Claseforco Engineering Notes

Distributed systems, Linux kernel networking, and reliable edge infrastructure.

Tuning Socket Buffers and Congestion Control on Debian 12

October 2026 · Infrastructure

Modern congestion control algorithms combined with fair queuing significantly reduce tail latency under moderate packet loss. Keep receive/send buffer limits balanced with available memory.

Minimalist TLS Automation with Caddy & systemd

September 2026 · Security

Running web services under unprivileged accounts with capability bounding sets and ReadWritePaths containment minimizes blast radius while keeping automatic ACME lifecycle management straightforward.

Notes on Reproducible Package Verification

August 2026 · Operations

Always verify cryptographic SHA-256 digests of release artifacts before placing binaries into production paths, and isolate service state under dedicated system accounts.