
3) Enable HTTPS access for bantwal.ch

Steps

1) Create Load Balancer on the regional subnet, add backend instance-web-1 and instance-web-2, add HTTP listener

2) Navigate to the browser and do http test on public ip of Loadbalancer

Objective 1: Done

3) Domain Registrar setting at AWS Route 53

DNS NS records pointing to Cloudflare

4) DNS Management in CloudFlare

DNS A record pointing to the loadbalancer created in Step 1

SSL TLS Setting is Cloudflare is set to OFF

5) Navigate to the browser and do DNS Test

Objective 2: Done

6) Get the Certificate from CA Authority.

This example uses
SSL for Free

7) Verification of domain

This example uses DNS CNAME entry in Registar/DNS Management.

Copy the values. And verify the domain.

Download the Certificate

8)Create Certificate object in OCI

Upload the files from the zip file downloaded in previous step.

9)Create HTTPS Listener in Load Balancer

10) Add the HTTPS Port to the stateful Ingress on Load Balancer Subnet

11) Access the site using SSL

12) Verify the Certificate details on the browser

Objective 3: Done

Oracle Cluster File System(OCFS2) setup for shared Block Volume

Hari Bantwal — Mon, 29 Apr 2024 13:04:33 +0000

There are moments when simple tasks can slow down our progress, often because they're not part of our regular routine. This post captured set of steps to enable Shared Block Volume for multiple OCI Compute Instances. Such a setup also needs Oracle Cluster File System(OCFS2) to be enabled.
I so wish this enablement is possible by a click of Button, API call ...

Lets make our hands dirty.

Starting point.

Two OCI Instance with the provision to access through SSH keys

Block Volume in the same Availability Domain

Attach the Block Volume to Instance

Navigate to the Unattached Block Volume. Attached Instances >> Attach Instance

Attach the First Instance.
Repeat the same for Second Instance

Setup the Oracle Cluster File System(OCFS2)

1) Add stateful Ingress in Security List of the Instance VCN

Source: Subnet/VCN CIDR
IP Prototocol: TCP and UDP
Source Port: All
Target Port: 3260 and 7777

2) Open the Target ports on Local OS Firewall on instance-1 and instance-2



sudo firewall-cmd --zone=public --permanent --add-port=7777/tcp
sudo firewall-cmd --zone=public --permanent --add-port=7777/udp
sudo firewall-cmd --zone=public --permanent --add-port=3260/tcp
sudo firewall-cmd --zone=public --permanent --add-port=3260/udp
sudo firewall-cmd --complete-reload

3) Install OCFS2 Packages on instance-1 and instance-2



sudo dnf install -y ocfs2-tools

4) Create Cluster definition on instance-1



sudo o2cb add-cluster ocifs2

5) Add the nodes to Cluster on instance-1



sudo o2cb add-node ocifs2 instance-1 --ip <PRIVATE IP OF instance 1>
sudo o2cb add-node ocifs2 instance-2 --ip <PRIVATE IP OF instance 2>

6) Check the Cluster Config file on instance-1



[opc@instance-1 ~]$ sudo cat /etc/ocfs2/cluster.conf
cluster:
    heartbeat_mode = local
    node_count = 2
    name = ocifs2

node:
    number = 0
    cluster = ocifs2
    ip_port = 7777
    ip_address = 172.17.0.173
    name = instance-1

node:
    number = 1
    cluster = ocifs2
    ip_port = 7777
    ip_address = 172.17.0.154
    name = instance-2

7) Copy the content of Cluster Config file to instance-2 at the /etc/ocfs2/cluster.conf

8) Configure the Cluster Stack in instance-1 and instance-2 sequentially



[opc@instance-1 ~]$ sudo /sbin/o2cb.init configure
Configuring the O2CB driver.
...
...
Cluster to start on boot (Enter "none" to clear) [ocfs2]: ocifs2
...

