https://ivomarino.com/tags/infrastructure/Recent content in infrastructure on ivomarino.comHugo -- gohugo.ioen-USAll rights reserved - 2026Thu, 23 Apr 2026 00:00:00 +0000https://ivomarino.com/post/gateway-failover-ssh-tunnels/Thu, 23 Apr 2026 00:00:00 +0000https://ivomarino.com/post/gateway-failover-ssh-tunnels/Building reliable automatic gateway failover for critical infrastructure recovery access. How naive health checks broke everything, and why a 30-second stable recovery is better than a 5-second flapping failover.https://ivomarino.com/post/production-security-updates/Sat, 28 Mar 2026 00:00:00 +0000https://ivomarino.com/post/production-security-updates/Security patches can’t wait, but unplanned reboots break production. The update runbook for Debian, FreeBSD, and OpenBSD — with real scripts, hold patterns, and a zero-downtime cluster update sequence.https://ivomarino.com/post/zfs-nfs-kubernetes-storage/Thu, 26 Mar 2026 00:00:00 +0000https://ivomarino.com/post/zfs-nfs-kubernetes-storage/Kubernetes storage is either ephemeral or expensive. We run a FreeBSD VM with ZFS + NFS in the same VPC as our K8s cluster. Hourly snapshots protect your data. Fast recovery. No vendor lock-in. Here’s how we do it.https://ivomarino.com/post/openbsd-carp-k8s-firewall/Wed, 25 Mar 2026 00:00:00 +0000https://ivomarino.com/post/openbsd-carp-k8s-firewall/We run two OpenBSD firewalls in CARP HA mode in front of a private Kubernetes cluster. Sub-second failover, full state sync, and pf rules that load-balance across worker nodes.https://ivomarino.com/post/relaunch/Thu, 01 Jan 2026 00:00:00 +0000https://ivomarino.com/post/relaunch/Relaunching with a focus on pragmatic infrastructure: backup strategies, Kubernetes autoscaling, and lessons from 10+ years of production operations.