Tutorials
High Availability and Split-Brain Runbook with Redis Sentinel
A field-ready runbook for operationally managing quorum, failover, and split-brain risk in a Redis Sentinel-based HA setup.
Tutorials
280 posts
Step-by-step guides, practical examples and hands-on tutorials.
Tutorials
Operational Runbook for JWKS Key Rotation
A runbook to triage the 401 wave (kid mismatch/JWKS cache) that occurs during JWT key rotation, and to set up safe overlap/caching strategy.
Tutorials
Linux Conntrack Capacity Planning and Alerting Runbook
A practical guide for generating signals before the nf_conntrack table fills up, applying safe sysctl tuning, and recovering in a controlled way during an…
Tutorials
Enterprise NTP Architecture with Chrony, and Drift Alerting
Chrony settings, firewall recommendations, and drift/loss alarms to design a hierarchical and secure time synchronization.
Tutorials
Linux TCP Backlog and SYN Flood Resilience Runbook
A runbook to triage the connect timeout crisis when the SYN backlog/accept queue fills up, apply rapid mitigation, and design lasting resilience.
Tutorials
Sensitive-Data Masking Pipeline for Logs with Vector and VRL
A practical Vector and VRL based approach for cleaning sensitive fields out of a centralised log stream before they reach the destination.
Tutorials
systemd-Based Service Containerisation with Podman Quadlet
A practical way to manage server services with systemd and Podman Quadlet, free from the Docker daemon dependency.
Tutorials
An SBOM-Based Image Admission Gate with Syft and Grype
A practical guide to admitting container images not just by a CVE list, but by component inventory and policy threshold.
Tutorials
Service-Based Linux Hardening with AppArmor
An AppArmor guide for securing server services through process-level constraints rather than generic hardening.
Tutorials
Continuous Vulnerability Validation on Internal Assets with Nuclei
A practical Nuclei approach for scanning internal network services with low noise and tying validated findings to your operations workflow.
Tutorials
Designing an Enterprise Management Network Overlay with Headscale
A Headscale-based management network overlay guide for providing controlled access to scattered servers and management endpoints.
Tutorials
Tail Sampling Design in the OpenTelemetry Collector
A guide that explains how to set up tail sampling to lower cost on high-volume trace data while preserving the critical flows.
Tutorials
Short-Lived Certificate Automation for Internal Services with step-ca
A guide that explains a step-ca based short-lived TLS certificate generation flow for cutting long-lived certificate burden between internal services.
Tutorials
Multi-Point Service Health Monitoring with Blackbox Exporter
An installation guide that pushes a real reachability signal into Prometheus by running HTTP, TCP, and TLS checks from multiple network locations.
Tutorials
A Telemetry Filtering Layer with the OpenTelemetry Collector
A guide describing how to set up filtering and routing on the OpenTelemetry Collector to reduce unnecessary volume in metric, log, and trace flows.
Tutorials
A Guide to Container Supply Chain Signing with Cosign
A practical and enterprise-friendly setup guide for signing container images with Cosign and verifying them in the delivery pipeline.
Tutorials
An Egress Traffic Policy Layer with nftables
A guide describing how to set up an nftables-based egress policy layer to control which destinations servers can reach in the outside world.
Tutorials
A Guide to Tenant-Based State Separation with OpenTofu
A practical guide to splitting OpenTofu state in order to preserve tenant, environment, and ownership boundaries in enterprise infrastructure.
Tutorials
Building a Link Latency Baseline with SmokePing
A SmokePing guide for making latency and jitter behaviour visible across branch, data center, and cloud connections.
Tutorials
Reliable Remote Log Transport with Rsyslog and RELP
An rsyslog and RELP-based setup that keeps critical logs intact through TCP drops as they ship to a central system.
Tutorials
Publishing Services on Bare Metal Kubernetes with MetalLB
A clear design framework based on MetalLB for publishing services on bare metal Kubernetes clusters without a cloud load balancer.
Tutorials
Policy-Based Routing and Backup Link Design with Netplan
Set up a policy-based routing layout on Linux servers with Netplan that separates primary and secondary uplinks based on source network.
Tutorials
Just-in-Time Access to the Management Network with WireGuard
A practical WireGuard-based approach to building short-lived, auditable management access instead of permanent VPN accounts.
Tutorials
Internal API Authorization Chain with Envoy ext_authz
A secure authorization pipeline you can build with the Envoy ext_authz filter to separate identity, policy, and decision logging on internal service traffic.