Adrian Simionov

Not everyone is as lucky to live in Singapore and have access to such an amazing OverDrive collection as National Library Board but this does not mean that us living around Melbourne are that unlucky either.

Or, as of March 2022, be a Kiwi and have access to The Largest Collection of over 220K ebook titles. Well done City of Aukland, you are very close to the Singapore library. If I am not mistaken, based on my statistics, I am pretty sure now Aukland Overdrive Library is one of the largest in the world.

Melbourne is lucky enough that libraries budget is managed at the city council level giving each group of libraries the opportunity to choose the option they want for the eBooks collection they offer. A significant number of library groups went with OverDrive and being a resident of Victoria does give you the opportunity to sign up with all of these libraries if you wish to.

Below you can find a curated list of libraries with which if you sign up, you get access to their OverDrive collection. Again, every city council will have a different budget and therefore the collection they have will be different, but some of these libraries have a significantly large collection.

Best e-reader I could find which supports OverDrive integration is Kobo from Rakuten (although I currently own a Kindle Oasis). I would also recommend using a Chrome/Firefox extension called Available Reads which integrates well with GoodReads and will search preconfigured OverDrive libraries for e-books availability.

As of March 2022:

1. Eastern Regional Libraries - 62.800+ - erl.overdrive.com

2. Boroondara Library Service - 34.200+ titles - boroondara.overdrive.com

3. Greater Dandenong - 32.100+ titles - greaterdandenong.overdrive.com

4. Whitehorse Manningham Libraries - 24.500+ titles - wml.overdrive.com

5. Yarra Plenty Regional Library - 24.200+ titles - yprl.overdrive.com

6. Moonee Valley Libraries - 20.800+ titles - mooneevalley.overdrive.com

7. Brimbank Libraries - 9.000+ titles - brimbanklibraries.overdrive.com

8. Moreland City Libraries - 7.000+ titles - virtualmoreland.overdrive.com

9. Port Phillip - 6.800+ titles - portphillip.overdrive.com

10. Maribyrnong Library Service - 6.000+ titles - maribyrnong.overdrive.com

11. Bayside - 3.900+ titles - baysidelibrary.overdrive.com

If you do know any other OverDrive libraries in the area, please let me know in the comments below.

Transfer.sh is a very popular service used for uploading files with a short life. It is used mostly in automation pipelines, as it allows uploading via curl. You can find the script on GitHub if you ever decide to host one instance yourself.

Most important features supported by this amazing instance I find being:

• Upload using curl

$ curl --upload-file <FILE> http(s)://<DOMAIN>

• Inline dowload, please pay attention to the inline keyword used when constructing the link. Usually used for PDF/TXT files.

http(s)://<DOMAIN>/inline/<HASH>/<FILE>

• Direct download link, via the get keyword when constructing the download link

http(s)://<DOMAIN>/get/<HASH>/<FILE>

• Setting the maximum number of downloads, after which the file and link will be discarded is achieved by setting the following HTTP header:

$ curl -H "Max-Downloads: 1"

• Setting the maximum number of days, after which the file and link will be discarded is achieved in a similar fashion, with a different HTTP header:

$ curl -H "Max-Days: 5"

Below you can find a list with alternative websites which have been set-up using the same GitHub script provided earlier:

Location: Netherlands files.kliksafe.nl

Location: United Kingdom wget.co.il

Location: United States of America get.ludomatic.fr

Location: United States of America this-is-my.life

Location: United States of America transfersh.com

Location: Vietnam f.zamba.vn

If you ever tried to either rename or delete a replicated SQL Server RDS database, you would have noticed AWS does not allow us to perform the tasks.

The error we get when trying to rename a database is:

The fix is running a Stored Procedure which AWS gives us access to. The SQL to execute database rename is:

EXEC rdsadmin.dbo.rds_modify_db_name N'XYZ', N'NEW_XYZ'
GO

A similar error is thrown when we try to drop a database:

The issue we encounter this time is that using RDS we do not have access to enable or disable mirroring for a specific database, in a Multi-AZ RDS deployment all databases are always synchronised.

Luckily AWS puts at our disposal another Stored Procedure which will allow us to perform the deletion task.

EXECUTE msdb.dbo.rds_drop_database  N'XYZ'
GO

An error while trying to drop a database will not be seen if the database has not yet been fully replicated.

If you even wondered what is the palette AWS is using in the official diagrams and presentations, below you will find my first attempt of publishing an unofficial color pallete. Unfortunatelly I could not find an official one, if you ever find one please do let me know.

Both the dark and the light palettes are using 4 Background Tones with 2 Foreground Tones each, complemented by 8 Accent Colors. Pretty simple but with a consistent and fascinating effect.

First things first, the dark background palette:

And probably the most used one, the light background palette:

I added the RGB values as well if you ever want to recreate it in OmniGraffle or Visio for you own needs. This is Generic RGB.

I do not yet know the reasons why these specific colors where chosen; I do have the feeling they started with Red 700 as a base Monotone color and worked from there, but this is just a feeling for now.

