Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

Todos os tutoriais

Browse complete directory →
databases Intermediate

Set up automated MariaDB Galera cluster backups with compression

Learn how to build a cluster-safe backup strategy for MariaDB Galera using Mariabackup, compression, systemd timers and remote storage offloading, with verification and node restore procedures.

40 min 4 distros 40 views
databases Advanced

Configure MariaDB ColumnStore for high-performance analytics workloads

Deploy and tune MariaDB ColumnStore for columnar analytics, covering single-node and multi-node cluster setup, table design, memory tuning, bulk loading with cpimport, and cluster health monitoring.

45 min 4 distros 65 views
monitoring Advanced

Implement Kibana 8 custom threat hunting dashboards for security incident response

Build production-grade Kibana 8 threat hunting dashboards with MITRE ATT&CK mapping, Lens visualizations, drilldowns, KQL detections and role-based access control for SOC teams. Includes saved objects API automation for version-controlled dashboard deployment.

90 min 4 distros 64 views
monitoring Advanced

Configure Logstash 8 security pipelines with threat intelligence enrichment

Build a production Logstash 8 pipeline that ingests firewall, IDS and syslog data, enriches events with MISP, AlienVault OTX and AbuseIPDB threat intel, and ships hardened IOC-enriched events to Elasticsearch.

75 min 4 distros 196 views
devops Advanced

Configure Ansible Vault integration with HashiCorp Vault for secrets management

Learn how to combine Ansible Vault with HashiCorp Vault using the community.hashi_vault collection, AppRole authentication, and least-privilege policies for production-grade secrets management in playbooks.

45 min 4 distros 265 views
monitoring Advanced

Implement Thanos Ruler for distributed alerting and recording rules across Prometheus clusters

Deploy Thanos Ruler to evaluate recording and alerting rules across multiple Prometheus clusters, integrate it with Alertmanager and S3-compatible storage, and run it in HA mode with deduplication.

60 min 4 distros 266 views
monitoring Advanced

Set up Thanos Query and Compactor for distributed metrics querying

Deploy Thanos Sidecar, Query, and Compactor to unify multiple Prometheus instances into a single global query view with long-term S3-backed storage. Covers deduplication, TLS, and production troubleshooting.

75 min 4 distros 250 views
monitoring Advanced

Configure Kubernetes network monitoring with Hubble and Cilium for traffic visibility

Enable Hubble on Cilium to get real-time eBPF-based flow visibility, deploy Hubble UI and Relay, and integrate flow metrics with Prometheus and Grafana for full Kubernetes network observability.

75 min 4 distros 375 views
networking Advanced

Configure HAProxy with Consul for dynamic service discovery and automatic backend updates

Build a self-updating load balancer by integrating HAProxy with Consul service discovery, consul-template, and health checks so backends register and deregister automatically without manual reloads.

75 min 4 distros 384 views
devops Advanced

Implement Istio multi-cluster canary deployments and traffic splitting

Build a primary-remote Istio multi-cluster mesh with shared trust domain, then run progressive canary rollouts using DestinationRule subsets, weighted VirtualServices and metrics-based promotion across clusters.

90 min 4 distros 453 views
security Advanced

Implement HAProxy WAF integration with ModSecurity 3 for advanced threat protection

Deploy ModSecurity 3 as a Stream Processing Offload Agent in front of HAProxy to inspect HTTP traffic with the OWASP Core Rule Set. This tutorial covers SPOA compilation, SPOE filter configuration, detection versus blocking modes, and production tuning.

75 min 4 distros 429 views
databases Advanced

Configure PostgreSQL 17 SSL encryption and certificate-based authentication

Set up a private CA, issue server and client certificates, enforce TLS 1.2+ with strong ciphers, and configure pg_hba.conf for mutual TLS client certificate authentication in PostgreSQL 17.

45 min 4 distros 463 views

Prefere não gerir isto sozinho?

Gerimos a infraestrutura de empresas que dependem do tempo de atividade. Totalmente gerida, com um contacto fixo que conhece o seu ambiente.

Tem um contacto fixo que conhece o seu ambiente

Na secretária em Roterdão 12:11 · acessível por mensagem, sem formulário de tickets