SystemsGolive
open-menu closeme
About
Services
Blog
github linkedin mail rss
Blog Timeline
  • Case Study - Automating Let's Encrypt Wildcard Certificates with Cloudflare DNS and Full (Strict) TLS Encryption

    calendar Jan 3, 2026 · 12 min read · TLS SSL Encryption Certificate Automation Cloudflare  ·
    Share on: twitter facebook linkedin copy
    Case Study - Automating Let's Encrypt Wildcard Certificates with Cloudflare DNS and Full (Strict) TLS Encryption

    This article demonstrates how to implement Full (Strict) SSL/TLS encryption by combining Cloudflare's managed frontend certificates with Let's Encrypt wildcard certificates on your origin server.


    Read More
  • Migrating from ANS to Cloudflare Load Balancer: Zero-Downtime DNS Cutover with Pre-Configuration Strategy

    calendar Nov 23, 2025 · 7 min read · Cloudflare Load Balancer Migration SSL TLS Certificate Management Zero Downtime  ·
    Share on: twitter facebook linkedin copy
    Migrating from ANS to Cloudflare Load Balancer: Zero-Downtime DNS Cutover with Pre-Configuration Strategy

    How we migrated our production care management platform from ANS to Cloudflare Load Balancer — eliminating manual SSL certificate management that had caused a past outage, replacing an EOL HAProxy instance, and achieving zero downtime through a dummy hostname pre-configuration strategy and a planned 45-minute DNS cutover window.


    Read More
  • HTTP/2 on Apache Behind HAProxy: Solving Health Check Failures with Dual-Port Architecture

    calendar Oct 4, 2025 · 9 min read · Infrastructure HTTP/2 Apache  ·
    Share on: twitter facebook linkedin copy
    HTTP/2 on Apache Behind HAProxy: Solving Health Check Failures with Dual-Port Architecture

    This case study demonstrates how we implemented HTTP/2 on production Apache servers with zero downtime using a blue-green deployment strategy.


    Read More
  • TLS 1.3 with Ed25519 and a Private CA: End-to-End Encrypted Client-Server Communication

    calendar Jul 10, 2025 · 11 min read · TLS SSL Encryption Certificate Ed25519  ·
    Share on: twitter facebook linkedin copy
    TLS 1.3 with Ed25519 and a Private CA: End-to-End Encrypted Client-Server Communication

    This guide demonstrates how to set up secure TLS 1.3 communication using Ed25519 elliptic curve certificates and a private Certificate Authority (CA). It covers encrypted client-server communication with modern, efficient cryptographic standards — ideal for internal systems, microservices, and zero-trust network architectures.


    Read More
  • MySQL User Profile Creation Guide

    calendar Jun 21, 2025 · 5 min read · MySQL User Creation Priviledges Role-Bases Access Profiles Best Practices  ·
    Share on: twitter facebook linkedin copy
    MySQL User Profile Creation Guide

    Learn how to set up MySQL user accounts with role-based access profiles, secure configurations, and consistent privilege management across environments.


    Read More
  • Standardised MySQL Access via SSH Tunnel for Workbench in Non-Production Environments

    calendar Jun 21, 2025 · 2 min read · MySQL Workbench SSH  ·
    Share on: twitter facebook linkedin copy
    Standardised MySQL Access via SSH Tunnel for Workbench in Non-Production Environments

    A secure and standardised approach to accessing MySQL in non-production environments using SSH tunneling, with a focus on least privilege and improved access controls.


    Read More
  • Configuration and Usage of Custom Apache 503 Error Pages for Web Application Instances

    calendar May 5, 2025 · 4 min read · Infrastructure Web Applications Apache  ·
    Share on: twitter facebook linkedin copy
    Configuration and Usage of Custom Apache 503 Error Pages for Web Application Instances

    This article outlines the implementation and usage of custom Apache 503 error pages on production Tomcat web application instances


    Read More
  • Essential Linux Network Commands: A Practical Guide

    calendar Feb 4, 2025 · 4 min read · Networking  ·
    Share on: twitter facebook linkedin copy
    Essential Linux Network Commands: A Practical Guide

    Network troubleshooting and configuration are crucial skills for Linux system administrators. This guide covers essential network commands for AlmaLinux/RHEL systems.


    Read More
  • Dealing with False Ping Alerts in LogicMonitor: Building a Fallback Ping Monitoring Script for Production VMs

    calendar Sep 10, 2024 · 6 min read · Monitoring Ping Connectivity Alert Incident  ·
    Share on: twitter facebook linkedin copy
    Dealing with False Ping Alerts in LogicMonitor: Building a Fallback Ping Monitoring Script for Production VMs

    On Friday 6th September 2024 at 21:31, we received an alert from LogicMonitor indicating one of our production web app servers (Tomcat#3) was down, with the message: "The host Tomcat#3 (i-xxxxxxx) is down". However, shortly after receiving the alert, we attempted to SSH into the VM and confirmed that the server was fully operational. But what did it go wrong?


    Read More
  • Kubernetes - Zero Downtime Deployments: Blue/Green Strategy

    calendar Sep 9, 2024 · 5 min read · Kubernetes Deployment Strategy Service Routing Environment  ·
    Share on: twitter facebook linkedin copy
    Kubernetes - Zero Downtime Deployments: Blue/Green Strategy

    In this guide, I'll demonstrate a blue-green deployment strategy in Kubernetes using Deployments and Services. The goal is to achieve zero downtime by running two sets of pods: the current version (v1.0, blue) and the new version (v2.0, green). I'll also explain how to roll back from green to blue if necessary.


