Deep, plain-spoken guides to web hosting, DNS, BGP, TLS, CDNs, data centers, email authentication, AI infrastructure and security. The single page you need on each topic, written for engineers and the people who buy their tools.
Kubernetes is the answer to a real problem, but it is not the answer to every problem. This guide is for the sysadmin who runs servers today and is being told that Kubernetes is the future. We explain what Kubernetes is actually solving, what it does not solve, the operational tax it imposes, and the alternatives (docker-compose, Nomad, plain systemd) that are often the right call. We finish with managed-versus-self-hosted picks and the minimum viable cluster if you have decided yes.
Read the guide ›
Tiers, PUE, hyperscale vs colocation, and what you're really paying for
How DNS works, what every record type does, and how to debug it when it breaks
How domains work, what gTLD vs ccTLD really means, and how to pick and protect one
How to stop your domain from being spoofed and your mail from going to spam
How shared, VPS, dedicated, cloud, and managed hosting differ, and how to choose
The service models, deployment patterns, and pricing traps every buyer should understand
An honest reference for engineers who run servers today, written from outside the Kubernetes evangelism circle. What K8s actually buys you, what it does not, and the alternatives that deserve consideration first.
A reference for picking and configuring the four reverse proxies that actually matter in production today.
A reference for picking an object storage provider, understanding the egress trap, and knowing the parts of the S3 API that actually matter.
The 3-2-1 rule, restic vs borg vs rsync, encryption, retention, and the restore drill nobody runs.
Self-host Nous Research's open-source AI agent on Ubuntu or Debian with persistent memory, a messaging gateway and a systemd service.
How the internet's routing protocol works, why it matters, and what every network operator should know
How CDNs make the web fast, how they actually work, and how to pick one
Install, configure and harden WireGuard on Linux. Compare with OpenVPN and Tailscale. Practical patterns for VPS-to-VPS, road warrior and full-tunnel routes.
How encryption protects the web, what every cert type does, and how to deploy modern TLS
How modern attacks work, what defences actually scale, and how to choose protection
HostDir Guides is a growing reference library for internet infrastructure. Where the news desk covers what just happened, the guides explain how things actually work: the protocols, services and architecture behind every website, app and online business. Each one is written to stand on its own as the definitive page on its subject.
The library spans DNS and domains, BGP and networking, TLS and security, CDNs and performance, web and cloud hosting, data centers, and email authentication. They pair naturally with the rest of HostDir: browse the hosting directory and the data center map.
Every guide is human-written, checked against the relevant RFCs and vendor documentation, and revised on a rolling cycle so it stays accurate as standards and best practice move.
Pillar guides are long-form, reference-grade explainers on the core systems that run the web: DNS, BGP, TLS, CDNs, cloud hosting, data centers, email authentication and security. Each one is written to be the single page you need on its topic.
Yes. Every guide is free, with no account, paywall or sign-up. They are written for engineers, sysadmins, security teams and the people who buy infrastructure.
Each guide is written by a human editor, fact-checked against the relevant RFCs and vendor documentation, and updated on a rolling cycle. Spotted an error? Tell us and we publish corrections inline.
Engineers and decision-makers alike: deep enough for a sysadmin or network engineer, but plain enough for a founder or buyer evaluating hosting, CDN, DNS or security tooling.
In total there are 60 users online: 0 registered, 51 guests and 9 bots.
Most users ever online was 5,555 on 17 Jul 2026, 3:23 am.
Users active in the past 15 minutes. Total registered members: 369
Cookie preferences
Each category below sets a Google Consent Mode v2 signal. Necessary cookies cannot be switched off because they keep the site working. Everything else defaults to off until you choose.
Strictly necessary
Login, session, security and load-balancing cookies. Without these the site does not work.
Analytics
Google Analytics 4 (page views, time on page, source attribution). Aggregated only, never sold.
Advertising
Google AdSense and ad measurement tags. Without this category, ads are non-personalised (cookieless).
Personalisation
Remember preferences such as theme, language, and reading position so they persist between visits.