Challenges

Focused, hands-on DevOps and server-side problems with hints, feedback, and automated solution checks.

Challenge

Restrict Access to a Docker-Published Port with Firewall Rules

A container port published on a server's internal IP is still reachable from the external network. Learn how to restrict access with firewall rules without disrupting legitimate connections.

Challenge

Bypass a Broken VPN with a Routing Trick to Restore SSH Access to a Dual-Homed Server

The management VPN is down, but you urgently need SSH access to a datacenter server that is still reachable through its application network. Find an alternative path to SSH using a routing trick and Linux's weak end host behavior.

Challenge

Block Unexpected Access to a Service on a Dual-Homed Linux Server

On a dual-homed Linux server, a service bound to one network's IP address may still be reachable from another network. Learn how to prevent this unexpected access without disrupting legitimate connections.

Challenge

Reach a Linux Service Through an Interface It Doesn't Listen On

On a dual-homed Linux server, a service bound to the IP address of one interface may still accept connections that arrive through the other interface. Learn how to reach such a service through an interface it doesn't listen on, using a routing trick.

Challenge

Configure Ingress Routing with Traefik for a Multi-Service Shop Application

Create an Ingress resource for a shop application with path-based routing to multiple backend services and configure /etc/hosts for local DNS resolution.