Infra, Edge CDN & Linux Kernel Tuning — Cloudflare, Caddy, Docker & TCP BBR

A production-grade playbook for eliminating network, edge CDN, reverse proxy, container runtime, and Linux kernel bottlenecks. Together with frontend-performance-lighthouse (Browser/CWV) and backend-performance-optimization (App/DB/Cache), this skill completes the Full-Stack Performance Triad used by /op-goal.

Before tuning server code, always isolate Network RTT (Connect + TLS) from Server Compute (TTFB - TLS) and inspect Edge CDN headers:

When an origin VPS in Europe or North America serves users in Asia (or communicates with external APIs), default Linux kernel TCP settings (cubic congestion control and small socket buffers) severely throttle throughput upon minor packet loss.

reverse_proxy 127.0.0.1:3002 { transport http { keepalive 120s keepalive_idle_conns 64 keepalive_idle_conns_per_host 64 } } }