Posts

ZDBC: The Future of Private Database Access

Image
INTRODUCTION Not that much ago Google sent me an email because they'll retire Google IoT Core in August 2023. I actually have a small project of mine running there (maybe I'll talk about it in the future); thing is, I looked into AWS as part of the improvements I'm basically using some Databases Services (Aurora with PGSQL Backend and Redshift). As still I do have some things running on Google and there're some communications between those two I needed to provided i decided to improve my communications using my new OpenZiti network. ZDBC is an implementation of JDBC that leverages the communication to my Ziti network to provide secure and connections to databases.  Alright, enough talking and let's get into, so, let me introduce my architecture: OpenZiti/ZDBC Architecture As you can see, my architecture, is quite simple. I do have my Controller and Fabric Router located in my Data Center. In my VCN in AWS I deployed a Virtual Machine with a Edge Router (I'll put

Embrace Secure Sharing with Zrok

Image
I'm sure this is not something just happened to me. How many times have you faced the problem of sharing some local service or development version of something you're building to a college? How many times have you faced the issue to share a file located in your endpoint and having to update it first to a share file service, so your peer, customer, partner, etc can download it? And how many times did you put that in public mode? did you forget to delete it? Those things happened to me time to time, and even when I became good with my policies on sharing, deleting, etc... what a pain in the rear... And now, I found zrok ! Ziggy-zrok zrok  is an open-source built on top of OpenZiti (Yes, the programmable zero-trust network overlay). As an OpenZiti Native Application, Zrok offers a unique combination of public and private resource sharing, as well as easy web sharing capabilities. As an open-source platform, Zrok can be self-hosted or used through the managed offering provided by N

Enhance your Network Security with Zero Trust and OTP

Image
 I have recently bought my new Yubikey, and for those of you who known me, I'm doing lots of work on Zero Trust lately; so after my new Yubikey arrived I decided to use it in order to gain access to my current protected assets. In this entry, we'll see the integration between CloudZiti (keep in mind you can use OpenZiti  instead and get the same results, it's just I do rather prefer not having a single open port) and a YubiKey.  As you problably know at this time, OpenZiti is an open-source implementation of the Ziti platform, actually CloudZiti has been built on top of it, providing secure and scalable network access to applications, services and identities.  I don't think you need to know what a YubiKey is, just rememver that basically it's an authentication device that supports multiple protocols, including One-Time Password ( OTP ) for enhanced security. My idea is combining both technologies and improve the security and reliability of my network infrastructure