    Read More
    • ««
    • «
    • 1
    • 2
    • 3
    • »
    • »»

Mickael Asghar photo

Mickael Asghar

Senior Cloud & DevOps Engineer writing about real infrastructure work: cloud migrations, CI/CD, reliability and cloud cost.
Read More

Get new posts by email

Recent Posts

  • Migrating a Regulated UK Care Management SaaS Platform to Azure: A Cutover Retrospective
  • Why Your SaaS Cloud Bill Keeps Growing; Where to Look First
  • Multi-Stage Docker Builds: Smaller, Safer, and Faster
  • Shared Storage Across Availability Zones with Amazon EFS
  • Building and Validating an AWS Backup Strategy with Resilience Hub
  • The Blameless Postmortem Mindset: Why Engineers Who Write Them Stand Out
  • How I Prepared Our Java Spring App Servers to Capture JVM Diagnostics During a CPU Spike
  • LDAP Service Failure After VM Snapshot – Configuration Mismatch Resolution

Categories

SECURITY 5 DEVOPS 4 LINUX 4 AWS 3 INFRASTRUCTURE 3 TROUBLESHOOTING 3 SYSTEM ADMINISTRATION 2 ARCHITECTURE 1 CAREER 1 CI/CD PIPELINES 1 CLOUD COST 1 CLOUD MIGRATION 1 DATABASE 1 DATABASE ADMININISTRATION 1
All Categories
ARCHITECTURE1 AWS3 CAREER1 CI/CD PIPELINES1 CLOUD COST1 CLOUD MIGRATION1 DATABASE1 DATABASE ADMININISTRATION1 DEVOPS4 DOCKER1 HOMELAB1 INCIDENT REPORTS1 INFRASTRUCTURE3 INFRASTRUCTURE MIGRATION1 INFRASTRUCURE1 JAVA1 KUBERNETES1 LINUX4 NETWORKING1 OPERATIONS1 OPTIMISATION1 PERFORMANCE1 SECURITY5 SITE RELIABILITY ENGINEERING1 SOFTWARE ENGINEERING1 SRE1 STORAGE1 SYSTEM ADMINISTRATION2 TROUBLESHOOTING3
[A~Z][0~9]

Tags

MYSQL 4 SSL 4 AWS 3 CLOUDFLARE 3 DEVOPS 3 INFRASTRUCTURE 3 OPENLDAP 3 TLS 3 ALERT 2 ALMALINUX 2 APACHE 2 CERTIFICATE 2 CERTIFICATE MANAGEMENT 2 ENCRYPTION 2
All Tags
AD BLOCKING1 ALERT2 ALMALINUX2 ANSIBLE1 APACHE2 API1 ARGOCD1 AUTOMATION1 AWS3 AZURE1 AZURE-DMS1 BACKUP1 BEST PRACTICES1 BICEP1 BLAMELESS1 BUILD1 BUILDKIT1 CERTIFICATE2 CERTIFICATE MANAGEMENT2 CICD1 CLOUDFLARE3 COMPILER1 CONNECTIVITY1 COST-OPTIMISATION1 CPU1 CRC321 DEPLOYMENT1 DEVOPS3 DIAGNOSTICS1 DISKSPACEOPTIMISATION1 DNS1 DNSSEC1 DOCKER1 DOCKERFILE1 EC21 ED255191 EFS1 EKS1 ENCRYPTION2 ENVIRONMENT1 FINOPS1 FLASK1 GOLANG1 HEAP DUMP1 HIGH AVAILABILITY1 HOMELAB1 HTTP/21 INCIDENT1 INCIDENT-MANAGEMENT1 INDEX1 INFRASTRUCTURE3 JAVA1 JENKINS1 JVM1 KUBERNETES1 LDAP2 LDAPS1 LINUX2 LINUX SECURITY1 LOAD BALANCER1 LOGMANAGEMENT1 LOGROTATE1 METRICS1 MIGRATION1 MONITORING2 MULTI-STAGE1 MYSQL4 NETWORKING1 NFS1 NODEJS1 OPENLDAP3 PERFORMANCE1 PI-HOLE1 PING1 POSTGRESQL1 POSTMORTEM1 PRIVACY1 PRIVILEDGES1 RASPBERRY PI1 RECURSIVE DNS1 RESILIENCE1 ROLE-BASES ACCESS PROFILES1 ROUTING1 RPO1 RTO1 RUNTIME1 SAAS1 SELF-HOSTED1 SELINUX1 SERVICE1 SLAPD1 SPRING1 SRE1 SSH1 SSL4 SSL/TLS1 STARTUPS1 STORAGE1 STRATEGY1 SYSADMIN1 THREAD DUMP1 THRESHOLD1 TLS3 TOMCAT1 TROUBLESHOOTING2 TYPESCRIPT1 UNBOUND1 USER CREATION1 VM SNAPSHOT1 VPC1 WEB APPLICATIONS1 WORKBENCH1 ZERO DOWNTIME1
[A~Z][0~9]

© 2026 systemsgolive.com and Mickael Asghar. All rights reserved.

to-top