The DevOps section collects hands-on experience from the Sudo infrastructure team running hundreds of PHP/Laravel websites: the three-tier Cloud VPS model, the move to Kubernetes and CI/CD, real incidents and how they ...
An e-commerce website running Laravel Octane on a minion returns 502 because the kernel killed the site's FrankenPHP process after it ran out of RAM. One site running out of RAM is nothing unusual. Wh...
Once the operations pipelines for websites on Kubernetes are running smoothly in GitLab CI, the next question is usually not "which tool should we rewrite them in", but "how do operators run them safe...
A Website AI site on Linode's LKE cluster returns 503 on and off. There is no long outage, just pages that occasionally fail to open and then work again a moment later. kubectl shows that the site's o...
Sometimes the familiar certbot command on a balancer suddenly reports Connection Timeout for every domain. The cause is neither certbot nor nginx: international connectivity for the IP range that host...
A common situation on Website AI: an administrator cannot complete an image upload in the editor. The JPEG file is only a few MB but has a very high resolution (about 30 megapixels). Sometimes it fail...
Coraza WAF blocks individual malicious requests, but a blocked IP can keep sending thousands more, and each one still costs the balancer CPU to analyze. Scraper bots are even harder: their requests ar...
A customer's mobile app could not update user profiles or delete transactions: every PUT and DELETE request received a 403. This is a textbook WAF false positive on a balancer running Coraza WAF. Whil...
The shared security snippet on the balancer (see standardizing Nginx security with a security snippet) does a good job of blocking sensitive paths such as .env, .git and wp-login. But it never looks a...
An unpleasant situation on Cloud VPS: Grafana shows several machines at "CPU close to 100%" at the same time, or losing monitoring data entirely, including the balancer, the database machine and the m...
A balancer usually serves many websites, and each site writes its access log and error log to its own files. When a site slows down, the first questions are always: which IP is sending the most reques...
A fastcgi_cache configuration that works well on a pure content site is very easy to copy to another site. On an e-commerce site with a shopping cart, that same configuration can create two vulnerabil...
A very common misconfiguration on minions that run many sites: the config file declares fastcgi_cache_key and fastcgi_cache_valid, but has no fastcgi_cache_path and no fastcgi_cache directive. Page ca...
All articles are displayed