PS: Please do not ask for an Azure one because I already looked into it and everything is just a mesmerising rainbow there for now.

If you ever tried to delete a Lambda@Edge function, you probably noticed that if the function would have been previously deployed to AWS edge locations, you would encounter an error and would not be able to delete it. Which is pretty frustrating, right?

You would get an error similar to:

To de able to delete the function, follow the steps below:

1. For every version of the deployed function, delete the triggers of that specific function.
2. Wait several hours until AWS will automatically delete all deployed replicas of that specific function.
3. Once all replicas are automatically deleted, try again to delete the Lambda function. You should succeed.

This feature became publically available in March 2018. Before, it was completly impossible to get rid of Lambda@Edge functions, even after the Cloudfront triggers would have been removed.

I hope you found this post informative.

A typical setup for the Cloudfront CDN distribution would be to configure an S3 bucket as a public website and configure the S3 pucket as the distribution origin for Cloudfront.

The side effect of such a configuration is that your website can now be accessed both using the Cloudfront domain name (www.example.com) or using the public website generated by AWS for the bucket on which website hosting is enabled (http://BUCKET-NAME.s3-website-us-east-1.amazonaws.com/).

AWS offers the posibility for Cloudfront to serve a website stored in a private S3 bucket, as long as access to read the files from the specific bucket is given.

Please follow the steps below to accomplish this configuration.

S3 recommended configuration

In S3, it is recommended to Disable Static website hosting and Block all public access into the private bucket.

Disable static website hosting

In S3, select the bucket where we are hosting the static file which will be server by Cloudfront. Make sure at the end, Access field mentions “Bucket and objects not public”.

Once you selected the bucket, click on bucket properties.

Inside the properties tab, make sure Static website hosting is disabled. Edit the settings and disabled static website hosting if needed.

Save settings to make sure static website hosting is disabled.

Block all public access

To block all public access to the private bucket, select Permissions tab.

In the Permissions tab, click on Block public access tab.

Set settings as needed and save the configuration.

Not that the S3 configuration is done, let’s move to the Cloudfront configuration.

First we will need to create an Origin access identity. This will be done under main Cloudfront settings, under the Security settings.

Click on Create Origin Access Identity:

Give it a name and save the newly create OAI.

At the time of writting AWS had a limit of 100 different Origin Access Identities for Cloudfront, but because it can be reused between multiple distributions, in reality a single identity is all we might need.

Now that the new Origin Access Identity is created, it needs to be assigned to the Cloudfront distribution which requires access into the private S3 bucket. To do that, select the Cloudfront distribution:

Under the Origins and Origin Groups tab, select the distribution we want to edit and click Edit.

If restrict Bucket Access setting is not present, make sure you empty the Origin Domain Name field and choose a new bucket from the list, even if it is the same bucket as before. Select Restrict Bucket Access, use the existing Identity which we created earlier, allow Cloudfront to Update Bucket Policy and save.

Cloudfront should create a bucket policy similar to the one below on your behalf and update the bucket settings.

{
    "Version": "2008-10-17",
    "Id": "PolicyForCloudFrontPrivateContent",
    "Statement": [
        {
            "Sid": "1",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity <ID>"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::<BUCKET>/*"
        }
    ]
}

I hope you enjoyed this short tutorial and do let me know in the comments if you ever broke a production website by implementing this security measure.

I am presenting in this post a CCNA level problem, which I hope most of you will not have any issues solving:

Given a Switch with the following configuration and a Server connected to port Gi0/1 of the Switch, what can be done so that a ping from the Server (which is configured with an IP address of 192.168.0.100/24) to the Vlan101 interface on the Switch can be successful, taking into account the following restrictions:

• the Server cannot be moved to port Gi0/0;
• changing the configuration of the Switch is not allowed;
• we are not allowed to add any additional active devices like other switches and/or routers.

...
!
interface GigabitEthernet0/0
 switchport access vlan 101
 switchport mode access
 negotiation auto
!
interface GigabitEthernet0/1
 switchport access vlan 102
 switchport mode access
 negotiation auto
!
interface GigabitEthernet0/2
 switchport access vlan 102
 switchport mode access
 negotiation auto
!
...
!
interface Vlan101
 ip address 192.168.0.1 255.255.255.0
!
...

It looks obvious to most of us that the server is physically connected to the wrong port, or the VLAN configuration for port Gi0/1 is wrong.

Still, there are scenarios where this is the right setup, and a troubleshooting decision without consulting the architecture diagram and the intended traffic flow can result in severe traffic flow changing consequences.

I will describe in a future post when such a design can be used and why; until then, try to figure out what can be done so that the ping can succeed.

First things first, EBS is the AWS service providing Elastic Block Storage for EC2 instances. As announced by AWS in 2017, it has an SLA of at least 99.99%, which means that probably will fail at a rate of 1 in every 10.000+ EBS volumes per year. It can also be backed up “on-the-fly” using the snapshot feature which will create an EBS snapshot.

