A lightweight engineering notebook. Small experiments, command references, and hands-on notes from the homelab.
Runtime security monitoring with Falco on a production Kubernetes cluster, including custom rules and Falcosidekick integration.
Evaluating Cilium as a CNI replacement with eBPF-based network policies, Hubble observability, and performance benchmarks.
Building a peer-to-peer WireGuard mesh network for secure remote access to development infrastructure.
Deploying CrowdSec for collaborative intrusion detection with bouncer integration on Nginx and SSH.
Comparing K3s vs K8s resource consumption, startup time, and workload performance on constrained hardware.
Exploring Docker bridge, overlay, macvlan, and host networking modes with practical use cases and performance implications.
Sysctl and kernel parameter optimization for high-throughput network services and database workloads.
Tran Ngoc Minh Duc