Linux Network Stack Tuning

Notes on TCP congestion control algorithms, socket buffer sizing, and systemd unit hardening for low-latency workloads.

Container Runtime Checklist

Drop unneeded Linux capabilities, keep root filesystems read-only where possible, and isolate internal loopback services.