More sections in DevOps

sreanddevops.md

@@ -67,3 +67,122 @@
 * [Docker](https://docs.docker.com/)
 * [Kubernetes](https://github.com/kubernetes/kubernetes)
 * [Vagrant](https://www.vagrantup.com/)
+
+## Filesystems
+
+* **[mhddfs](https://romanrm.net/mhddfs)**: join several filesystems together to
+  form a single larger one.
+* **[sshfs](https://github.com/libfuse/sshfs)**: allows you to mount a remote
+  filesystem using SFTP. Most SSH servers support and enable this SFTP access
+  by default, so SSHFS is very simple to use - there's nothing to do on the
+  server-side.
+* **[squashfs](http://squashfs.sourceforge.net/)**: Create and mount compressed
+  filesystem images.
+* **[xdiskusage](http://xdiskusage.sourceforge.net/)**: Visually represent
+  disk usage in and below a directory.
+* **[rsync](https://rsync.samba.org/)**: Provides fast, reliable, configurable
+  incremental file transfer on local disk or over the network. Archive,
+  mirror, etc.
+
+
+## Linting
+
+* **[httpolice](https://github.com/vfaronov/httpolice)**: a validator for HTTP
+  requests and responses. It can spot bad header syntax, inappropriate status
+  codes, and other interoperability problems in your HTTP server or client.
+* **[shellcheck](http://www.shellcheck.net/)**: a tool that gives warnings and
+  suggestions for bash/sh shell scripts.
+
+
+## Networking
+
+* **[mtr](https://www.bitwizard.nl/mtr/)**: My TraceRoute. combines the
+  functionality of the 'traceroute' and 'ping' programs in a single network
+  diagnostic tool.
+* **[lft](https://linux.die.net/man/8/lft)**: display the route packets take
+  to a network host/socket using one of several layer-4 protocols and
+  methods. Basically traceroute for TCP, UDP and ICMP.
+* **[netcat](https://en.wikipedia.org/wiki/Netcat)**: a computer networking
+  utility for reading from and writing to network connections using TCP or
+  UDP. Replacement for telnet. Can also act as a server.
+* **[sshuttle](https://github.com/apenwarr/sshuttle)**: Sshutle is VPN over
+  SSH without requiring a remote VPN server or admin rights. Instead, it
+  builds up an ssh session and than locally forwards traffic over it by
+  creating local PREROUTING firewall rules.
+* **[stunnel](https://www.stunnel.org/)**: a proxy designed to add TLS
+  encryption functionality to existing clients and servers without any changes
+  in the programs' code.
+* **[tcptraceroute](https://linux.die.net/man/1/tcptraceroute)**: A traceroute
+  implementation using TCP packets
+* **[wavemon](https://github.com/uoaerg/wavemon)**: an ncurses-based
+  monitoring application for wireless network devices.
+* **[rinetd](https://www.boutell.com/rinetd/)**: Redirects TCP connections
+  from one IP address and port to another.
+* **[dig](https://mediatemple.net/community/products/dv/204644130/understanding-the-dig-command)**:
+  The multitool for DNS enquiries.
+* **[ipcalc](http://jodies.de/ipcalc)**: IP network calculator. Available as
+  online tool as well as a downloadable package. (Ubuntu users: `apt install
+  ipcalc`).
+* **[netalyzr](http://netalyzr.icsi.berkeley.edu/)**: Commandline tool that
+  runs various network related tests and generates a report for potential
+  problems. (careful: sends the results to Berkeley for research purposes).
+* **[mitmproxy](https://mitmproxy.org/)**: An interactive console program that
+  allows HTTP traffic flows to be intercepted, inspected, modified and
+  replayed.
+* **[iftop](http://www.ex-parrot.com/pdw/iftop/)**: iftop does for network
+  usage what top(1) does for CPU usage. It listens to network traffic on a
+  named interface and displays a table of current bandwidth usage by pairs of
+  hosts. Handy for answering the question "why is our ADSL link so slow?".
+* **[iptraf](http://iptraf.seul.org/)**: IPTraf is a console-based network
+  statistics utility for Linux. It gathers a variety of figures such as TCP
+  connection packet and byte counts, interface statistics and activity
+  indicators, TCP/UDP traffic breakdowns, and LAN station packet and byte
+  counts.
+
+
+## Monitoring
+
+* **[monit](https://mmonit.com/monit/)**: a small utility for managing and
+  monitoring Unix systems. Monit conducts automatic maintenance and repair and
+  can execute meaningful causal actions in error situations.
+* **[monitorix](http://www.monitorix.org)**: Lightweight monitoring tool that
+  collects and displays many system usage graphs through a web interface.
+* **[iotop](http://guichaz.free.fr/iotop/)**: Show disk and swap I/O per
+  process.
+* **[logtail](https://www.fourmilab.ch/webtools/logtail/)**: Watch multiple
+  log files on multiple machines.
+* **[lnav](http://lnav.org/)**: An advanced log file viewer for the
+  small-scale. Watch and analyze your log files from a terminal. No server. No
+  setup. Still featureful.
+* **[sentry](https://sentry.io/welcome/)**: Open-source error tracking that
+  helps developers monitor and fix crashes in real time.
+* **[ts](https://joeyh.name/code/moreutils/)**: Add timestamps to piped output
+  (stdout). E.g. `rsync x y | ts '[%Y-%m-%d %H:%M:%S]'`.
+
+
+## Security
+
+* **[fail2ban](https://www.fail2ban.org/wiki/index.php/Main_Page)**: Fail2ban
+  scans log files and bans IPs that show malicious signs. Easily protects your
+  SSH ports against attacks.
+* **[ferm](http://ferm.foo-projects.org/)**:  a tool to maintain complex
+  firewalls, without having the trouble to rewrite the complex rules over and
+  over again.
+* **[testssl](https://testssl.sh/)**: checks a server's service on any port
+  for the support of TLS/SSL ciphers, protocols as well as recent
+  cryptographic flaws and more.
+* **[pwgen](https://github.com/jbernard/pwgen)**: Generate pronouncable and
+  easy to type passwords.
+* **[keystore explorer](http://keystore-explorer.org/)**: Java GUI for
+  managing Java Key stores (SSL certificate databases). Also lets you convert
+  all kinds of certificate formats.
+* **[qualys ssl server test](https://www.ssllabs.com/ssltest/)**: Online tool
+  for deep analysis of the configuration of any SSL web server on the public
+  Internet.
+* **[mozilla ssl configuration
+  generator](https://mozilla.github.io/server-side-tls/ssl-config-generator/)**:
+  Generate secure SSL configurations for the most common browsers.
+* **[mozilla observatory](https://observatory.mozilla.org/)**: Scan hosts for
+  HTTPS, TLS and SSH to see if they are configured safely and securely. Warns
+  about missing and improperly configured Content Security Policies for
+  websites.