They need to know who is the real owner of each IP for tracing purposes.

snapshot/restore doesn't allow applying new mappings.

Maybe the first step to avoid issues is to enforce SSL which is easy on any webserver before going HSTS.

Is there any downside, when using SSL, in enabling perfect forward secrecy?

Make sure you're using an SSL library that support ECDHE cipher suites... the non EC suites are very slow.

Agree on this, and also most of the production apps don't require the same modules.

So, in case you didn't notice. This can be a way to let others take care of notifying you when cron's fail so you can focus on more productive tasks.

Yet another project that will end up at the bottom of the lake like all other digital identity claiming sites.

3scale.net in Barcelona, Spain is looking for Full time Operations Engineers.

As an Operations engineer at 3scale you will be working to improve the reliability and performance of our services, as well as you will have the opportunity to work shoulder-to-shoulder with our engineering team in order to build the next generation products for APIs focusing on automation, availability and performance.

Responsibilities: Work with the engineering team to build, and maintain 3scale’s highly available infrastructure between AWS, and other cloud providers in USA and Europe. Write Sensu plugins, handlers, and extensions to monitor all of our stack. Write Puppet modules to automate our infrastructure. Troubleshoot issues across our stack hardware/software and application. Work with our ELK (Elasticsearch + Logstash + Kibana) cluster. Design resilient and scalable architectures. Willingness to learn and tech.

Qualifications: 1+ years of experience with AWS. (3+ for senior.) 2+ years industry experience on system administration (Linux). (5+ for senior.) 1+ years of experience on config management systems (Cfengine, Chef, Puppet, Sal Stack, Ansible). Demonstrable knowledge of TCP/IP, HTTP, DNS, web application security. Ability to prioritize tasks and work independently. Excellent communication skills. Practical knowledge of shell scripting and at least one scripting language (Ruby, Python).

Bonus points: Virtualization and containerization (Lxc, Docker, lmctfy, Xen, Vmware, Openstack) NoSQL (Redis, DynamoDB, Cassandra, Riak, MongoDB). Experience with existing open source project. Skills in ping pong, quake or guitar hero.

Contact: rhommel@3scale.net