Should an admin enforce HTTPS inside kubernetes network, or just for outside traffic (via ingress)?

In a microservices scenario, each web-api container should serve itself through HTTPS or is it ok to internally work through HTTP and have all ingresses configured with certificates and redirecting to port 80 of the containers? I think the easiest approach is to protect only the outside traffic, because to configure an Asp.Net Core WebAPI…

nginx hangs some POST requests for a while

I have the following stack running on Ubuntu 18.08 and defined as docker-compose: instance of mariadb:10.3.20 custom wordpress instance based on wordpress:5.3.0-php7.2 with installed ioncube on it custom nginx instance based on nginx:1.13 with installed nginx-amplify-agent on it nginx’s config: user nginx; worker_processes auto; error_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid; events { worker_connections 10000; } http…

Is it pratical or logicall to have a model in which the transport layer is unreliable but the network layer is reliable?

Assuming the transport layer gives unreliable services to the application layer and the network layer gives reliable services to the transport layer. I think this model will fail. An example is the buffers at the transport layer. Assume there is a buffer overflow and packets are dropped. No one will retransmit these lost packets. If…

Postfix warning: SASL: Connect to /var/spool/postfix/private/auth failed: No such file or directory

I have searched, and failed to find an answer and I am out of ideas. I just do not know enough about postfix and dovecot to parse the configs or understand what may be causing this error. warning: SASL: Connect to /var/spool/postfix/private/auth failed: No such file or directory fatal: no SASL authentication mechanisms I am…

How can I run Multiple Servers on Different Digital Ocean droplets with single domain name server?

I am sorry for the newbie question. Let me help you to understand the complete scenario. I already have 1 droplet at the digital ocean running OpenLiteSpeed server. Here, I am planning to add multiple servers in different droplets. Droplet 1: US Datacenter: srv01.domain.com Droplet 2: AMS Datacenter: srv02.domain.com Droplet 3: UK Datacenter: srv03.domain.com Let’s…