But before going any further, I want to explain two important concepts which are used in architecture when talking about backup and recovery strategies: Recovery Point Objective and Recovery Time Objective.

RPO means how old the data can be, once the system has recovered.

RTO means how long will it take for the service to be back up after a failure.

Recovery Point Objective can be achieved ONLY when:

(RTO + Backup Frequency) < RPO

In a typical production scenario, RTO is provided by the Operational teams based on what they feel comfortable with. It can be affected by the types of shifts they have, how is 24/7 support handled, internal procedures, etc.

Now, coming back to the AWS EBS concept, we notice that if a RAID0 configuration is used, on-the-fly snapshots of EBS volumes become useless, because data on the volumes will not be aligned and the RAID will not be able to recover from multiple non-aligned volumes. To be able to make snapshots of a RAID0 configuration, the applications requiring write access to the disk should be stopped, all data flushed to disk, and only then the snapshots should be taken.

Hard rules for using RAID0 (stripped mode):

1. Use RAID0 when RPO is undefined because you will have to disable volume snapshots. Or use some other more complex backup mechanism.
2. Use RAID0 when you want to achieve performance higher than what AWS can provide. Basically, if you need more than 32.000 IOPS or 16TB per volume. Nitro based instances are capable of 64.000 IOPS.

Hard rules for using RAID1 (mirrored mode):

1. Use RAID1 if your SLA has to be higher than 99.99% which is the one AWS offers.
2. Having multiple EBS volumes in the same Availability Zone has no guarantee that only a maximum of one EBS volume will fail at a time. AWS does not permit yet to attach an EBS volume across availability zones.

What about RAID10?

RAID10 will have a mix of constraints from both RAID0 and RAID1. Volume snapshots become useless; if RPO is a requirement, another mechanism for backups will need to be created. It will not be the cheapest option.

Volumes using XFS as the journaling file system have the advantage of xfs_freeze which basically will freeze all access to a mounted volume. Used in combination with EBS snapshots could be used to achieve stripped RAID levels where the volumes will not be corrupted in case of a recovery. Again, the application will have to be tolerant to a temporary freeze of the storage access.

What about other RAID configurations like RAID 5 or RAID 6?

Amazon does not recommend these variations as the usable IOPS of the created volume will drop by 20-30% performance wise. This is because some of the IOPS are used for parity checks. Cost becomes prohibitive, a better ROI can be achieved with off the shelf EBS volumes or a combination of RAID0 and/or RAID1 volumes.

Below you can find 35 behavioural questions I collated to help me during my search for a new job. If you will be prepared to answer each and one of them, most probably slight variations of the questions will not create you a problem.

1. Tell me about a time you were not able to meet a time commitment. What prevented you from meeting it? What was the outcome and what did you learn from it?

2. Describe a long-term project that you managed. How did you keep everyone moving along in a timely manner?

3. Give me an example of a time when you set a goal and were not able to meet or achieve it.

4. Tell me about a time you had to quickly adjust your work priorities to meet changing demands.

5. Give me an example when you had to push back to HQ or challenged a decision.

6. Tell me about the toughest decision you’ve had to make in the past six months.

7. Tell me about a decision that you regret.

8. What did you do when you needed to motivate a group of individuals.

9. Tell me about a time you stepped up into a leadership role.

10. Do you collaborate well?

11. Describe a situation when you negotiated with others in your organisation to reach an agreement.

12. We’ve all had to work with people that don’t like us. How well do you manage difficult colleagues and customers?

13. We all make mistakes we wish we could take back. Tell me about a time you wish you’d handled a situation differently with a colleague.

14. Tell me about the last time you had to apologise to someone.

15. Give me an example of a time you faced a conflict while working on a team. How did you handle that?

16. Tell me about a time when you received negative feedback from your manager. How did you respond?

17. Tell me about a time when you missed an obvious solution to a problem.

18. Tell me about a time when you faced a problem that had multiple possible solutions.

19. Tell me about a time when you came up with a new approach to a problem.

20. Describe a time when you anticipated potential problems and developed preventive measures.

21. Describe a situation in which you found a creative way to overcome an obstacle.

22. Have you ever leveraged data to develop a strategy? Describe the context in which it happened.

23. Tell me about a time when you were 75% through a project, and you had to pivot strategy.

24. Tell me about a time when you had to choose between technologies for a project.

25. Tell me about a time you had to deal with ambiguity.

26. What’s the most innovative new idea that you have implemented?

27. Describe a time when you sacrificed short term goals for long term success.

28. Provide an example of when you personally demonstrated ownership.

29. What’s your greatest strength?

30. What’s your biggest weakness?

31. We all deal with difficult customers from time to time. Tell me about a challenging client-facing situation and how you handled it.

32. Is the customer important to you? Why? How do you show customer obsession?

33. Tell me about a time you recovered from a difficult situation.

34. Tell me about a time you failed and what you learned from it.

35. Why us?

I wish you good luck with your job hunting.