Incident Runbooks

Step-by-step playbooks for when things go sideways. Interactive checklists with copy-paste commands.

Connection Refused — SSH Troubleshooting Guide

Diagnose and fix SSH connection failures. Covers network connectivity, sshd configuration, firewall rules, fail2ban, and daemon troubleshooting.

10 min7 steps

linuxsshnetworkingconnectionfirewall

Container Network Failure — Docker Troubleshooting Guide

Troubleshoot Docker container networking failures. Covers DNS resolution, inter-container communication, network inspection, and firewall rules.

15 min7 steps

dockernetworkingdnsconnectivitycontainers

TLS Handshake Failure — Diagnosis Guide

Diagnose TLS/SSL connection failures. Covers certificate issues, version mismatches, cipher incompatibility, chain problems, SNI, and mTLS failures.

15 min8 steps

tlssslhandshakecertificatenetworkingopenssl

DNS Resolution Failure — Troubleshooting Guide

Diagnose DNS resolution failures on Linux systems and Kubernetes clusters. Covers resolver config, upstream DNS, systemd-resolved, CoreDNS, and DNSSEC issues.

10 min8 steps

dnsnetworkingresolv.confcorednssystemd-resolved

WireGuard Peer Unreachable — Tunnel Debugging

Fix a WireGuard tunnel where peers can't reach each other. Covers handshake failure, AllowedIPs + routing, UDP firewalling, IP forwarding, and NAT/masquerade for site-to-site setups.

20 min7 steps

wireguardvpntunnelnetworkingfirewallrouting

Service Unreachable — Interactive Diagnostic

InteractiveP1

Diagnose why a Kubernetes service can't be reached. Walks through pod connectivity, service selectors, endpoints, network policies, and ingress configuration.

10 min14 nodes

kubernetesservicenetworkingingressconnectivitydiagnostictroubleshooting