Migrate from Nginx to Caddy for SSL auto-renewal in Amazon AWS EC2

 Dear friends,

Today, we will see a simple migration with less configuration of SSL auto-renewal.

I was using Nginx for SSL auto-renewal using certbot. Every 90 days, the renewal code should run, I made one more service it.

I have come across Caddy, which does an auto-renewal of SSL automatically with certbot. Reducing efforts and making the system smooth.

Follow the steps below

Stop and disable the Nginx

sudo systemctl stop nginx

sudo systemctl disable nginx

Install the Caddy

In EC2, if you are running Amazon Linux, then execute the following to install Caddy.

    sudo yum -y install yum-plugin-copr

    sudo yum -y copr enable @caddy/caddy epel-8-$(arch)

    sudo yum -y install caddy

Edit and configure the Caddyfile

Usually, it will be in the path /etc/caddy/Caddyfile

sudo vi /etc/caddy/Caddyfile

I have only one server that is running locally. So, my configuration is easy

domain_name {

    reverse_proxy localhost:port

}

You can configure more with your existing Nginx sites-enabled reference.

Happy SSLing.

If you like the blog or want to comment, kindly reach out to psrdotcom@gmail.com

Nginx Load Balancing Configuration

Hi folks,

I am going to explain the process of load balancing the web application using Nginx

Pre-requisites

• One machine with Nginx installation
• Two machines with running the same web application

Test setup

All are Ubuntu server machines

1. 10.10.1.1 - Load Balancer
2. 10.10.1.2 - Node 1
3. 10.10.1.3 - Node 2

Configuration

In the Nginx server machine (10.10.1.1) do the following load balancing configuration

• Make sure you stop the nginx server if running

$ sudo service nginx stop

• Edit the nginx.conf file 

$ sudo vi /etc/nginx/nginx.conf

• Place the following sample content

http {
        upstream testsetup {
        server 10.10.1.2;
        server 10.10.1.3;
}
    server{
        listen 8090;
        server_name testsetup;
        location / {
            proxy_pass http://testsetup;
        }
    }
}

• Start the Nginx server

$ sudo service nginx start

Load Balancing Test

1. Access the 10.10.1.1:8090 in the web browser
2. It will redirect to Node 1 (10.10.1.2)
3. Refresh/Reload the page, the load balancer redirects to Node 2 (10.10.1.3)

Tip

To differentiate the web server, add a footer with different content (Static IP Address) in your index.html


Please send your comments and feedback to psrdotcom@gmail.com

Capture localhost (127.0.0.1) system packets using RawCap

Hi friends,

Today I am going to share the knowledge of capturing network packets in local system i.e. localhost.

Using RawCap utility, you can capture the loopback adapter packets which are our localhost packets.

Procedure

Download the RawCap.exe from Netresec website url
http://www.netresec.com/?page=RawCap
Once you download it
Open command prompt with administrator privileges
You have the following options while running the RawCap.exe

Syntax

RawCap.exe
-c <-> Stop capturing after the specified packet count reached
-f <-> Flush each packet without buffering
-s <-> Stop capturing after the specified time limit

Example 1:
RawCap.exe 127.0.0.1 dump.pcap
Note: Ctrl + C to stop the capturing

Example 2:
RawCap.exe -c 1000 127.0.0.1 dump.pcap
After 1000 packets, the capturing will stop

Please send your feedback and comments to psrdotcom@gmail.com

Change Default Localhost File in Linux

Hi friends,

Whenever you type localhost or 127.0.0.1 in browser, you will be getting some default file.

If you would like to change the default file and wants to put your own desired file then follow this procedure.

1. Login into Linux as root
2. Open the terminal
3. cd etc/httpd/conf
4. You can see the httpd.conf for configuration of httpd
5. Place your .html file in /var/www/html
6. Change the file name as index.html
7. cd /etc --Change the directory to /etc folder
8. service httpd start -- For starting the service
9. service httpd restart -- To restart the service
10. Now you open the browser
11. In address bar of the browser type http://localhost/
12. Now you will get your own html as default localhost

For further queries/comments, please mail to psrdotcom@gmail.com