Tutorials
Regional DNS Cache and Forwarder Separation with Unbound
A clean guide for separating resolution traffic across enterprise segments by configuring cache, forwarder, and access control with Unbound.
Tutorials
280 posts
Step-by-step guides, practical examples and hands-on tutorials.
Tutorials
East-West Traffic Profiling with Suricata: A Practical Guide
A low-friction profiling approach with Suricata to make service-to-service traffic visible inside the data center.
Tutorials
Tiered Log Retention with Grafana Loki
A cost-focused retention guide for designing hot, warm, and archive log tiers on Loki.
Tutorials
REST API Design Principles
Practical rules for sustainable REST API design in production — from resource modelling to idempotency, pagination, and the error contract.
Tutorials
Designing a Route Reflector Lab with Bird 2
Building a Bird 2-based route reflector laboratory to safely experiment with internal BGP topologies.
Tutorials
Passive Health Checks for Internal Services with HAProxy
An HAProxy approach to catching internal service failures from real request flow without adding active probe traffic.
Tutorials
VRRP Failover for the Management Plane with Keepalived
A Keepalived-based VRRP failover approach for reducing single-VIP dependency in internal management services.
Tutorials
BGP Failover Lab Guide with FRRouting
Steps for validating BGP failover behavior in a lab for servers or edge environments using dual uplinks.
Tutorials
PostgreSQL Performance Optimization
A guide to speeding up PostgreSQL in production by measuring slow queries, finding root causes with EXPLAIN, designing the right indexes, and maintaining…
Tutorials
Network Flow Observability with eBPF and SLO Correlation
An approach to monitoring network flows at the kernel level and correlating them with service latency and error budget signals.
Tutorials
Monitoring Time Drift on Servers with Chrony
A Chrony-based guide to making clock drift visible across distributed Linux servers and reducing operational risk.
Tutorials
Long-Term Metric Retention with Grafana Mimir
A practical guide to designing long-term metric retention in multi-tenant environments without hitting the Prometheus bottleneck.
Tutorials
Protecting Management APIs with mTLS on Nginx
A simple and auditable mTLS setup on Nginx for protecting management APIs with client certificates.
Tutorials
A Centralised Log Collection Pipeline with Vector
A practical Vector-based setup approach for collecting and routing application, syslog, and infrastructure logs through a single stream.
Tutorials
IPAM and Inventory Automation with NetBox
A NetBox approach for moving the network address plan and data center inventory out of ticket spreadsheets and into an automation-friendly model.
Tutorials
CI/CD Pipeline Design and Best Practices
A guide to designing the CI/CD pipeline as build-test-gate-deploy for fast feedback, safe releases, and low-risk deploys.
Tutorials
Agent Consolidation with Grafana Alloy
A Grafana Alloy based approach for unifying the chaos of node exporter, log agent, and telemetry collector into a single pipeline.
Tutorials
mTLS-Based Service Identity Verification with Nginx
A practical Nginx-based approach to verifying service identity through mutual TLS for internal service traffic.
Tutorials
An OPA Pipeline for Terraform Plan Policies
A practical guide to gating infrastructure changes through policy by inspecting Terraform plan output with OPA.
Tutorials
A Server Hardening Baseline with Ansible
A guide to making your Linux server security baseline repeatable and auditable with Ansible.
Tutorials
Privileged Access with Short-Lived Certificates
A guide to managing privileged access safely by using short-lived certificates instead of permanent SSH keys.
Tutorials
Effective Version Control with Git and GitHub
A field guide to Git/GitHub practices — branch strategy, PR review discipline, clean commit history, and release flow.
Tutorials
Runtime Security Observation with Falco
A Falco-based setup guide for surfacing suspicious runtime behavior across Linux and Kubernetes environments.
Tutorials
Gradually Tightening Kubernetes Network Policies with Cilium
A guide to moving Kubernetes network policy from observability into enforced control without breaking production.