Blog

Notes on DevOps, Kubernetes, self-hosted infrastructure and consulting.
5 posts tagged altyapi · clear filter
October 16, 2026
Why Published Docker Ports Bypass Your Firewall: UFW, the DOCKER-USER Chain and the Bind Address
UFW reports that every incoming connection is denied, yet a port published by Docker can still be open to the internet. The path a packet really takes, closing...
docker guvenlik linux
Read more →
October 12, 2026
Finding Out What Actually Filled Up: inodes, Deleted but Open Files and Reserved Blocks
"Disk full" maps to at least three different conditions: blocks, inodes and space reserved for root. Same symptom, different remedy. How to measure before you d...
linux operasyon guvenilirlik
Read more →
October 8, 2026
The Real Client IP Behind a Reverse Proxy: X-Forwarded-For, Trusted Proxies and Spoofed Headers
Behind a proxy, an application only learns the client address from a header. Reading X-Forwarded-For from the right, defining trusted proxies by address, nginx,...
guvenlik backend altyapi
Read more →
September 23, 2026
Automated TLS Certificates with ACME: Validation Method, Rate Limits and State You Must Keep
Choosing between HTTP-01, DNS-01 and TLS-ALPN-01, where Let's Encrypt rate limits will catch you, the state you actually need to back up, and pitfalls like spli...
guvenlik altyapi otomasyon
Read more →
September 11, 2026
What You Gain and Lose With an Immutable Operating System
A look at the three main approaches to read-only, image-based operating systems: what they actually buy you, and the costs that only show up after adoption.
linux altyapi guvenlik
Read more →
[ ← Back to burak.sh ]