How to account for traffic in GCP

The following may be used as a custom metric to weight scale decisions.


SELECT TIMESTAMP_TRUNC(TIMESTAMP, MINUTE) AS ts,

sum(CAST (jsonPayload.bytes_sent AS INT64)) AS sent, jsonPayload.dest_instance.zone AS dst_zone, jsonPayload.dest_instance.vm_name
FROM delasport-prod.NetFlow.compute_googleapis_com_vpc_flows_*
WHERE _TABLE_SUFFIX IN (
FORMAT_DATE("%Y%m%d",CURRENT_DATE),
FORMAT_DATE("%Y%m%d", DATE_SUB(CURRENT_DATE, INTERVAL 1 DAY)))
AND TIMESTAMP_DIFF(TIMESTAMP_SUB(CURRENT_TIMESTAMP, INTERVAL 60 MINUTE),TIMESTAMP,MINUTE) < 60
AND jsonPayload.src_instance.zone IS NOT NULL
AND jsonPayload.dest_instance.zone IS NOT NULL
AND jsonPayload.src_instance.zone != jsonPayload.dest_instance.zone
AND jsonPayload.bytes_sent != "0" group by ts,jsonPayload.dest_instance.zone, jsonPayload.dest_instance.vm_name

 

 

SELECT
count(*) as cnt, _TABLE_SUFFIX as table_name
FROM
[$Project].[$dataset].*
Where _TABLE_SUFFIX like '%20201116%'
Group by table_name
Order by cnt DESC

Testing IO performance with variable block size on NTFS and REFS

Basic command:

raw data: Continue reading “Testing IO performance with variable block size on NTFS and REFS”

Control Webasto Parkin Heater with Meitrack GPS

Here is a schematic diagram of connecting Meitrack GPS to control Webasto parking heater.
You can turn it on/off with the following SMS:

Or use some web app…
Continue reading “Control Webasto Parkin Heater with Meitrack GPS”

Adaptive DDOS IDS firewall

We had a task to build a simple solution for DDOS protection on the learning phase of attack. Main goals were:

  1. To build it fast: We chose Ubuntu … as everything needed is compiled and build in.
  2. Minimum network intervention: We opted for L2/L3 bridge with iptables integration which we plugged between our autonomous system (AS) and internet.
  3. Auto learning offenders: Using honeypot service to distinguish non-legitimate connections. Log source IP address and drop packet with iptables. Using suricata ids to additionally analyze client requests.
  4. Auto block offenders: Using fail2ban to pars logs generated by iptables and suricata and temporary disable all connections from offending sources.
  5. Have some connection limit capabilities: Again we used iptables with connlimit and conntrack modules activated.

Continue reading “Adaptive DDOS IDS firewall”

OpenWrt mass configure simple script

Car diagnostic with ATmega328P Nano

I was in trouble reading my car’s live data. So I’ve wrote a little utility to read raw car sensors data i.e. i hook up before ECU and send it via serial port to PC using ATmega328P Nano and finally store it to file.

Where to get one:
http://www.banggood.com/ATmega328P-Nano-V3-Controller-Board-Compatible-Arduino-p-940937.html

How to install:
1. Flash AnalogReadSerial.hex  to ATMega.
2. Extract and run carauto. .Net 4 is needed.
3. Choose com port from dropdown menu.

How to use:
Connect analog/digital input to intended sensor via 1KOmh resistor. Please note that all inputs are 5V only!
Shorting digital Input 12 to ground will produce human readable data and will decrease sample rate.

Reading data:
Data are stored in Output.csv file with approximately 1000 samples/second.

carauto

Dell DRAC 5 config via ssh

Changing http, https, remote console ports

clear some space

reload

Openvpn on OpenWRT does not start

with error:

try to add to /etc/rc.local: