CommPulse

Network mapping boto3 SDK calls to their required IAM permissions, pagination contracts, async-waiter annotations, and declared error types. 3,800+ methods across 50 AWS services, each one has the exact IAM actions it needs (from iann0036/iam-dataset), the pagination contract (from botocore's paginators-1.json), waiter configs, and 18,000+ gotchas extracted from Stack Overflow and GitHub issues covering edge cases the docs don't mention. It also has a write-back loop: when an agent hits a trap that isn't in the DB, it registers the fix and the next agent sees it. Available as an MCP server, https://stigmer.network/ if you're building agents that work with AWS. Free, open, no accounts. submitted by /u/Enough-Piano-2362 [link] [comments]

I'm posting this because there are probably quite a few ProHosting customers here. VPS Price Update Dear customer, due to the ongoing chip shortage and increased hardware replacement costs, VPS plans purchased through special deals/promotions will increase by €2.00 per billing period starting 01.07.2026. What can i do? You can renew your server before 01.07.2026 to keep your current pricing for the prepaid period. As always, all services are prepaid and can simply be left to expire if the new pricing no longer fits your needs. Thank you for your ongoing support ProHosting24 This is quite a price increase, especially considering that this host advertised monthly payments. The pricing is now in the range of Netcup and similar providers.

Under no circumstances does this mean you can post hateful, harmful, or distasteful content - most of us are still at work, let's keep it safe enough so none of us get fired. Do not post exam dumps, ads, or paid services. All "free posts" must have some sort of relationship to Azure. Relationship to Azure can be loose; however, it must be clear. It is okay to be meta with the posts and memes are allowed. If you make a meme with a Good Guy Greg hat on it, that's totally fine. This will not be allowed any other day of the week. submitted by /u/AutoModerator [link] [comments]

We've been using Varonis for several years, but as we've added more SaaS applications and AI tools, we're starting to evaluate Varonis alternatives. It's less about replacing it because it's bad and more about finding something that's easier to manage across a broader environment. Curious what others ended up choosing and what made the switch worthwhile. submitted by /u/TurboKestrel45 [link] [comments]

I havent been touch gcp in years and yesterday i got an email from gcp about indicated abuse on one of my late project (which i never access it anymore). They request me to remove or appeal from suspending that project but because since 2025 i havent activate MFA verification gcp are also want me to do that also. So both appeal and mfa page are open repeatedly leave me to stuck on accessing the console. Here is the video detail https://streamable.com/mbp5ku submitted by /u/Opening_Lime_156 [link] [comments]

Any folks waiting to see if they get accepted to the ABW Grant? Wanting to connect and stay updated. submitted by /u/abevera [link] [comments]

https://aws.amazon.com/about-aws/whats-new/2026/07/aws-transit-gateway-policy-based-routing/ "With PBR, forwarding decisions can be based on a combination of packet attributes including source and destination IP addresses, ports, and protocol rather than destination IP address alone" This feature was earlier confined to CloudWAN, and we could not adopt CloudWAN for various reasons. We had requested AWS for several years, to offer a similar capability with TGW. And they delivered. This will offer a huge advantage for us, and could for you also, if you use TGW (especially across regions) and have complex routing requirements for north/south vs east/west traffic separation and such. submitted by /u/KayeYess [link] [comments]

The vps is down since 2 days , no reply on tickets , and no status for me to check what's happening, the virtualizor panel won't load, Turns out they did mail me but it was on spam, and 4 days of outages, really? These guys are really bad at costumer support (even on normal days)

Hello. In search of a DMCA-ignored dedicated server for CDN of a file sharing website. RAM: 16 GB to 32 GB Storage: SSD 1 TB (512 GB RAID-0 ok; server will only hold a cache). Bandwitdth: 1 Gbps unmetered (334 TB) Budget: < $100/month Any offers?

I am trying to hunt down sporadic cpu spikes on a Windows server and I need a tool that will allow me to set a threshold whereby it will trigger and capture cpu telemetries with details on what process spiked it. Looking for something relatively simple and lightweight. Looked at some free tools on Microsoft store but not really sure if any of those are what I am looking for. I know about performance monitor and resource monitor and event viewer, ect but those things either are too shallow or require drilling and filtering while searching for a needle in a haystack. I would ideally like it to be a free Microsoft owned tool, but I am not above presenting leadership with something to buy that I can deploy to all systems. What say ye? submitted by /u/blackout-loud [link] [comments]

Hey everyone, I’ve been working as a sysadmin since 2016, and I’ve always struggled with infrastructure documentation. While many companies aim for dedicated IPAM or DCIM solutions, those require serious manpower and budget to acquire and operate. The reality for many of us is that our infrastructure state is still fragmented across Excel sheets, Word documents, SharePoint, or photos from a whiteboard. It's tedious to maintain and impossible to query effectively. Also, before making changes (like deploying new printers at a remote location, or complex VLAN routings), verifying if it conflicts with existing setups, like firewall rules and Zero-Trust Tunneling, is a manual headache. So I started a project I call IaD (Infrastructure as Documentation). The core idea is simple: Write down your entire IT infrastructure in structured, plain text Markdown. No databases, no complex software required. Why? Because it bridges the gap between those classical, static documents and modern AI-assisted infrastructure management. Here is how it works and why I built it this way: Universally Readable (AI-Ready): Because it’s all just Markdown, you can feed the entire repository into a (local) AI (e.g., via local Model Context Protocol tools). Intelligent Validation: Instead of just having a static wiki, I can now ask the AI to do an architecture review. If I want to deploy a new container network, the AI checks my IaD repository and warns me if my planned changes collide with existing firewall rules or routings. 100% Decoupled & Offline: It doesn't need API access or running agents on your live subsystems to gather data. You maintain the state in Markdown, making it highly secure and fully offline-capable. It acts as a single point of query. I just published this as an open-source framework/concept (AGPLv3 / Commercial License). It's built for environments where you want a transparent, resilient knowledge base that you, your colleagues, and an AI can instantly understand. You can find the repository and how to get started here: https://github.com/Livedeath2k/InfrastructureAsDocumentation Has anyone else tried using local LLMs against their infrastructure documentation for proactive error catching? I'd love to hear your thoughts on this approach and if you see potential pitfalls I might have missed! submitted by /u/Livedeath2k [link] [comments]

Hello everyone, i’m preparing for the Google TAM (Cloud Consultin) role and got my RRK1 interview, has anyone have insight on how technical the interview will be? Any advise? submitted by /u/Substantial_Bad_461 [link] [comments]

Hi all, I'm trying to determine the best approach for this scenario. Our Azure environment uses a hub-and-spoke topology with vWAN. Within each spoke, routing between subnets is allowed (controlled via NSG), but any north/south traffic leaving or entering the VNet is routed through the hub and inspected by Azure Firewall Premium. At the moment, we only have one internet-facing web application in Azure. It's exposed via Azure Firewall, with an external (non-Microsoft) WAF in front of it. The firewall only allows inbound traffic from the WAF's IP addresses. We have several upcoming projects that will require additional public-facing applications. I don't really want to keep adding public IPs to Azure Firewall, as it doesn't seem particularly scalable or cost-effective over the long term. The WAF has limit that it only forward to port 80/443 so cannot use differnt ports on existing IP addresses (so i informed by security team). The first project is an application hosted in Azure Container Apps and managed by a third party. This made me wonder whether I actually lose anything by not routing inbound traffic through Azure Firewall, given that a trusted WAF is already protecting the application. For example: Client > WAF > Azure Container App (External Ingress) The Container App environment would still communicate with other components in the VNet, with access controlled by NSGs. If it needs to communicate with systems outside the spoke, that traffic would still be routed through the hub and inspected by Azure Firewall. Coming from a traditional infrastructure background, I'm used to ensuring that all inbound traffic passes through a firewall perimeter. However, from what I've read, routing traffic directly from a WAF to Azure Container Apps appears to align with Microsoft's reference architectures to sone degree. The alternative would be to deploy an Application Gateway behind the WAF and then route traffic through Azure Firewall before it reaches the Container App: Client > WAF > Application Gateway > Azure Firewall > Azure Container App (Internal Ingress) This ensures all inbound traffic is inspected by Azure Firewall before reaching the application, but I'm struggling to identify what additional security or operational benefits this provides when a capable WAF is already performing the inbound inspection. (other than that’s how we did it back on-prem). Am I overlooking anything, or is there a compelling reason to keep Azure Firewall in the inbound path in this scenario? Thanks submitted by /u/DH171 [link] [comments]

