System & Network Admin

Microservices often communicate with each other to fulfill complex business operations, creating security and scaling challenges. Mutual Transport Layer Security (mTLS) can help. Here's how to get started.

We have our services and main application all in Kubernetes, but part of our system offers workers to run workloads on. This used to be all managed directly in Kubernetes, but we want to be able to run on “remote” machines too. So the idea of orchestrating through Nomad came up. We have a POC running in 2 VM instances with a server on each. But I want to be able to scale up servers as needed easily and just keep our infra in Kubernetes if possible. I did find the nomad-on-kubernetes repository...

How to self host your own netboot.xyz in your environment

Understanding of Docker and Kubernetes networking starts with the basics - learn how to create and interconnect network namespaces using standard Linux tools.

How I organize and manage my system and user configs with NixOS and homemanager

An open-source, cross-platform terminal for seamless workflows

An even easier way to install Nix on macOS—and trustworthy and ripe for integration to boot.

Not long ago, when I was building melt, I learned something interesting: if you restore a private key from its seed, and marshal it back to the OpenSSH Private Key format, you’ll always get a different block in the middle. Why? That lead to an investigation of how the private key format works. I didn’t find many good references out there, except OpenSSH’s source code. Let’s start from there, shall we?

Boost subscriber performance by up to 25% for less than 1% of your overall 5G network investment.

Bash knows no exceptions. Exception handling like in other programming languages is not an option. But, at least, we have exit codes of…

The timedatectl command in Linux is extremely useful for configuring date, time, time zones, and more on your Linux PC.

This O’Reilly e-book explains how to build Kubernetes Operators using SDK and the Operator Framework. Learn how Operators are used to automate the app life-cycle.

Let's explore how to implement resilient APIs efficiently with a focus on fallback strategies using the APISIX API Gateway.

The pganalyze Indexing Engine simulates hundreds of possible combinations to recommend missing Postgres indexes using its 'What if?' analysis.

netboot.xyz enables you to PXE boot many Operating System installers and utilities from a simple to use menu powered by the iPXE project.

Learn why running containers as root is bad and how to fix it in Kubernetes: non-privileged users, Security Context, and Linux capabilities.

I have a cell modem connected to my server that I want to use as a means to get notification emails out when the landline dies. To nicely separate normal network access and this exceptional cell m...

Given systemd is ubiquitous with modern day GNU/Linux it only makes sense that it be able to do just about everything under the sun; which strictly adheres to the UNIX philosophy 😂. While the move to systemd has not always been a popular one, I too once hated it, it

Port knocking is like a secret handshake or magic word between client and server. It can be used in various ways, but most commonly as a security feature to deny all contact to a specific service - li

The use of ligatures while typing code has been a game-changer. How can we get the styling of cursive fonts and the functionality of ligatures in VS Code