9) Verify the settings for Cluster Stack and note the values are loaded, mounted and online. But the heart beat is not active



[opc@instance-1 ~]$ sudo /sbin/o2cb.init status
Driver for "configfs": Loaded
Filesystem "configfs": Mounted
Stack glue driver: Loaded
Stack plugin "o2cb": Loaded
Driver for "ocfs2_dlmfs": Loaded
Filesystem "ocfs2_dlmfs": Mounted
Checking O2CB cluster "ocifs2": Online
  Heartbeat dead threshold: 31
  Network idle timeout: 30000
  Network keepalive delay: 2000
  Network reconnect delay: 2000
  Heartbeat mode: Local
Checking O2CB heartbeat: Not active
Debug file system at /sys/kernel/debug: mounted

Repeat above steps in instance-2

10) Setup the Boot time startup of o2cb and ocfs2 services on instance-1 and instance-2



sudo systemctl enable o2cb
sudo systemctl enable ocfs2

11) Configure Kernel for Cluster Operation on instance-1 and instance-2 using SSH



sudo sysctl kernel.panic=30
sudo sysctl kernel.panic_on_oops=1

Add the entries to sysctl configuration file for persistence



sudo vi /etc/sysctl.conf
kernel.panic=30
kernel.panic_on_oops=1

12) Create OCFS2 Volume on only instance-1



[opc@instance-1 ~]$ sudo mkfs.ocfs2 -L "ocfs2" /dev/sdb
mkfs.ocfs2 1.8.6
Cluster stack: classic o2cb
Label: ocfs2
...
Formatting Journals: 
...
Writing lost+found: done
mkfs.ocfs2 successful

Create a mount directory



[opc@instance-1 ~]$ sudo mkdir /ocfs2

Specify the netdev option in /etc/fstab to allow the system to mount ocfs2 volume during boot time



sudo vi /etc/fstab 
/dev/sdb /ocfs2 ocfs2   _netdev,defaults        0 0

Reload the sysctl and mount



sudo systemctl daemon-reload
sudo mount -a

Check the mounted block volume



[opc@instance-1 ~]$ lsblk
NAME               MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
...
sdb                  8:16   0    1T  0 disk /ocfs2

13) OCFS2 Volume setup and mount on instance-2



[opc@instance-2 ~]$ sudo mkdir /ocfs2
[opc@instance-2 ~]$ sudo vi /etc/fstab 
[opc@instance-2 ~]$ sudo systemctl daemon-reload
[opc@instance-2 ~]$ sudo mount -a 
[opc@instance-2 ~]$ lsblk
NAME               MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
...
sdb                  8:16   0    1T  0 disk /ocfs2

14) Test: Create a file on the mounted volume for eg. on instance-2



[opc@instance-2 ~]$ cd /ocfs2/
[opc@instance-2 ocfs2]$ sudo touch shared-cluster-file.txt
[opc@instance-2 ocfs2]$ ls -lart
total 8
drwxr-xr-x.  2 root root 3896 Apr 29 12:03 lost+found
dr-xr-xr-x. 19 root root  265 Apr 29 12:15 ..
-rw-r--r--.  1 root root    0 Apr 29 12:19 shared-cluster-file.txt
drwxr-xr-x.  3 root root 3896 Apr 29 12:19 .

15) Test: Access the file on the mounted volume of other instance eg. on instance-1



[opc@instance-1 ~]$ cd /ocfs2/
[opc@instance-1 ocfs2]$ ls -lart
total 8
drwxr-xr-x.  2 root root 3896 Apr 29 12:03 lost+found
dr-xr-xr-x. 19 root root  265 Apr 29 12:04 ..
-rw-r--r--.  1 root root    0 Apr 29 12:19 shared-cluster-file.txt
drwxr-xr-x.  3 root root 3896 Apr 29 12:19 .

Useful Commands

Hari Bantwal — Tue, 19 Mar 2024 22:43:46 +0000

SSH from Public Instance to Private Instance

ssh -t -o ProxyCommand="ssh -i id_rsa ubuntu@PUBLICIP -W %h:%p" -i id_rsa ubuntu@PRIVATEIP

Create CRT

openssl req -new -newkey rsa:2048 -nodes -keyout domain.co.key -out domain.co.csr

Boot Strap Command for nginx on Ubuntu on OCI

#!/bin/bash sudo apt update sudo apt install nginx -y sudo systemctl start nginx.service systemctl status nginx sudo iptables -I INPUT -p tcp --dport 80 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT sudo iptables -I OUTPUT -p tcp --sport 80 -m conntrack --ctstate ESTABLISHED -j ACCEPT

https://ubuntu.com/tutorials/install-and-configure-nginx#4-setting-up-virtual-host

