VLANs on Linux: Tagging Interfaces with ip link
Create 802.1Q VLAN interfaces on Linux with ip link and use them with bridges for isolated virtual network segments.
Linux Networking7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
499 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
ConfigMaps and Secrets in Kubernetes
Inject configuration and sensitive values into your pods with ConfigMaps and Secrets, and learn the right way to mount or reference them.
Kubernetes6 min read
JWT Explained: Claims, Signatures, and Where to Store Them
Understand JWT structure, signing algorithms, and token storage so you can avoid XSS and CSRF exposure when securing your API against attackers.
API & Automation8 min read
TRIM and Discard for Virtualized SSD Storage
How fstrim and the discard mount option keep a virtualized SSD from wearing out or reporting phantom usage, with the guest-side commands to verify.
Hardware & Performance5 min read
Windows Firewall Rules That Will Not Lock You Out
Add inbound Windows Firewall rules without locking out RDP. Scope by remote IP, confirm with a second session, then drop the wide-open defaults.
Windows8 min read
Slow Query Log and EXPLAIN for MySQL on a VPS
Enable the slow query log, read EXPLAIN without folklore, and fix the table scans that actually burn CPU on a busy production MariaDB VPS host.
Databases9 min read
Use Redis as a Session Store for a Web App
Store web sessions in Redis with short keys, SETEX TTLs, and cookie hygiene so logins survive app restarts without turning Redis into a public session dump.
Databases8 min read
journald as the Source of Truth, Not Log Files
Treat the systemd journal as the canonical log store on a VPS: persistent disk, field queries, vacuum limits, and one pipeline into Promtail or nothing.
Observability8 min read
WhiteNoise vs Nginx for Python Static Files
Decide when WhiteNoise is enough for Django static files and when nginx should serve them, so your Python app stays fast without extra moving parts.
App Deployment7 min read
Control Plane vs Data Plane for a Small SaaS
Split admin, billing, and provisioning from request serving on one VPS so a hung control action cannot stall the path your customers actually hit.
Cloud Architecture8 min read
Agent Guardrails: Allowlists, Dry-Run, Approval
Ship ops-agent guardrails that actually hold: tool allowlists, default dry-run, and a human approval file before any write hits a Linux VPS.
AI Agents8 min read
Run Docker as Non-Root with a Read-Only Rootfs
Run containers as a non-root user on a read-only root filesystem with tmpfs for scratch space, and cut a wide slice out of container escape risk.
Containers7 min read