Bind Services Private and Expose Only the Edge
Listen on loopback for app, database, and Redis. Bind the public IP only at nginx so scanners, scripts, and stray clients never reach the internals.
Cloud Architecture8 min read
NetBay journal
Cloud Architecture
21 practical Cloud Architecture articles from Netbay Engineering — written for operators running Linux and Windows VPS in India.
21 articles in this topic
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Config and Feature Flags Without a SaaS Service
Ship flags as Postgres rows plus a local cache so you can dark-launch and halt features without a vendor SDK or a round trip on every request.
Cloud Architecture8 min read
Stateless App Processes Plus Stateful Disks
Keep workers disposable and put sessions, uploads, and Postgres on named disks so a restart or deploy never depends on files left in the process tree.
Cloud Architecture8 min read
Transactional Outbox Without Kafka on Postgres
Commit domain rows and an outbox event in one Postgres transaction so Redis never sees a job the database did not persist at that commit time.
Cloud Architecture8 min read
Applying Twelve-Factor Discipline on One Box
Run a twelve-factor app on a single VPS: env config, stateless processes, port bind, stdout logs, and disposability without pretending you have a fleet.
Cloud Architecture8 min read
Queue-Based Decoupling With Redis on Linux VPS
Decouple HTTP from slow work with a Redis list queue, a worker unit, and retry rules so a spike in jobs cannot stall the request path on a VPS.
Cloud Architecture8 min read
Reverse Proxy, App, and Database Failure Domains
Split proxy, app, and database into three failure domains on one VPS so a crash, a leak, or a lock does not take the whole stack down with it.
Cloud Architecture8 min read
Multi-Tenant Isolation With Separate VPS Nodes
Put each tenant on a separate VPS node so disk, network, and process blast radius stay bounded when a noisy neighbor fails or is compromised.
Cloud Architecture8 min read
Single-VPS Architecture That Still Has Layers
Treat one VPS as stacked layers — edge, app, data, and ops — so processes, disks, and bind addresses fail independently instead of as one blob.
Cloud Architecture8 min read