The DevOps section collects hands-on experience from the Sudo infrastructure team running hundreds of PHP/Laravel websites: the three-tier Cloud VPS model, the move to Kubernetes and CI/CD, real incidents and how they ...
Sudo has finished upgrading Node.js to the latest security patches across all of its systems, fixing the series of vulnerabilities that the Node.js project disclosed in its emergency security release...
Dear Customers and Partners,On October 21, 2026, the PHP development team disclosed 02 critical security vulnerabilities. Both allow an attacker to execute code remotely (RCE) through a website and ta...
If we had to fit every lesson from the three series (the three-tier Cloud VPS, Kubernetes for Website AI on Linode, and the operational incidents) onto a single page, we would choose an infrastructure...
A very common architecture as a system grows: the central application and satellite websites sit on the same private network, yet call each other's APIs through public domains, which means going out t...
This guide analyzes two typical incidents on two different infrastructures. On Cloud VPS, an internal SEO crawl made an e-commerce website return a flood of 500 errors, which in turn filled the memory...
A MySQL machine outside the Website AI Kubernetes cluster (a VPS on Linode) stopped responding. Prometheus recorded the exact moment, up went from 1 to 0, but no alert of any kind was sent, because Pr...
After leaving ingress-nginx, the biggest Gateway API problem on a cluster with many websites is certificates: when many sites write to one Gateway, they overwrite each other. NGINX Gateway Fabric with...
This is the final article in the Cloud VPS series. Having walked through each tier, balancer, minion and database, along with the automation and defense layers, it is time for an honest look back: wha...
Laravel Octane keeps the application resident in RAM, so a site with a memory leak keeps growing until the kernel has to step in. If every Octane site on a minion runs under supervisor, each time this...
There is a kind of operational problem that is very hard to see: it runs silently, does not take down any website, but burns resources every day and buries the real signals. This guide covers two typi...
The article on fail2ban and limit_req already limits dynamic requests per IP. That works well against a single aggressive client, but it is helpless against a different kind of traffic: crawlers that...
When a MySQL machine serving a Kubernetes cluster becomes too small for the amount of data it carries, the sensible plan is consolidating MySQL: retire that machine and move the websites using it to t...
The ingress-nginx project has been retired by Kubernetes and no longer ships security patches. The controller still runs, but any vulnerability found from now on will not be fixed, so every cluster us...
All articles are displayed
