Florin's blog

The divisive drama of Star Wars: The Last Jedi

The movie has been criticized for the same things that make it a great dramatic story on its own. But there are good reasons for some of the choices it makes.
Warning: Encounter many SPOILERS, you will.

Read more →

Audeze LCD-2 compared to Sennheiser HD600: I now officially do not believe anymore in the "Audeze veil"

Two pairs of high performance headphones facing off in a direct A/B comparison. May the most accurate sound win!

Read more →

Making a tachometer for a grinding / polishing machine for telescope mirrors

When making a telescope mirror on the machine, two parameters are important: the rotation speed of the mirror, and the rotation speed of the overarm eccentric. Other environmental parameters also matter: temperature and humidity are foremost here. To more easily monitor and display these variables, I’ve built an electronic device that collects this data and shows it on the control panel. This is how to build the device.

Read more →

Massive scalability when querying metrics stored in Graphite

Is your Graphite backend not fast enough for either receiving metrics, or querying, or both? Split it up for a massive performance boost.

Read more →

multifactor authentication for distributed VPN mesh - part 3, VPN mesh

One VPN server not reliable enough? Create more than one, and connect them together.

Read more →

multifactor authentication for distributed VPN mesh - part 2, token configuration, local OTP

Running a VPN server with OTP? Thinking to run your own OTP authentication backend, instead of the public backend? This is how to do it.

Read more →

multifactor authentication for distributed VPN mesh - part 1, server and client configuration, cloud OTP

Building a distributed VPN mesh (multiple VPN servers, authenticating same accounts, having same routing)? Want to give a security boost to authentication? Thinking about multifactor? Here’s one of the many architectures that work.

Read more →

Easy multifactor authentication for SSH using YubiKey NEO tokens

Here’s a way to improve the security of your private SSH keys using a cheap smartcard.

Read more →

Monitoring for the cloud, part 2 - architecture

There’s a cornucopia of tools for monitoring cloud infrastructure: Sensu, Graphite, Logstash, Riemann, etc. The very, very good news is that most of these tools speak each other’s protocols. This opens up a lot of possibilities: from small setups where some components (e.g. the message queue) are reused, serving many purposes at once, to complex architectures where the various functions are decoupled, there are large amounts of redundancy at various levels, etc.

Read more →

Monitoring for the cloud, part 1 - tools and techniques

Moving your infrastructure into the cloud, or thinking to do so? Still using old monitoring tools such as Nagios and Munin? There’s trouble for you on the horizon. But there are better ways to do monitoring in the cloud - read on to find out.

Read more →