DevOps

Running a BitTorrent (BT) or Private Tracker (PT) server at home can be challenging if your home network doesn’t have a public IP. Public IPs are essential for direct peer-to-peer connections, which significantly improve torrent connectivity. However, with the right setup, you can achieve similar connectivity and even gain extra benefits, like access to IPv6 peers, by using a VPS and WireGuard.

In Linux systems, memory management is crucial for maintaining system stability and performance. One component at the heart of this process is the "Out-Of-Memory (OOM) Killer." This process steps in when your system is critically low on memory. It selectively terminates one or more processes to free up memory and prevent a system crash. However, the intervention of the OOM Killer can be disruptive, as it might terminate essential or high-priority processes.

I recently acquired two budget-friendly Virtual Private Servers (VPS) from OranMe, one featuring a 0.1 CPU with 128MB RAM and the other a 0.5 CPU with 512MB RAM. These low-spec servers are not ideal for heavy usage but can be efficient for specific tasks. To maximize their performance, I chose Debian without a desktop environment, aiming to reduce system load.

Nginx is a high-performance web server known for its efficiency, especially in terms of memory usage, fast startup times, and handling high concurrency. This makes it a popular choice for various internet projects.

Remote LAN access lets devices reach a private network from anywhere. ZeroTier uses a virtual L2 network with P2P paths. Tailscale builds on WireGuard with NAT traversal. Cloudflare Tunnel uses a reverse proxy model.

Default Linux kernel parameters target general-purpose workloads. Servers handling high traffic, many connections, or heavy I/O need tuning. This guide covers the sysctl parameters that matter and why.

Building on our previous discussion of Trojan-gfw, this guide focuses on Shadowsocks-libev, an alternative proxy tool that encrypts traffic to evade ISP network censorship. However, users should be aware that Shadowsocks-libev may not be effective for bypassing Chinese network censorship and could result in the server's IP being blocked in mainland China.

ACME is the protocol for automated certificate management. Let's Encrypt speaks ACME. Certbot is the official ACME client from EFF. This guide covers Certbot with Cloudflare DNS validation.

In this tutorial, I'll walk you through setting up a Trojan proxy, an effective tool for bypassing network censorship. Trojan-gfw is adept at disguising internet traffic as HTTPS, making it challenging for Internet Service Providers (ISPs) to detect your activities.

A container is not a virtual machine. VMs emulate hardware and run a full OS kernel. Containers share the host kernel and isolate processes using namespaces (which partition what a process sees: filesystem, network, PIDs, users) and cgroups (which cap what it uses: CPU, memory, I/O).

Jekyll, an elegant and efficient static site generator, serves as an ideal platform for bloggers and developers looking for simplicity and power in their web projects. In this guide, I’ll take you through the process of setting up a Jekyll blog on a Macbook Air M1, leveraging the latest macOS environment. My aim is to provide a clear and concise path to get your Jekyll blog up and running, ensuring a smooth and straightforward experience. Let’s get started on this exciting journey of blogging with Jekyll on a powerful yet user-friendly setup!