Latest post
High zero-day in Citrix NetScaler ADC & Gateway: Patch CVE-2026-88779
A high-severity memory overflow vulnerability was disclosed, affecting Citrix NetScaler ADC and Citrix NetScaler Gateway...
Back to all posts
Security
Learn how to strengthen your infrastructure with Web Application Firewalls (WAF) and advanced security features. Perform SSL/TLS offloading and protect against application layer threats to ensure your critical systems are always compliant and protected.
Malcolm Turnbull
Security through obscurity - double login protection made easy...
Security through obscurity is not a great idea when it is your ONLY protection technique. For example moving your SSH port from 22 -> 23 won't fool any hackers for long! However, I've always liked putting a 'double login' in front of important web sites to frustrate simple automated hacking tools...
Security
How-tos
WAF
Aaron West
Client Certificate Authentication with HAProxy: How to configure
Using client certificates for security is a pretty cool idea! You can protect an entire application or even just a specific Uniform Resource Identifier (URI) to only those that provide a valid client certificate...
How-tos
Security
HAProxy
Imannuel Graham
Load Balancing Nginx Web Servers with OWASP Top 10 WAF in Azure
SSL offload is handled by STunnel, while HAProxy handles back-end server re-encryption...
WAF
Application Management
AWS / Azure / GCP
Aaron West
How to stop web form spam — use a simple honey pot trap in ModSecurity...
How frustrating do you find it when hackers or robots fill in your website forms with "Buy Viagra Now!" type spam?..
Security
WAF
Open source
Dave Saunders
Stack Clash and Loadbalancer.org
The long and short of it is, there are updates to the Linux kernel and glibc packages which will 'fix' the issue..
Security
Neil Hosking
Transparent vs Explicit proxy — which method should I use?
Different vendors have widely different opinions on which method should be used to deploy web filters or SWGs. Historically, vendors struggled to implement authentication in Transparent mode, and maybe they remember some awkward conversations with customers that chose the wrong method...
How-tos
Security
Theo Garvey
Blocking Japan with ModSecurity and Maxmind Lite
The Web Application Firewall is based on ModSecurity which is an open source WAF for Apache, IIS, and Nginx for protecting against a many variety of attacks and allows for HTTP traffic monitoring and logging...
Security
WAF
Open source
Andrei Grigoras
Disaster recovery is more important than HTTPS SNI support...
SNI is an extension to the TLS protocol which enables the client to broadcast its hostname when it tries to connect to your server. This allows you to use multiple SSL certificates on a single IP...
High Availability
Security
Dave Saunders
New PuTTY vulnerability "vuln-ech-overflow" identified - upgrade to 0.66 to protect your environment
Due to the way that PuTTY uses a signed integer variable to store the number of characters to be erased and there was inadequate checking for overflow, there was the potential for an attacker to corrupt important data in certain circumstances...
Security
Malcolm Turnbull
Blocking invalid range headers using ModSecurity and/or HAProxy (MS15-034 - CVE-2015-1635)
Anomaly score based blocking is more flexible and effective than simple first error blocking...
Security
Open source
HAProxy
Malcolm Turnbull
Simple Denial of Service DOS attack mitigation using HAProxy
Denial of Service (DOS) attacks can be used to degrade or cripple the functionality of a site...
Security
HAProxy
Open source
Scott McKeown
How do I get an A+ from Qualys SSL, but keep FIPS compliance as well?
Is getting an A+ rating with the Qualys scanner starting to feel a bit like chasing a mythical unicorn? Every time you get close to catching and keeping the beast — it run's away and they change the rules again!..
Security
How-tos
SSL/TLS