The posts on Kal Feher

Jordan's IDN zone has a long running outage

After a break of nearly 2 years I restart my TLD DNSSec availability project

A guide to running Bash scripts on AWS Lambda with example code.

With Lets Encrypt no longer generating Expiration Notification Emails, here's a couple of ways you can replace the service with something you can build yourself.

A step by step guide to setting up a WireGuard VPN and Squid proxy for personal use.

Certificates will no longer use Whois based information for Domain Control Validation

Analysing 500 million records a day on the AWS Free tier.

Finding the owner of expiring certificates used for IAM Roles Anywhere.

The internet root zone will start the roll over of it's Key Signing Key in 2025.

The HTTPS DNS record delivers some long desired capabilities to domain owners.

A collection of use cases to explain the behaviour of HTTPS DNS records.

IETF Brisvegas has arrived.

A review of the TLD DNS failures I've observed during 2023 and why the same failures keep happening

Deploying a root and intermediate CA using CFSSL and Ansible

Using a Self Signed CA with K8s and updating trusted CAs on Centos

Setting up an AWS lab with Ansible.

A simple explanation on how HTTPS records work

Allowing ISC BIND to use http ports for DoH with SE Linux

Deploy parsedmarc on K8s and ensure it works with Opensearch

I swap out Google Analytics for Matomo on Kubernetes.

Deploying the AWX Operator with Ansible

Resolving webhook timeouts with nginx ingress

Layered zones are gone from firewalld, so what now?

Once again I run my site against some basic Internet security tools

I move my old blog content over to a new domain and break stuff

Leaving Ghost and learning about some of Jekyll's quirks.

Deploying the Unifi controller software via Ansible.

Learning about DANE and how automation makes the pain go away

Understand how to read TLSA records and what the numbers in those records signify

Third post in a series explaining centralised management options for ACME based certificates

Second post in a series explaining centralised management options for ACME based certificates

An introduction to the concept of centralised certificate management.

A fast way to generate TLSA records using Ansible.

Using Ansible to deploy and configure ISC BIND

Configure session recording via configuration files only, allowing you to automate it.

Observations of the REGEXT meeting at IETF103

Travelling to Bangkok for IETF103

An explanation of how DNS can be used to exfiltrate data from your network and how to stop it.

Revisiting the DNS Root Key rollover

Finding where all those Quagga files went.