All articles by Michal Hrušecký

Security Turris

SOHO router attack by APT28

Few weeks ago, one particular large scale cyber-attack hit the mainstream news everywhere. Russian cyber actor APT28 attacked SOHO routers and managed to compromise some credentials through that. The attack itself was carried in multiple phases and was quite interesting. Let’s take a look at those individual steps, what happened, how it worked and what could have been done to prevent this type of attack.

Michal Hrušecký
14.5.2026 at 9:28 Počet komentářů 0
Share on
Turris

Turris OS 7 is finally out!

It took us really long time to release Turris OS 7.0, but it is finally out now. The only change in this release is a switch to a newer OpenWrt – namely 22.03. We are not introducing any new features (although we are for the first time using “Staging Updates“). We are even sticking with iptables for now, although upstream has moved towards nftables. All that to minimize impact on our users and provide smooth update experience. That was also part of the reason why it took so long. We tested it over and over again, fixed the issues we found and started with the tests from scratch again. Sometimes we found our feature not working, sometimes we encountered some problems with state of the upstream distribution we had to help to fix. But finally we got into state where we could release it and we did exactly that.

Turris Turris OS
Michal Hrušecký
17.4.2024 at 9:00 Počet komentářů 0
Share on
DNS

SaltStack, DNS and ssh

In my last post, I showed, how we can combine SaltStack and Knot to have some basic records filled in your zone. As I was introducing the concept, I picked the most obvious and basic entries. But since we have a hammer now, everything starts to look like a nail. And there is much more that can be stored in DNS apart from IP addresses. Let’s take a look at some other examples and how to get them automatically filled in by SaltStack.

DNS orchestration SaltStack
Michal Hrušecký
31.1.2024 at 9:20 Počet komentářů 0
Share on
DNS

Managing DNS via SaltStack

Running services online without domain is hard. More services you run, more DNS entries you need to manage. More services you run, more servers you need to manage. And when you manage several servers, it’s time to use some orchestration. But what about all those domains associated with those servers and services? Can’t that be also part of the orchestration? Somehow automated? Of course it can. Let me tell you how am I handling it for my domains and servers.

DNS orchestration SaltStack
Michal Hrušecký
16.1.2024 at 14:00 Počet komentářů 0
Share on
Unclassified

Orchestration via SaltStack

This post will be about my approach to something, that is almost obsolete. It is about orchestration. Back in the old days, people used to have a real computers or virtual machines and used to install and configure software. And also maintain it for years to come. I know that nowadays, you just create a bunch of pods, each one consisting from multiple containers you downloaded from DockerHub and whenever you need to reconfigure or update something, you just throw them away. Or even the whole datacenter. But I’m old and I still maintain individual systems with multiple services running. And jokes aside, when you do that, you want to have some automation to make it easier. That is what orchestration is for – to manage multiple machines from one central point and to make sure that everything is up to date and configured consistently.

Datacenter scale by XKCD

Datacenter scale by XKCD

Blogseries orchestration SaltStack
Michal Hrušecký
9.1.2024 at 14:40 Počet komentářů 0
Share on
Michal Hrušecký