A long time ago, I named a tool Cerberus after the mythical multi-headed dog that guards the gates of the Underworld, as it was to inspect client systems configurations to prevent they would enter a bad state.
Since I need a multi-headed tool later on, below are some links on multi-headed (Polycephaly – Wikipedia) creatures to give me inspiration.
Some of them are centered around war, others around hell, are dragons or monsters, and a few are guardians. Later I will try to put a classification in a table or so.
- Cerberus – Wikipedia
- Lernaean Hydra – Wikipedia
- Xiangliu – Wikipedia
- Shesha – Wikipedia
- Yamata no Orochi – Wikipedia
- Nine-headed Bird – Wikipedia: Jiutouniao
- Kuzuryū – Wikipedia
- Ladon (mythology) – Wikipedia
- Typhon – Wikipedia
- Orthrus – Wikipedia
- Geryon – Wikipedia
- Agni – Wikipedia
- Balaur – Wikipedia
- Brahma – Wikipedia
- Bune – Wikipedia
- Chimera (mythology) – Wikipedia
- Dattatreya – Wikipedia
- Gayatri – Wikipedia
- Janus – Wikipedia
- Hecate – Wikipedia
- Kartikeya – Wikipedia
- Nehebkau – Wikipedia
- Nezha – Wikipedia
- Orthrus – Wikipedia
- Scylla – Wikipedia
- Svetovid – Wikipedia
- Triglav (mythology) – Wikipedia
- Zahhak – Wikipedia
- Þrúðgelmir – Wikipedia
- Slavic dragon – Wikipedia
- Double-headed eagle – Wikipedia
- Hecatoncheires – Wikipedia
- Rat king – Wikipedia
The idea is to replace my current Apache TLS offloading (that uses letsencrypt/certbot for the certificates) with something else like an nginx one, and maybe even make the internal part TLS too (so it becomes TLS upstreaming) so these will come in useful too:
- How to use Nginx for SSL termination for any domain
- [WayBack] How to Setup Nginx with Let’s Encrypt Cert?
- [WayBack] Configuring SSL with letsencrypt certbot on NGINX reverse proxy – Guyatic
- [WayBack] Configuring containers with Proxmox on OVH Kimsufi server behind a single public IP with NAT – Guyatic
- [WayBack] tls – End-to-end encryption with a reverse proxy and an application server – Information Security Stack Exchange
- [WayBack] Nginx TCP forwarding based on hostname – Stack Overflow
- [WayBack] NGINX Docs | NGINX SSL Termination
- [WayBack] SSL/TLS Offloading, Encryption, and Certificates with NGINX
- [WayBack] NGINX Docs | SSL Termination for TCP Upstream Servers
Instead of nginx, HAproxy might be a an option too, especially as it understands TCP traffic other than http much better than nginx:
This means I should first look into nginx vs haproxy – Google Search, for instance these posts:
- [WayBack] HAProxy vs Nginx – The Case for Both – KeyCDN Support
- [WayBack] HAProxy vs nginx: Why you should NEVER use nginx for load balancing! – The HFT Guy
–jeroen