Glossaire
Définitions claires de la terminologie serveur, réseau, stockage et auto-hébergement.
2FA / MFA(Two-Factor / Multi-Factor Authentication)
Exiger plus qu'un mot de passe pour se connecter : généralement quelque chose que vous savez et que vous possédez.
ACME(Automatic Certificate Management Environment)
Le protocole pour obtenir et renouveler automatiquement des certificats TLS gratuits, notamment de Let's Encrypt.
ARC / L2ARC(Adaptive Replacement Cache)
Le cache de lecture en RAM de ZFS (ARC), extensible sur SSD en L2ARC.
Backup
A separate, recoverable copy of your data kept to protect against loss, corruption or disaster.
Bit Rot
The slow, silent corruption of stored data over time due to hardware imperfections.
BorgBackup(Borg)
Outil de sauvegarde dédupliquant axé sur des archives incrémentales chiffrées et efficaces.
Btrfs
A modern Linux filesystem with snapshots, checksums and built-in RAID-like features.
CGNAT(Carrier-Grade NAT)
An ISP setup where many customers share one public IP, making inbound connections impossible without workarounds.
CGNAT(Carrier-Grade NAT)
Quand votre FAI vous place derrière des IP publiques partagées, bloquant les connexions entrantes directes.
Checksum
A small fingerprint of data used to detect corruption or verify integrity.
cloud-init
Un outil qui configure une VM neuve au premier démarrage : nom d'hôte, utilisateurs, clés SSH et paquets.
Compression
Encoding data to take up less space, often transparently at the filesystem level.
Container
An isolated, self-contained package that bundles an application with everything it needs to run.
Container Healthcheck
Une commande que Docker exécute périodiquement pour savoir si un conteneur fonctionne réellement.
Container Image
A read-only, versioned template that a container is created from.
Container Registry
A repository that stores and distributes container images, such as Docker Hub or GHCR.
Cron
The classic Unix scheduler that runs commands automatically at set times.
Deduplication
Storing only one copy of identical data blocks to save space, especially in backups.
Default Gateway
The device (usually your router) that traffic is sent to when leaving the local network.
DHCP(Dynamic Host Configuration Protocol)
A service that automatically assigns IP addresses and network settings to devices as they join the network.
DNS(Domain Name System)
The system that translates human-readable names like example.com into the IP addresses computers use.
Docker
A platform for packaging applications and their dependencies into lightweight, portable containers.
Docker Compose
A tool that defines and runs multi-container applications from a single declarative YAML file.
Docker Volume
Persistent storage managed by Docker that keeps container data safe across restarts and updates.
Dockerfile
A text recipe that describes how to build a custom container image step by step.
DoH / DoT(DNS over HTTPS / DNS over TLS)
Chiffrer les requêtes DNS pour qu'elles ne soient ni lues ni altérées par votre réseau ou FAI.
Dynamic DNS(DDNS)
A service that keeps a domain name pointed at your home's changing public IP address.
ECC RAM(Error-Correcting Code Memory)
Memory that detects and corrects common data errors on the fly for greater reliability.
ECC RAM(Error-Correcting Code Memory)
Mémoire qui détecte et corrige les erreurs mono-bit, améliorant l'intégrité des données sur les serveurs 24h/24.
ext4
The default, rock-solid Linux filesystem used by most distributions.
Firewall
Software or hardware that controls which network traffic is allowed in or out based on rules.
HBA(Host Bus Adapter)
A card that adds many drive ports, commonly flashed to pass disks straight through to ZFS.
HDD(Hard Disk Drive)
A spinning magnetic drive offering large capacity at a low price per terabyte.
Headless
A server that runs without a monitor, keyboard or graphical desktop.
Helm
Le gestionnaire de paquets pour Kubernetes qui regroupe les manifestes en charts réutilisables.
Home Server
A computer you run at home to provide services such as file storage, media streaming, backups or self-hosted apps to your devices.
Homelab
A personal lab environment at home used to learn, experiment with and run IT infrastructure.
Hot-Swap
La capacité de retirer et insérer des disques pendant que le système est allumé.
Hypervisor
Software that creates and manages virtual machines by allocating physical resources between them.
Immutable OS
Image système remplacée atomiquement lors des mises à jour plutôt que patchée sur place.
IOMMU(Input-Output Memory Management Unit)
Une fonction du CPU qui mappe la mémoire des périphériques en toute sécurité, permettant le passthrough PCI.
IP Address
A numeric label that identifies a device on a network, such as 192.168.1.10 (IPv4).
iSCSI
A protocol that presents remote storage over the network as if it were a local block device.
JBOD(Just a Bunch of Disks)
A group of drives exposed individually, without hardware RAID combining them.
Kubernetes(K8s)
A powerful platform for orchestrating containers across many machines, with self-healing and scaling.
Kubernetes(K8s)
Plateforme d'orchestration qui automatise le déploiement, la montée en charge et la gestion d'applications conteneurisées sur un cluster.
KVM(Kernel-based Virtual Machine)
The Linux virtualization technology that runs full virtual machines with near-native performance.
Let's Encrypt
A free, automated certificate authority that issues the TLS certificates used to enable HTTPS.
Load Balancer
A component that spreads incoming requests across multiple servers or services.
LXC(Linux Containers)
Lightweight system containers that behave like a small VM but share the host kernel.