Command to Install docker/compose on Oracle Linux and run potsgres on OCI

#!/bin/bash sudo dnf config-manager --add-repo=https://download.docker.com/linux/centos/docker-ce.repo sudo dnf install docker-ce --nobest -y sudo systemctl enable --now docker sudo usermod -aG docker root sudo systemctl disable firewalld sudo sudo curl -L "https://github.com/docker/compose/releases/download/v2.12.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose sudo sudo mv /usr/local/bin/docker-compose /usr/bin/docker-compose sudo chmod +x /usr/bin/docker-compose sudo docker run -d -p 5432:5432 --name postgres -e POSTGRES_PASSWORD=changeme postgres

sudo docker exec -it postgres bash

Command to Install and Configure Apache, PHP 8, MySQL, and WordPress on OCI

#!/bin/bash sudo iptables -I INPUT 6 -m state --state NEW -p tcp --dport 80 -j ACCEPT sudo netfilter-persistent save sudo apt update sudo apt -y install apache2 sudo systemctl restart apache2 sudo apt -y install php sudo apt -y install php-mysql php-curl php-gd php-zip sudo systemctl restart apache2 sudo adduser $USER www-data sudo chown -R www-data:www-data /var/www/html sudo chmod -R g+rw /var/www/html

Command to Point the Wordpress server to point to NFS

#!/bin/bash sudo systemctl stop apache2 sudo mv /var/www /var/www-old sudo mkdir /var/www sudo mount -t nfs 20.0.1.94:/wordpress /var/www sudo systemctl restart apache2

When WP is migrated to new Host, wp-admin still points to the old host. How to fix this.

mysql> show databases; mysql> use <wordpressdb>; mysql> desc wp_options; mysql> select option_name from wp_options; mysql> select option_name from wp_options where option_name = 'siteurl'; mysql> update wp_options set option_value = 'http://<NEW HOST>' where option_name ='siteurl'; mysql> select * from wp_options where option_name = 'home'; update wp_options set option_value ='http://<NEW HOST' where option_name = 'home';

WP website migrated to HTTPS, images are gone. Add the following lines in wp-config.php

if (isset($_SERVER["HTTP_X_FORWARDED_PROTO"] ) && "https" == $_SERVER["HTTP_X_FORWARDED_PROTO"] ) { $_SERVER["HTTPS"] = "on"; }

How to import and export the Mysql Dump

`mysqldump --no-tablespaces -h 20.0.1.45 -u wordpress -p wordpress > wpdump.sql

mysql -h 20.0.1.137 -u wordpress -p wordpress < wpdump.sql `

https://docs.oracle.com/en-us/iaas/developer-tutorials/tutorials/wp-on-ubuntu/01-summary.htm

https://www.digitalocean.com/community/tutorials/how-to-create-a-new-user-and-grant-permissions-in-mysql

https://www.tecmint.com/fix-error-2003-hy000-cant-connect-to-mysql-server-on-127-0-0-1-111/

https://serverfault.com/questions/139323/how-to-bind-mysql-server-to-more-than-one-ip-address

https://stackoverflow.com/questions/8020297/mysql-my-cnf-file-found-option-without-preceding-group

https://stackoverflow.com/questions/19101243/error-1130-hy000-host-is-not-allowed-to-connect-to-this-mysql-server

CREATE USER 'bob'@'10.0.0.0/255.0.0.0' IDENTIFIED BY 'password123';

https://libreswan.org/

CLI Spot Check

oci iam user get --user-id ocid1.user.oc1..userid

Encrypt and decryprt using OCI Vault

IAM

Allow group '' to manage vaults in compartment HADR
Allow group '' to manage keys in compartment HADR

OCI CLI

plaintext=$(echo "Lets look at the OCI KMS Demo" | base64)
echo $encryptedtext
encryptedtext=$(oci kms crypto encrypt --plaintext $plaintext --key-id <ocid> --endpoint https://<cryptoendpoint>-crypto.kms.eu-frankfurt-1.oraclecloud.com)
export cipher=$(echo $encryptedtext | jq -r '.data | .ciphertext')
decryptedtext=$(oci kms crypto decrypt --ciphertext $cipher --key-id <ocid> --endpoint https://<cryptoendpoint>-crypto.kms.eu-frankfurt-1.oraclecloud.com)
echo $decryptedtext
export b64encodedPlainText=$(echo $decryptedtext | jq -r '.data | .plaintext')
echo $b64encodedPlainText | base64 --decode

Multicloud: OCI-Azure : Cross Cloud Networking: Step by Step Setup

Hari Bantwal — Tue, 23 Jan 2024 14:39:31 +0000

Setup:

Process:

Azure Side

Creating Resource Group in Azure:

The first step is to create a resource group in Azure, similar to a compartment in infrastructure.
The resource group is named "To OCI resource group" and located in the Germany West Central.

