~/blog

Linux & DevOps Troubleshooting Blog

Practical guides for Linux engineers — NGINX debugging, process troubleshooting, CIS hardening, and production incident response.

Filter by topic

79 posts · page 9 of 9

November 28, 2024·10 min read

NGINX Upstream Keepalive Explained: Why Missing It Causes 502 Errors

Missing keepalive in your NGINX upstream block silently kills connections under load. Here's exactly what keepalive does, how TCP connection reuse works, and the production-ready config that stops 502s before they start.

#nginx#infrastructure#production#networking#troubleshooting
October 3, 2024·6 min read

Docker Ate My Disk: Fixing Log Rotation Before It Kills Production

How a single verbose container filled a 500GB disk in 72 hours, and the exact daemon.json config that stops it from ever happening again.

#docker#logs#infrastructure#troubleshooting
September 20, 2024·3 min read

NGINX SSL Hardening: From C Grade to A+ on SSL Labs

A step-by-step walkthrough of the NGINX TLS configuration changes that take you from a mediocre SSL rating to a perfect score — without breaking compatibility.

#nginx#ssl#security#infrastructure
August 11, 2024·7 min read

Reading Logs Like a Detective: A Field Guide to Incident Triage

The exact commands and mental models I use to go from 'something is wrong' to 'I know exactly what happened' in under 15 minutes.

#logs#debugging#incident#troubleshooting#security-ops
July 5, 2024·4 min read

Docker Networking Demystified: bridge, host, and overlay

The three Docker network modes that matter for production — what they actually do, when to use each, and the gotchas that'll bite you if you pick the wrong one.

#docker#networking#infrastructure
June 18, 2024·4 min read

Replacing iptables with nftables: A Practical Migration Guide

iptables is showing its age. nftables is the modern replacement — cleaner syntax, better performance, and already the default on most distros. Here's how to migrate.

#firewall#linux#security#networking
May 2, 2024·9 min read

strace, lsof, and ss: The Trio That Solves Every Mystery

When logs give you nothing and the debugger isn't an option, these three tools let you see exactly what a running process is doing at the system call level.

#debugging#linux#troubleshooting#production
Blog — Page 9 | Linux & DevOps Troubleshooting | damonsec.com