Technical
Immutable backups: the safeguard that must also be restorable
Object Lock blocks ransomware on copies — only if you proved restore before trusting immutability.
5 min read · Aug 10, 2026
Read the guide →
Library
All guides
Technical
Granular restore: recover one customer without rewinding everyone
Restoring the whole VM for one customer erases everyone's timeline: granular restore requires tenant architecture and semiannual drills.
5 min read · Aug 10, 2026
Read the guide →
Guide
Should a local authority choose OVHcloud? Questions to ask before procurement
OVHcloud is an obvious candidate for local government — French data centres, HDS, broad catalogue. But the right certified product, public procurement rules and support still need framing before signature.
4 min read · Aug 9, 2026
Read the guide →
Technical
Encrypting backups: protect copies as much as production
Prod encrypted at rest, backups land plaintext in a shared bucket: one compromised credential exposes full history.
5 min read · Aug 8, 2026
Read the guide →
Technical
S3 presigned URLs: grant temporary access without an expensive proxy
Serving 10 GB user exports through PHP would saturate CPU. Presigned URLs delegate download to storage — with an expiry date you must not forget.
5 min read · Aug 7, 2026
Read the guide →
Technical
Object storage lifecycle rules: automate archiving without losing data
The S3 bill doubles quietly: millions of never-read objects sit in Standard tier. Lifecycle rules automate archiving — if you test them.
5 min read · Aug 6, 2026
Read the guide →
Technical
IOPS: connect storage promises to perceived slowness
VPS sheet promises NVMe SSD. In prod PostgreSQL checkpoint chokes: 300 sustained IOPS, not 100k marketing burst.
2 min read · Aug 5, 2026
Read the guide →
Technical
CPU steal on a VPS: identify noisy-neighbor contention
API latency rises with no deploy or traffic spike: `%steal` at 15% in top. Your VPS waits for CPU the hypervisor gives a neighbor.
4 min read · Aug 4, 2026
Read the guide →
Technical
Server swap: warning sign, safety net, or bad habit?
Monitoring shows 2 GB swap used permanently: panic or normal? Depends on cold cache vs genuinely missing RAM.
5 min read · Aug 3, 2026
Read the guide →
Technical
Exhausted inodes: why disk space can look available
df -h shows 40% free yet you cannot create a file: inodes exhausted. Classic after millions of cache or session files.
4 min read · Aug 1, 2026
Read the guide →
Technical
Full Linux disk: find the cause before deleting in panic
At 100% disk systemd stops writing logs — and you lose clues about what filled the volume. Diagnose first, delete second.
5 min read · Aug 1, 2026
Read the guide →
Technical
File permissions: fix access without opening the entire application
An upload folder chmod 777 "so it works" becomes a webshell entry six months later. Permissions need surgery, not blanket fixes.
4 min read · Jul 31, 2026
Read the guide →
Technical
Fail2ban: useful against noise, insufficient against a deliberate attack
Fail2ban quiets weekend SSH scans — until the attacker slows below the threshold or hits the API directly.
5 min read · Jul 29, 2026
Read the guide →
Technical
SSH bastion: reduce administrative surface without slowing the team
Every VPS with port 22 open to the Internet is scan bait. A bastion concentrates access — if the team can still connect without friction.
3 min read · Jul 28, 2026
Read the guide →
Technical
OAuth proxy: protect an internal tool without rewriting authentication
Grafana, Jenkins, phpMyAdmin — tools without native SSO rushed online. An OAuth proxy adds a front door without rewriting the app.
3 min read · Jul 27, 2026
Read the guide →
Technical
Rate limiting: protect an API without punishing good clients
A legitimate partner gets throttled during a spike while a scraper rotates IPs. Good rate limiting protects without punishing.
4 min read · Jul 26, 2026
Read the guide →
Technical
Reliable webhooks: sign, replay, and deduplicate events
Stripe retries after your 500 — and you double-credit the customer. A reliable webhook signs, idempotents, and is observable.
4 min read · Jul 25, 2026
Read the guide →
Technical
Reverse DNS: the detail that weighs on email deliverability
SPF and DKIM are green, yet mail lands in spam: PTR does not match HELO. This invisible detail weighs heavily at major filters.
5 min read · Jul 24, 2026
Read the guide →
Technical
Split-horizon DNS: serve internal and external users without confusion
Your team sees the right IP on VPN while customers see another — or worse, the same private IP. Split-horizon fixes that, but only if the boundary is documented.
5 min read · Jul 22, 2026
Read the guide →
Technical
SPF, DKIM, DMARC: align the three email protections
Mail sends, but Gmail spam-filters it: SPF passes, DKIM signs, DMARC fails alignment. The three protocols do not replace each other — they stack.
2 min read · Jul 22, 2026
Read the guide →
Technical
Anycast DNS: understand the gain before paying for redundancy
Checkout fails while internal DNS monitoring stays green: anycast only helps if you measure from outside. Here is how to evaluate it before the premium invoice.
5 min read · Jul 21, 2026
Read the guide →
Guide
InfoSwitch: migrating to Infomaniak without losing mailboxes, drives or chats
Leaving Microsoft 365 or Google Workspace for Infomaniak takes more than an IMAP tool. InfoSwitch offers a premium migration — email, kDrive, kChat, domains — with proprietary tech focused on security and confidentiality.
5 min read · Jul 20, 2026
Read the guide →
Technical
DNS TTL: prepare a migration without promising instant propagation
"The DNS switch will be instant" — reassuring and false. Without lowering TTL upfront, a host migration drags 24–48 h in ISP caches.
4 min read · Jul 19, 2026
Read the guide →
Technical
ACME: monitor certificate renewal before expiry
Certbot "always worked" — until silent renewal failed because DNS changed and nobody monitored certificates, only HTTP uptime checks.
4 min read · Jul 18, 2026
Read the guide →