I've been building an email security browser extension that scans emails and assigns a threat score. The extension is working well, and I've tested it. I'm at the point where I'm wondering whether it's worth continuing to build it and pitch it to B2B clients, or if there's a better direction I should take. Would love some honest opinions from people who manage IT or security. Is this something companies would actually pay for, or is the market already too crowded? submitted by /u/mrwhossetheboss [link] [comments]

A few months ago, there was a card in the Microsoft admin panel that offered a way to block all generative AI sites except Copilot. Since this is something we wanted to do, I went ahead and followed the wizard, built the policy and implemented it after some testing. In general, it works great - when someone navigates to something like claude.ai , they get a page that says "this website is blocked by your organization" with a further explanation that "your organization has licensed Microsoft 365 Copilot as an approved AI tool that offers enterprise-grade data protection" - and along with this text, there's a go back button and a "Try M365 Copilot" button. This is PERFECT for our policy and a nice UX as well. It has the added benefit of forcing Edge and preventing Chrome and any other third party browser from running. Again, a perfect side effect that we wanted to do anyway. At the end of the day, it's effectively a WCF policy in M365 Admin Panel>Settings>Microsoft Edge but it also shows up under Intune>Devices>Windows>Configuration. The policy forces the use of Edge and then blocks the gen_ai category. Exceptions are possible, as well as explicit blocks, but the blocks do not show the same, nice UX message that directs people to Copilot. Today I noticed a user using Gemini. I can only assume that gemini is somehow not classified as gen_ai but there seems to be no easy way to check what site Microsoft classifies it as. I can solve the problem by just blocking the URL, but I just gotta know why Gemini, of all things, is not being blocked when I am blocking anything in the gen_ai category...what say you, gurus? submitted by /u/gopherwasbetter [link] [comments]

I received an email from Apple today stating that MacBook Air is the world’s number one laptop for business. They did not provide any data supporting that claim, so I am wondering if that is the case. I am in the Education realm and we have always used Windows devices and part of the reason is because they are most widely used in the business world. Are you seeing that MacBook are more prominent than Windows devices? submitted by /u/Temporary_Werewolf17 [link] [comments]

Hello everyone. We are a small-medium sized corporation and currently back up all of our essential servers to the cloud and can be spun up in the cloud and used over VPN if something breaks. We recently acquired a new location across town and are going to begin putting in some infrastructure down there kind of like a pseudo semi-warm/hot site. It isn't far enough away to be a true disaster recover site and people have been working ok on just a switch/firewall to talk to our main office. I am thinking about maybe spinning up another dc down there to handle DHCP and DNS, and maybe backup some of our main servers that we could spin up quicker than if spun up in the cloud. Anyone have any thoughts on this? Tips? Personal experience? Thanks! submitted by /u/Iron_Yesu [link] [comments]

I have a WordPress site where I need to handle 1000 requests per min within 100 ms TTFB, Server configuration OS: Debian 13 Hardware: 8 core CPU, 33 GB RAM - dedicated server with 1Gbps Port Speed, location would be same city as visitor. I have couple of options NGINX with HTTP/3, PHP-FPM Apache2 with HTTP/2, PHP-FPM OpenLiteSpeed with HTTP/3, LSPHP84 Caddy with HTTP/3, PHP-FPM Preferred caching strategy: Disk / rewrite I don’t like FastCGI. DB: MySQL 8 Which one do you think will be most resource efficient ? Also you can advise me for OS Thank you submitted by /u/Sad_Pie227 [link] [comments]

submitted by /u/TeamVenti [link] [comments]

Good morning. I am thinking of a solution that would allow my users who are in the domain admin group (Windows) to connect to a wifi network and be automatically placed in the right vlan. For now apart from a ssid dedicated to admins but which requires a shared key to connect to it that administrators will be aware of I do not know how to do this. I am a student it is part of an exercise for my studies in computer science submitted by /u/Cultural_Log6672 [link] [comments]