I wrote a Bash script to retrofit a default-deny configuration onto existing application load balancers. It forces HTTPS, rejects invalid headers, enables defensive desynchronization protections, and sets the…
I wrote a Bash script to retrofit a default-deny posture onto existing AWS Application Load Balancers. It forces HTTPS, rejects invalid headers, enables defensive desynchronization protections, and changes…
I'm testing an internet-facing Application Load Balancer attached to two subnets: one public subnet with a direct route to an Internet Gateway, and one private subnet whose outbound…
I'm testing an internet-facing Application Load Balancer attached to two subnets: one public subnet with a direct route to an Internet Gateway, and one private subnet whose outbound…
We recently switched our Kubernetes setup from using NGINX Ingress to AWS Application Load Balancer (ALB). Previously, our architecture had NGINX handling SSL termination within the cluster, with…