Xiao Liu Lab
Author

Xiao Liu Lab

An operations lab passionate about server tinkering 🔬 Sharing automation scripts, high-availability architecture, alert optimization, and incident reviews. Using technology to reduce overtime and experience to avoid major pitfalls. Follow me for easier, more reliable operations!

82
Articles
0
Likes
339
Views
0
Comments
Recent Articles

Latest from Xiao Liu Lab

82 recent articles
Xiao Liu Lab
Xiao Liu Lab
Nov 10, 2025 · Operations

Why a Healthy Frontend Still Returns 504 Errors: An MTU Mismatch Case Study

A production incident showed that despite flawless frontend health metrics and no logged errors, a subset of users experienced 504 Gateway Timeout errors caused by an MTU mismatch in the network path, highlighting the need for end‑to‑end connectivity checks beyond application monitoring.

504 timeoutMSS clampingMTU
0 likes · 9 min read
Why a Healthy Frontend Still Returns 504 Errors: An MTU Mismatch Case Study
Xiao Liu Lab
Xiao Liu Lab
Nov 9, 2025 · Operations

50 Essential Docker Maintenance Commands for Daily Ops and Security

This guide compiles 50 practical Docker commands covering daily status checks, weekly resource cleanup, monthly security hardening, logging and monitoring, image management, high‑availability, and disaster‑recovery, helping operators maintain healthy containers across Rocky, CentOS, and Kylin environments.

DockerMaintenancecloud-native
0 likes · 10 min read
50 Essential Docker Maintenance Commands for Daily Ops and Security
Xiao Liu Lab
Xiao Liu Lab
Nov 9, 2025 · Operations

Set Up DDNS‑GO in 3 Minutes for Seamless Dynamic IP Access

This guide shows how to quickly configure the open‑source DDNS‑GO tool with Docker, obtain API keys from DNS providers, and secure the web interface, enabling reliable remote access to home or office networks despite constantly changing public IP addresses.

DDNSDockerDynamic DNS
0 likes · 5 min read
Set Up DDNS‑GO in 3 Minutes for Seamless Dynamic IP Access
Xiao Liu Lab
Xiao Liu Lab
Nov 8, 2025 · Operations

Generate a Complete Linux Server Health Report with a Single Command

This article introduces a lightweight Bash script that, with one curl command, automatically gathers CPU, memory, disk, and network information from a Linux server and outputs a formatted, color‑coded report in seconds, dramatically simplifying routine ops tasks.

AutomationLinuxOps
0 likes · 6 min read
Generate a Complete Linux Server Health Report with a Single Command
Xiao Liu Lab
Xiao Liu Lab
Nov 6, 2025 · Information Security

How AnyLink Provides a Lightweight, Secure SSL VPN for Remote Work

AnyLink is an open‑source, lightweight SSL‑VPN server written in Go that offers standard TLS tunnels, multi‑user management, seamless internal resource access, cross‑platform clients, and zero‑cost private deployment, making it an ideal solution for secure remote office connectivity without commercial hardware.

DockerGoOpen Source
0 likes · 7 min read
How AnyLink Provides a Lightweight, Secure SSL VPN for Remote Work
Xiao Liu Lab
Xiao Liu Lab
Nov 5, 2025 · Cloud Native

Deploy Navidrome in One Command: Build Your Private Music Streaming Server

This guide shows how to quickly set up Navidrome—a lightweight, fully Chinese, open‑source music streaming server—on any Linux machine using Docker Compose, covering prerequisites, configuration, security tips, and mobile client setup for seamless personal music access.

DockerDocker ComposeLinux
0 likes · 7 min read
Deploy Navidrome in One Command: Build Your Private Music Streaming Server
Xiao Liu Lab
Xiao Liu Lab
Nov 5, 2025 · Information Security

Stop SSH Brute‑Force Attacks: 5 Ready‑to‑Use Scripts to Harden Your Server

The article reveals how thousands of SSH brute‑force attempts target servers daily, explains why password‑based root logins are a critical risk, and provides five practical Bash scripts—analysis, auto‑banning, security checks, user audits, and daily reporting—to quickly fortify SSH defenses.

LinuxSSHSecurity Scripts
0 likes · 10 min read
Stop SSH Brute‑Force Attacks: 5 Ready‑to‑Use Scripts to Harden Your Server
Xiao Liu Lab
Xiao Liu Lab
Nov 4, 2025 · Information Security

7 Essential Redis Security Baselines to Harden Your Production Deployments

This guide details seven critical Redis hardening steps—including timeout, syslog, strong password, non‑root execution, strict file permissions, trusted bind addresses, and command renaming—to transform insecure default settings into a verifiable, production‑ready security baseline.

ConfigurationHardeningLinux
0 likes · 13 min read
7 Essential Redis Security Baselines to Harden Your Production Deployments