Zero-Trust Edge Gateway: Implementing Mutual TLS (mTLS) with Envoy Proxy
Establish cryptographic identity verification between services by deploying Envoy Proxy configured for strict mutual TLS (mTLS) authentication.
Proxies8 min read
NetBay journal
Proxies
21 practical Proxies articles from Netbay Engineering — written for operators running Linux and Windows VPS in India.
21 articles in this topic
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
HAProxy as a High-Throughput Layer 7 TLS Offloader and Connection Multiplexer
Handle tens of thousands of concurrent connections on minimal VPS resources with HAProxy Layer 7 TLS termination and HTTP connection pooling.
Proxies7 min read
Configuring Nginx for HTTP/3 and QUIC: Kernel UDP Buffers and TLS 1.3
Unlock sub-millisecond connection handshakes by compiling and tuning Nginx with native HTTP/3 QUIC support and optimized Linux UDP buffer pools.
Proxies6 min read
High-Performance Caddy 2 Reverse Proxy with Rate Limiting and Dynamic Upstreams
Configure Caddy 2 as a zero-maintenance reverse proxy with automatic TLS, active health checking, and IP-based rate limiting on a Linux VPS.
Proxies5 min read
Migrating to a Proxy-First Architecture Safely
Move a direct-to-internet app behind a reverse proxy in staged steps with minimal downtime, instant rollback, and smoke tests before cutover.
Proxies8 min read
Monitoring Proxy Health and Connection Queues
Watch active connections, timeouts, and upstream failures with built-in proxy metrics, and set thresholds that actually warn you before users do.
Proxies7 min read
X-Forwarded-For and Proxy Header Hygiene
Stop spoofed X-Forwarded-For and doubled forwarding headers from corrupting your logs, rate limits, and trust decisions at the proxy.
Proxies6 min read
Path-Based Routing and Rewrite Rules in Nginx
Route requests by URL prefix to separate backends and rewrite paths cleanly with Nginx, without leaking internal URLs or breaking deep links.
Proxies7 min read
Host-Based Routing: Multiple Apps on One Server
Run several domain-name apps on a single VPS by routing on the Host header with Nginx server blocks or Caddy host matchers, without any port tricks.
Proxies6 min read
Securing Public Endpoints with Proxy Access Rules
Enforce IP allowlists, rate limits, and method filters at the proxy so unwanted hostile requests are rejected before they reach your application.
Proxies7 min read
WebSockets and Streaming Through Reverse Proxies
Upgrade WebSockets and server-sent events cleanly through Nginx and HAProxy, and size buffers so long-lived streaming connections stay stable.
Proxies6 min read
Proxy Performance Knobs: Timeouts, Buffers and Limits
Tune proxy_read_timeout, upload and download buffers, upstream keepalives, and worker limits so slow transfers and bursts behave predictably.
Proxies7 min read