Notes

Working notes on infrastructure and backend engineering.

Tuning TCP congestion control for high-latency links

Comparing CUBIC and BBR behaviour on long-haul paths with intermittent packet loss, and why loss-based algorithms underperform there.

Notes on systemd unit hardening

A short checklist for restricting service privileges with ProtectSystem, PrivateTmp and capability bounding sets.

Reading nginx access logs with awk

A few one-liners for spotting traffic anomalies without pulling the logs into a separate analysis tool.