silvio.cloud systems & cloud

SS

Silvio Silva

systems · cloud

Cloud & Systems Engineer · Lisbon, Portugal

Technical notes on distributed systems, Linux kernel networking, BGP routing, and infrastructure orchestration at scale. Practical experiences from production environments.

Topic: All (1) #terraform 5 #iac 4 #devops 4 #architecture 3 #networking 2 #cloud 2 #wireguard 1 #linux 1 #vpn 1 #bgp 1 #ipv6 1 #routing 1 #bird2 1 #github-actions 1 #security 1 #aws 1 #best-practices 1 #gitops 1 × Clear filter

Articles tagged #github-actions

1 article

Oct 5, 2026 • 4 min read • #terraform

Terraform in Production (Part 2): Air-Gapped CI/CD with GitHub Actions & Private Runners

Securing Terraform pipelines with zero static cloud credentials. How to run ephemeral self-hosted GitHub runners inside a private VPC using OpenID Connect (OIDC).

#terraform #github-actions #security #devops #aws

ESC

Quick Commands

Subscribe in your favorite feed reader

Instant Article Navigation

Terraform (Part 1): Why HCL Beats Cloud-Native IaC The single cloud fallacy, multi-provider orchestration Terraform (Part 2): Air-Gapped CI/CD with GitHub Actions OIDC cryptographic tokens, private VPC self-hosted runners Terraform (Part 3): The Module Dilemma Leaky abstractions, God module anti-pattern, Sandi Metz rule WireGuard & MTU/MSS: Prevent Packet Loss on Linux Packet encapsulation overhead, fragmentation, TCP MSS clamping Welcome to BGP: Setting Up Your IPv6 Network ASN, Bird2 daemon, IPv6 prefix peering

WireGuard & Tunnel MTU / MSS Clamping Calculator LIVE MATH

Tunnel Protocol

Outer IP Layer

Base Ethernet MTU

MAX SAFE TUNNEL MTU: 1448

TCP MSS CLAMP: 1408

Terraform Moved Block Synthesizer HCL 1.1+

Old State Address

New Refactored Address

moved {
  from = aws_security_group.allow_tls
  to   = module.network.aws_security_group.allow_tls
}

Navigate with ↑ ↓ · Close with ESC

silvio.cloud · Edge Engine