One Port Number, Two Owners: TCP and UDP Are Separate
A complete port map names the transport, address family, bind address, and process.
Field archive
Commands, failure boundaries, and verification steps for small Linux systems. Examples stay generic; conclusions stay close to observable state.
A complete port map names the transport, address family, bind address, and process.
Use local forwarding for a loopback-only service, then verify a fresh connection instead of trusting an old tunnel.
A sysctl is only a default. Prove the active socket and compare distributions, not one peak result.
Build the policy around established traffic, explicit transports, and a timed rollback.
systemd can restart a crashed process, but only when exit semantics and rate limits are understood.
A retention drop-in is incomplete until a new record can be read from the persistent journal.
Keep a second session, capture state, arm a rollback, and separate configuration validity from service health.
Use SQLite's backup API, verify an independent database, and rehearse restore outside production.
Confirm file ownership, validate the candidate, reload narrowly, and compare the served certificate.