Infrastructure tutorials
Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.
Browse by topic
Linux
System administration, shell scripting, package management
Hosting & Servers
Web servers, reverse proxies, SSL, domains
Security
Firewalls, hardening, encryption, access control
Performance
Caching, optimization, profiling, load testing
Databases
MySQL, PostgreSQL, Redis, backups, replication
Networking
DNS, load balancing, VPN, TCP/IP, routing
DevOps
CI/CD, Docker, Kubernetes, automation
Monitoring
Logging, alerting, metrics, observability
Most viewed
Install and configure Deno for web development with systemd and reverse proxy
hostingInstall and configure Uptime Kuma for website monitoring with SSL and email alerts
monitoringInstall and configure Caddy web server with automatic HTTPS and reverse proxy
hostingFix apt update E: Repository no longer has a Release file
linuxInstall and configure TimescaleDB with PostgreSQL for high-performance time-series data
databasesRecently published
Configure MariaDB ColumnStore for high-performance analytics workloads
databasesImplement Kibana 8 custom threat hunting dashboards for security incident response
monitoringConfigure Logstash 8 security pipelines with threat intelligence enrichment
monitoringConfigure Ansible Vault integration with HashiCorp Vault for secrets management
devopsImplement Thanos Ruler for distributed alerting and recording rules across Prometheus clusters
monitoringConfigure MariaDB ColumnStore for high-performance analytics workloads
Deploy and tune MariaDB ColumnStore for columnar analytics, covering single-node and multi-node cluster setup, table design, memory tuning, bulk loading with cpimport, and cluster health monitoring.
Implement Kibana 8 custom threat hunting dashboards for security incident response
Build production-grade Kibana 8 threat hunting dashboards with MITRE ATT&CK mapping, Lens visualizations, drilldowns, KQL detections and role-based access control for SOC teams. Includes saved objects API automation for version-controlled dashboard deployment.
Configure Logstash 8 security pipelines with threat intelligence enrichment
Build a production Logstash 8 pipeline that ingests firewall, IDS and syslog data, enriches events with MISP, AlienVault OTX and AbuseIPDB threat intel, and ships hardened IOC-enriched events to Elasticsearch.
Configure Ansible Vault integration with HashiCorp Vault for secrets management
Learn how to combine Ansible Vault with HashiCorp Vault using the community.hashi_vault collection, AppRole authentication, and least-privilege policies for production-grade secrets management in playbooks.
Implement Thanos Ruler for distributed alerting and recording rules across Prometheus clusters
Deploy Thanos Ruler to evaluate recording and alerting rules across multiple Prometheus clusters, integrate it with Alertmanager and S3-compatible storage, and run it in HA mode with deduplication.
Set up Thanos Query and Compactor for distributed metrics querying
Deploy Thanos Sidecar, Query, and Compactor to unify multiple Prometheus instances into a single global query view with long-term S3-backed storage. Covers deduplication, TLS, and production troubleshooting.
Configure Kubernetes network monitoring with Hubble and Cilium for traffic visibility
Enable Hubble on Cilium to get real-time eBPF-based flow visibility, deploy Hubble UI and Relay, and integrate flow metrics with Prometheus and Grafana for full Kubernetes network observability.
Configure HAProxy with Consul for dynamic service discovery and automatic backend updates
Build a self-updating load balancer by integrating HAProxy with Consul service discovery, consul-template, and health checks so backends register and deregister automatically without manual reloads.
Implement Istio multi-cluster canary deployments and traffic splitting
Build a primary-remote Istio multi-cluster mesh with shared trust domain, then run progressive canary rollouts using DestinationRule subsets, weighted VirtualServices and metrics-based promotion across clusters.
Implement HAProxy WAF integration with ModSecurity 3 for advanced threat protection
Deploy ModSecurity 3 as a Stream Processing Offload Agent in front of HAProxy to inspect HTTP traffic with the OWASP Core Rule Set. This tutorial covers SPOA compilation, SPOE filter configuration, detection versus blocking modes, and production tuning.
Configure PostgreSQL 17 SSL encryption and certificate-based authentication
Set up a private CA, issue server and client certificates, enforce TLS 1.2+ with strong ciphers, and configure pg_hba.conf for mutual TLS client certificate authentication in PostgreSQL 17.
Set up HAProxy SSL termination with Let's Encrypt certificates
Learn how to terminate SSL/TLS at HAProxy using Let's Encrypt certificates, redirect HTTP to HTTPS, automate renewal with deploy hooks, and harden your cipher suites for production load balancing.
不想自己管理这些吗?
我们为依赖稳定运行时间的企业管理基础设施。全托管服务,配备一位熟悉您系统架构的固定联系人。
您将拥有一位了解您整体架构的固定联系人
Rotterdam 22:58 · 一条消息即可联系我们,无需填写工单表单