A working wiki of what I actually run in production
Every topic here follows the same shape: the concept, the real configuration, and the project it came from. This grows one page at a time as I write it up — the dots show what's ready versus what's still a template.
Networking
2 topicsNetwork Design & Configuration
LAN/WAN architecture, routing, switching, segmentation.
ReadyLayer 3 Infra & Application Design
Routing-layer design decisions for application delivery.
TemplateInfrastructure & Systems
2 topicsInfra Design, Configuration & Implementation
End-to-end infrastructure builds — hybrid, virtualized, cloud.
TemplateSystem Design, Installation & Configuration
Linux system architecture from bare metal to production.
TemplateSecurity
2 topicsWazuh SIEM
SIEM architecture, agent deployment, rule tuning, alert automation.
ReadySecurity & Hardening
Hardening live internet-facing Linux servers to audit standard — without taking them down.
ReadyAutomation & Cloud
3 topicsTerraform
Infrastructure as code — VPC, VPN, S3, reusable modules.
ReadyAnsible
Configuration management and fleet automation.
TemplateKubernetes & Containers
Container orchestration, Docker, cluster operations.
TemplateAWS
architecture + 23 servicesAWS Architecture & Services →
A real WAF + ELB + Auto Scaling reference architecture, plus a service-by-service reference covering IAM, VPC, EC2, S3, monitoring, and the full security stack.
Overview · Ready23 · AWS Security Hardening
End-to-end hardening: identity, detection, network, data protection, WAF edge, and continuous verification.
Ready03 · VPC & more
Network isolation, IAM, load balancing, KMS, GuardDuty and 18 more services — templates ready to fill.
21 templatesCI/CD Pipeline Series
7-part build log · completeBuilding a Production CI/CD Pipeline →
Jenkins + SonarQube + Bitbucket deploying to a multi-tenant Linux host. A real build log — the commands that worked, the errors that appeared, and the decisions behind each choice.
7 parts · Ready1 · Jenkins Controller Setup
Install, harden, and configure a Jenkins LTS controller on a private network.
Ready4 · Jenkinsfile Anatomy
The declarative pipeline stage by stage — build, test, quality gate, deploy.
Ready7 · Troubleshooting
The failure modes that actually appeared in production, and their fixes.
ReadyElasticsearch Troubleshooting
6-part incident series · completeProduction Elasticsearch Incident Series →
A real end-to-end investigation on an 8-node cluster: from a recurring Zabbix flush-latency alert, through a custom diagnostic tool, to a JVM OOM outage root-caused and fixed cluster-wide with zero data loss.
6 parts · Ready2 · Automated Diagnostic Script
A version-adaptive Bash/jq tool that auto-discovers topology and generates an incident report.
Ready6 · JVM Heap OOM & Rollout
A master-node OOM crash root-caused to a missing heap setting, fixed one node at a time.
ReadyVisual Explainers
16 branded infographics · concept + breakdownLatency vs Throughput vs Bandwidth
The three network performance terms people mix up most — and why 'more bandwidth' often doesn't fix 'slow'.
NetworkingThe SIEM Pipeline
How raw events become actionable alerts — agents, manager, indexer, dashboard, and the routing stage most teams neglect.
SecurityIDS vs IPS vs SIEM vs XDR
Four security tools constantly confused — what each one actually does, and why they're layers rather than rivals.
SecurityHow a WAF Decides to Block
The journey of an HTTP request through a Web Application Firewall — and the professional way to fix a false positive.
SecurityAAA — Authentication, Authorization, Accounting
Three questions every secure system must answer: who are you, what may you do, and what did you do?
Security & GRCPublic vs Private vs Hybrid Subnets
The servers are identical — only the route table makes a subnet public, private, or hybrid.
CloudS3 Storage Classes & Lifecycle
Data has a temperature — how lifecycle policies move it from hot to cold as it ages, and the cost trade-off behind each tier.
CloudHow Auto Scaling Actually Works
The five-link chain from a CPU spike to a new healthy server — and where 'auto' scaling silently stops being automatic.
CloudTCP vs UDP
Reliable delivery or raw speed — the classic transport-layer trade-off, and why HTTP/3 flipped it.
NetworkingHow DNS Resolution Works
The five hops behind every website visit — and the real reason DNS changes 'take time to propagate'.
NetworkingNAT vs PAT vs Proxy
Three 'middlemen' with very different jobs — address translation versus speaking the protocol itself.
NetworkingFull vs Incremental vs Differential Backups
Three backup strategies — and what restore day actually looks like for each.
Data ProtectionCI vs CD vs CD
Continuous Integration, Delivery, and Deployment — three terms, and the single approval button between the last two.
CI/CDAnatomy of a Real Pipeline
Six stages from git push to production — each one a reason to say no before code ships.
CI/CDVulnerability vs Threat vs Risk
The three words security teams mix up most — explained with a house, an open window, and a burglar.
Security & GRCBare Metal vs VM vs Container
Three ways to run the same application, defined by what gets shared — hardware, OS, or kernel.
Infrastructure