Creating Virtual Network in Azure:
A virtual network is created in Azure within the "To OCI resource group" named "To OCI VNet"

Two subnets are configured, one for launching a virtual machine and another for creating a virtual network gateway.

Creating Virtual Network Gateway in Azure:
A virtual network gateway is created in Azure, named "To OCI virtual network gateway (VNG)"
The gateway type is set as ExpressRoute with a standard SKU, and it is associated with the "To OCI VNet" and the "gateway subnet."

Tool Selection: Option of Many vis-a-vis Problem of Many

Hari Bantwal — Tue, 23 Jan 2024 13:31:11 +0000

While having a programmable Infrastructure would assist in the adoption of a Dynamic environment for Cloud Offerings/SaaS, such an undertaking is possible with a variety of open-source/service tools. Below are the list of such tools which covers mostly both end of the spectrum.

The major hurdle to pass for all in the journey is "Problem of Many" by experimenting for a purpose, selecting from many, harnassing its value and adapting ...

Identity and Access Management

Ory Kratos
Authn and Authz: IDP Broker, User Management, Group Management
Zitadel
Authn and Authz: IDP Broker, User Management, Group Management
Evolveum Midpoint
Identity Governance
Aesir Kstone
Authn and Authz: Hierarchical template based User
One Identity PAM/PSM
Authn and Authz: Privileged Access/Password Management

Information Security

Brinqa
Vulnerability Management:
Tenable
Vulnerability Management:
Sapora
Identity Risk Management:
Cloudflare
Internet Access and DNS: Application Firewall, CDN, Proxy
Splunk
Security Information and Event Management
Adaptive Shield
SaaS Security Posture Management: Tool to Assess and Manage Security Posture of multliple SaaS solution
Bolodon James Classifier
Classification: Classification of Application and Messages, Emails ...
Proofpoint
Threat Management
Trellix McAfee Data Security
Data Loss Protection
Prisma Cloud Palo Alto
Security Posture Management
Trufflehog
Secrets Management
Thinkst Canary
Instrusion Detetection
Tuffin Security Track
Hybrid Cloud Network Security
Netscout Arbor
DDOS Protection

Operations

PagerDuty
Operation Platform:
Apache Superset
Data Exploration and Visualization
Prometheus
System Monitoring
Grafana
Observability Platform
CloudQuery
Monitoring Cloud Infrastructure

Engineering

Terraform
Cloud Infrastructure Provision
Gitlab
DevOps Platform and Source Control
Github
DevOps Platform and Source Control
Backtstage
Developer Portal Platform
Tekton
Cloud Native CI/CD for Kubernetes artifacts
Kubevela
Hybrid Cloud Software Delivery Platform
ArgoCD
**GitOps Kubernetes Software delivery Platform
Windmill
Developer Platform for APIs, Workflows and Quick UIs
Supabase
Developer Platform with state of art Database, Authentication, storage, Edge, Vector capabilities

10.Hasura
Instant API Platform

11.Score
Tech agnostic Workload definition

Multicloud: OCI-Azure Interconnect

Hari Bantwal — Mon, 27 Nov 2023 20:42:48 +0000

OCI-Azure Interconnect Partnership:

Oracle and Microsoft announced a partnership in 2019 to connect Oracle Cloud Infrastructure (OCI) and Microsoft Azure with a secure, low-latency, and high-throughput network known as OCI-Azure Interconnect.
This partnership enables private connectivity between OCI and Azure, offering consistent network performance with around 2-millisecond latency.

Benefits and Use Cases:

OCI-Azure Interconnect allows for the establishment of a direct connection without the need for an intermediary network provider.
It enables customers to migrate to the cloud or build cloud-native applications using the strengths of both OCI and Azure
Users can set up single sign-on between Microsoft Azure and OCI for Oracle applications, streamlining authentication.
The private inter-cloud connection bypasses the public internet, enhancing security.