thequailman

WireGuard is actually pretty awful from an IT security org perspective. There are no logs when someone connects or is trying to connect, so auditing or troubleshooting becomes extremely difficult short of packet captures. Additionally, there is no concept of two step auth, so if your key is compromised, anyone can connect without anyone knowing about the compromise.

If security companies adopt WireGuard, expect things like PulseSecure to remain as a wrapper around WireGuard. They'll at least standardize on a performant and verifiable VPN solution.

How turn key do you expect the self hosted option to be? If it contains a lot of other software like SQL and Redis, would you be comfortable installing it or would you expect the option to bundle it in some kind of installer? Would you be OK with using a container, or would you want binaries?

Is there really a market for a self hosted B2C SaaS options? Would it be enough of a differentiator to drive business away from competitors?

While not really JSON, HyperScript[1] is much easier to grok than XML to me. It allows you to define layouts really naturally using standard JS objects. Mithril[2] specifically implements it really well.

1 - https://github.com/hyperhype/hyperscript

2 - https://mithril.js.org/index.html#dom-elements

How are you doing multi tenant MinIO?

To me, this represents a fatal flaw in Vault's architecture. What it does should be table stakes/standardized and operate in a distributed fashion via integration into the underlying secrets engines. I'm honestly surprised the CNCF hasn't found a project out there to challenge Vault, we desperately need alternatives.

That's not necessarily a good thing. Sometimes ex-engineer managers are the worst kind of manager due to their own misconceptions or arrogance.

My setup: AMD ryzen tower with 32GB ram and multi port PCI NICs running Debian. Internet comes into the onboard NIC, and I VLAN out the NICs to downstream devices. Server itself doesn't run anything directly, instead I use nspawn "VMs" connected to the same VLANs as necessary. I rsync to a raspberry pi with a USB HDD at a relatives house.

This seems to be impacting NPM for me.

SEEKING WORK - Remote Kubernetes/Google Cloud Platform/Amazon Web Services consulting. Focused on implementation and training--I help teams integrate new technologies into their existing stacks.

US-based, flexibles hours and scheduling. Long term or short term projects.

https://www.inputespresso.com sales@inputespresso.com

This is one of the worst advertising campaigns I've ever experienced.

This is terrible advice. Golang may have a flavor-of-the-week status in some people's minds, but it's a language that really deserves more credit. It is really easy to program and learn, and it does a lot of stuff other languages rely on third party programs for. With each release, nagging issues (namely around garbage collection) are getting resolved, but it's more than production ready. To ignore Golang right now would be akin to ignoring Java back in the early 2000s in my opinion.