Monitoring AWS Egress Traffic with EC2 NAT and Suricata
Building a cost-efficient open-source egress visibility layer on AWS.
SuricataAWSDevOpsAudit
Writing & analysis
The reasoning behind the systems.
Longer-form writing about operational trade-offs, lessons from implementation, and the decisions that make systems easier to trust.
Filter by category
Read on Medium →
AWS EC2 NAT Instance: Cut NAT Gateway Costs for Small Environments
A practical guide to building a self-managed NAT instance with Amazon Linux 2023, iptables, and AWS Graviton for private subnet internet access.
AWSCloud SecurityAws Nat GatewayAws Cost Optimization
Teleport Alternative? Meet BAMF — An Open Source Jump Host for SSH, Databases, and Compliance
Centralized access. Identity-first control. Audit visibility without giving up self-hosting.
DevOpsOpen SourceCloud SecurityCompliance
I Got Tired of Rebuilding DAST in Every Repo
So I built a reusable GitHub Actions workflow for ZAP, Nuclei, and OPA.
DevOpsApplication SecurityGithub ActionsCloud Security
How I Built Keycloak Audit Logging That Actually Works
Making identity actions explainable by design.
DevOpsSecurityComplianceOpen Source
Kviklet: The Database Access Control Platform That Actually Makes Sense
Stop treating production database access like it’s 2010.
DatabaseSecurityZero TrustCompliance