M.2
A compact slot on a motherboard used mainly for NVMe or SATA SSDs.
MAC Address
A unique hardware identifier assigned to a device's network interface.
macvlan
Un mode réseau Docker qui donne au conteneur sa propre adresse MAC et IP sur le LAN physique.
MTU(Maximum Transmission Unit)
La plus grande taille de paquet qu'un lien réseau transporte sans le fragmenter.
NAS(Network-Attached Storage)
A dedicated storage device connected to your network that lets multiple devices store and access files centrally.
NAT(Network Address Translation)
The router technique that lets many private devices share one public IP address.
NFS(Network File System)
A Unix-native network file-sharing protocol offering high performance between Linux systems.
NVMe
A fast storage interface for SSDs that connects over PCIe, far quicker than SATA.
NVMe(Non-Volatile Memory Express)
Interface de stockage rapide conçue pour les SSD, avec une latence bien inférieure au SATA.
OAuth / OIDC(Open Authorization / OpenID Connect)
Normes permettant aux apps de déléguer l'authentification et l'autorisation à un fournisseur d'identité de confiance.
PCI Passthrough
Donner à une machine virtuelle un accès direct et exclusif à un périphérique PCIe comme un GPU ou HBA.
PCIe(Peripheral Component Interconnect Express)
The high-speed expansion bus that connects GPUs, NVMe drives and network cards to the CPU.
PoE(Power over Ethernet)
Delivering electrical power to devices over the same Ethernet cable that carries data.
PoE(Power over Ethernet)
Alimentation électrique de périphériques comme points d'accès et caméras via câbles Ethernet.
Port Forwarding
A router rule that directs incoming internet traffic on a specific port to a device on your local network.
Portainer
A web dashboard for managing Docker containers, images, volumes and networks.
PXE Boot(Preboot Execution Environment)
Démarrer un ordinateur depuis le réseau plutôt qu'un disque local, via DHCP et TFTP.
RAID(Redundant Array of Independent Disks)
A method of combining multiple drives so they act as one, improving performance and/or protecting against drive failure.
RAID-Z
Le RAID à parité logicielle de ZFS, disponible en RAID-Z1, Z2 et Z3.
Restic
A modern backup program that creates encrypted, deduplicated, versioned backups.
Restic
Programme de sauvegarde open source qui déduplique, chiffre et vérifie des snapshots vers un stockage local ou cloud.
Reverse Proxy
A server that sits in front of your services, routing requests by domain name and handling TLS certificates.
rsync
A fast tool that copies and synchronizes files, transferring only what changed.
S.M.A.R.T.(Self-Monitoring, Analysis and Reporting Technology)
Un système de santé intégré aux disques qui rapporte des métriques et signes précoces de panne.
Samba
The Linux implementation of the SMB protocol, used to share files with Windows, macOS and Linux.
SATA
The common interface for connecting hard drives and 2.5-inch SSDs to a motherboard.
Self-Hosting
Running software on hardware you control instead of relying on third-party cloud services.
SLOG / ZIL(Separate Log / ZFS Intent Log)
Un périphérique rapide qui accélère les écritures synchrones dans ZFS.
SMB(Server Message Block)
A network file-sharing protocol used by Windows, macOS and Linux to access shared folders.
Snapshot
A point-in-time, read-only copy of a filesystem or volume that lets you roll back changes instantly.
SSD(Solid-State Drive)
Flash-based storage with no moving parts, far faster and quieter than a hard drive.
SSH(Secure Shell)
An encrypted protocol for securely logging into and managing servers over a network.
SSO(Single Sign-On)
Se connecter une seule fois via un fournisseur d'identité central pour accéder à plusieurs applications.
Static IP
A fixed IP address that never changes, either set on the device or reserved on the router.
Subnet
A logical subdivision of an IP network, defined by a mask that separates the network and host portions of an address.
Swap
Disk space used as overflow when a system runs low on RAM.
systemd
The init system on most Linux distributions that starts, stops and supervises services.
TDP(Thermal Design Power)
A rough measure of how much heat (and roughly power) a CPU produces under load.
Thin Provisioning
Allouer le stockage à la demande, permettant des volumes plus grands que l'espace physique utilisé.
TLS/SSL
The encryption that secures connections, shown as the padlock and https:// in your browser.
TOTP(Time-based One-Time Password)
Un code de six à huit chiffres qui change toutes les 30 secondes, utilisé comme second facteur d'authentification.
TRIM
Une commande qui indique au SSD quels blocs ne sont plus utilisés pour préserver performance et endurance.
UPS(Uninterruptible Power Supply)
A battery backup that keeps your server running briefly during a power cut and enables a safe shutdown.
Virtual Machine(VM)
A software-based computer that runs its own operating system on top of physical hardware via a hypervisor.
VLAN(Virtual LAN)
A way to split one physical network into isolated logical networks for security and organization.
VLAN(Virtual LAN)
Segment réseau logique qui isole le trafic sur des switchs physiques partagés.
VPN(Virtual Private Network)
An encrypted tunnel that lets you securely access your home network from anywhere as if you were local.
Wake-on-LAN(WoL)
A feature that powers on a computer remotely by sending it a special network packet.
Watchtower
A tool that automatically updates running Docker containers to their latest images.
ZFS
An advanced filesystem and volume manager offering data integrity, snapshots, compression and software RAID.