Blog
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 3525 posts
#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 249#career 229#ai 219#llm 209#devops 196#2026-04 146#security 143#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 61#rag 58#self-improvement 55#learning 53#mlops 53#python 52
HAProxy Ingress Controller — A Battle-Tested Load Balancer Enters Kubernetes ♪ Listenable
A deep dive into how HAProxy, a load balancer proven over more than two decades, enters Kubernetes as an ingress controller. We cover the difference between the official haproxytech project and the community jcmoraisjr p
2026-06-14 · 20 min read #haproxy#ingress#kubernetes#load-balancing#networkingApache APISIX Ingress Controller — A Deep Dive into etcd-Based Dynamic Routing
A deep dive into how the Apache APISIX Ingress Controller delivers zero-downtime configuration changes through etcd-based dynamic routing. Covers the architecture, the ApisixRoute/ApisixUpstream/ApisixPluginConfig custom
2026-06-14 · 20 min read #apisix#ingress#kubernetes#api-gateway#networkingThe Complete Traefik Guide — IngressRoute, Middleware, and Dynamic Configuration
A practical walkthrough of Traefik from its architecture (EntryPoint, Router, Middleware, Service) to IngressRoute CRDs, middleware chaining, automatic TLS, Gateway API support, Helm deployment, and troubleshooting. It c
2026-06-14 · 14 min read #traefik#ingress#kubernetes#networking#devopsEnvoy Gateway Deep Dive: Inside the Gateway API Reference Implementation
In 2026, with the Ingress API frozen and Gateway API established as the standard successor, this post takes a deep look at Envoy Gateway, the reference-grade implementation built by the Envoy community itself, covering a
2026-06-14 · 17 min read #envoy-gateway#gateway-api#envoy#kubernetes#ingressIngress WAF - Applying ModSecurity/Coraza and the OWASP CRS ♪ Listenable
A practical guide to applying a WAF at the Kubernetes Ingress layer. It covers the difference between legacy ModSecurity and its successor engine Coraza, ingress-nginx integration, OWASP CRS tuning and false-positive man
2026-06-14 · 18 min read #ingress#waf#modsecurity#security#kubernetesAutomating Ingress TLS — Fully Automated Certificates with cert-manager and ACME
A hands-on guide to fully automating TLS certificates for Kubernetes Ingress using cert-manager and Let’s Encrypt ACME. Covers the Issuer/Certificate CRD model, HTTP-01 versus DNS-01 challenges, wildcard certificates, re
2026-06-14 · 17 min read #ingress#kubernetes#cert-manager#tls#acmeIngress Observability — Metrics, Access Logs, and Tracing
Define the golden signals for an Ingress controller and build a practical observability stack: ingress-nginx Prometheus metrics, Grafana dashboards, structured access logs shipped to Loki, OpenTelemetry distributed traci
2026-06-14 · 11 min read #ingress#kubernetes#nginx#observability#networkingingress-nginx Deep Dive — Architecture, Annotations, and Templates
A practitioner-focused deep dive into the ingress-nginx controller: its internal architecture, the essential annotation catalog, ConfigMap global tuning, snippet security risks, and the 2026 reality of maintenance mode a
2026-06-14 · 12 min read #ingress#kubernetes#nginx#networking#devopsIntegrating Ingress with ExternalDNS and Cloud Load Balancers — From Domain to L4 ♪ Listenable
This post walks the full path traffic travels, from domain registration through the cloud load balancer to the Ingress controller. It covers AWS/GCP/Azure LB integration annotations, ExternalDNS automation, MetalLB, Prox
2026-06-14 · 18 min read #ingress#kubernetes#externaldns#loadbalancer#dnsIngress Multitenancy and Cost Optimization — A Platform Teams Choice
The trade-offs of a shared controller vs per-tenant controllers, namespace isolation, load balancer cost, resource quotas, noisy-neighbor prevention, security boundaries, and showback models — multi-tenant Ingress operat
2026-06-14 · 9 min read #ingress#kubernetes#networking#multitenancy#devopsIngress-level Authentication — Applying SSO with oauth2-proxy and Forward Auth ♪ Listenable
A practical guide to implementing SSO at the Ingress level using the external auth pattern. We walk through wiring oauth2-proxy as a forward auth service to layer OIDC login onto multiple apps without touching applicatio
2026-06-14 · 18 min read #ingress#oauth2-proxy#sso#authentication#kubernetesThe Complete Contour Guide - Managing Kubernetes Traffic with Envoy-Based Ingress and HTTPProxy
Contour is a Kubernetes ingress controller that uses Envoy as its data plane. We cover the HTTPProxy CRD, multi-tenancy through delegation, and Gateway API support with hands-on examples, plus operational tuning and trou
2026-06-14 · 16 min read #contour#envoy#ingress#kubernetes#httpproxyTimestamps and Time Zones, Done Right
Store UTC, display local. The epoch vs ISO 8601, the crucial difference between an offset and a time zone (the IANA tz database), the gaps and overlaps DST creates, leap seconds, why you must never trust the client clock
2026-06-14 · 12 min read #datetime#timezone#fundamentalsKernel Tuning for Low-Latency Trading Systems — The War Against Microseconds
How to tune the Linux kernel in domains like HFT and market making where microseconds decide profit and loss. Covers CPU isolation recipes, NUMA alignment, the kernel-bypass spectrum, C-state pinning, PTP time synchroniz
2026-06-13 · 17 min read #linux#kernel#low-latency#trading#performanceContainers Are a Lie — The Kernel Truth Behind cgroups and Namespaces
There is no container object in the kernel. A tour of the seven namespaces, hands-on cgroup v2 file manipulation, building a mini container with unshare and pivotroot, overlayfs, capabilities, and seccomp — we dissect ea
2026-06-13 · 17 min read #linux#kernel#container#cgroups#namespaceseBPF Fundamentals — Programs, Maps, and the World of the Verifier ♪ Listenable
A ground-up tour of how eBPF changed Linux kernel programming. We cover program types and maps, how the verifier works, and build a first eBPF program with libbpf and CO-RE from scratch.
2026-06-13 · 19 min read #ebpf#linux#kernel#libbpf#observabilityKubespray Deep Dive — Building Production On-Prem Kubernetes with Ansible ♪ Listenable
A complete walkthrough of building production-grade Kubernetes clusters on bare metal with Kubespray. Covers inventory design, dissecting key groupvars, HA control planes, air-gapped environments, day-2 playbooks for upg
2026-06-13 · 30 min read #kubernetes#kubespray#ansible#onprem#baremetalThe Evolution of the Linux CPU Scheduler — From CFS to EEVDF
We follow the evolution of the Linux scheduler, from CFS implementing fairness with vruntime and a red-black tree, to EEVDF which became the default in kernel 6.6 to address latency-sensitive workloads. Covers cgroup CPU
2026-06-13 · 17 min read #linux#kernel#scheduler#cfs#eevdfeBPF Observability in Practice — Opening the Black Box with bpftrace
Ten battle-tested bpftrace one-liners and a tour of the BCC toolbox for inspecting live systems without touching application code. Covers latency histogram interpretation, flame graphs, container environments, and three
2026-06-13 · 15 min read #ebpf#bpftrace#observability#linux#profilingA Packet Journey — Tracing the Linux Kernel Networking Stack ♪ Listenable
We dissect the full path a packet takes from the NIC through DMA, ring buffers, NAPI, and the IP/TCP layers to the application socket. Covers RSS/RPS/RFS multi-core scaling, GRO/GSO/TSO offloads, XDP, socket buffer tunin
2026-06-13 · 19 min read #linux#kernel#networking#tcp#xdp