Zero-Downtime Application Deployments with Kamal 2 on Ubuntu
Deploy production web applications with 37signals Kamal 2 on Ubuntu 24.04, orchestrating zero-downtime container swaps and dynamic proxy routing.
App Deployment8 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Hybrid Cloud Egress Cost Optimization: Architecture Patterns for 2026
Minimize bandwidth billing traps by anchoring data egress and compute tiers on unmetered high-bandwidth VPS nodes with intelligent caching layers.
Cloud Architecture5 min read
eBPF XDP: High-Performance Packet Filtering at the Driver Layer
Filter millions of packets per second before network stack allocation using eBPF eXpress Data Path (XDP) programs on modern Linux.
Linux Networking6 min read
Securing Kubernetes Ingress with Traefik, Cert-Manager, and Let's Encrypt
Configure automated ACME TLS provisioning in Kubernetes using cert-manager CRDs, ClusterIssuers, and Traefik IngressRoute definitions.
Kubernetes6 min read
Offsite ZFS Snapshot Replication with Syncoid and SSH
Replicate ZFS datasets across Linux VPS instances with Syncoid, leveraging atomic block-level snapshots, mbuffer acceleration, and non-root SSH.
Backups & Data6 min read
Chaos Engineering with eBPF: Injecting Granular Network Faults into Production
Validate microservice resilience against packet drops, jitter, and interface flapping without invasive kernel patching or daemon restarts.
DevOps Practices8 min read
Linux Policy-Based Routing: Multi-Homing and Source Tables
Configure multiple default gateways, source-based routing rules, and isolated routing tables using iproute2 on multi-homed Linux VPS.
Linux Networking5 min read
WASM Sandboxing for Untrusted Code Execution in Autonomous AI Agents
Safeguard agentic tool environments against runaway commands and host escalation by executing generated scripts inside WebAssembly micro-sandboxes.
AI Agents6 min read
Tuning a Production-Ready Single-Node K3s Cluster on High-Speed VPS
Optimize K3s on a single node by disabling surplus controllers, tuning SQLite/etcd write intervals, and configuring system resource reservations.
Kubernetes5 min read
Production BorgBackup Workflows: Deduplication, Pruning, and Verification
Build a rock-solid backup pipeline using BorgBackup over SSH, featuring chunk-level deduplication, authenticated encryption, and automated pruning.
Backups & Data7 min read
Unattended Upgrades: Automated Maintenance Windows on Linux
Automate zero-touch security updates on Debian/Ubuntu with strict maintenance time windows, automated reboots, and email alerts.
Linux Administration8 min read
Low-Latency Model Serving with NVIDIA Triton and TensorRT-LLM on Linux
Build production-grade dynamic model pipelines that multiplex embedding, classification, and generation models across unified GPU memory pools.
AI Infrastructure7 min read