Tag: #networking
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 77 posts
Apache APISIX Ingress Controller — A Deep Dive into etcd-Based Dynamic Routing
A deep dive into how the Apache APISIX Ingress Controller delivers zero-downtime configuration changes through etcd-based dynamic routing. Covers the architecture, the ApisixRoute/ApisixUpstream/ApisixPluginConfig custom
2026-06-14 · 20 min read #apisix#ingress#kubernetes#api-gateway#networkingThe Complete Traefik Guide — IngressRoute, Middleware, and Dynamic Configuration
A practical walkthrough of Traefik from its architecture (EntryPoint, Router, Middleware, Service) to IngressRoute CRDs, middleware chaining, automatic TLS, Gateway API support, Helm deployment, and troubleshooting. It c
2026-06-14 · 14 min read #traefik#ingress#kubernetes#networking#devopsEnvoy Gateway Deep Dive: Inside the Gateway API Reference Implementation
In 2026, with the Ingress API frozen and Gateway API established as the standard successor, this post takes a deep look at Envoy Gateway, the reference-grade implementation built by the Envoy community itself, covering a
2026-06-14 · 17 min read #envoy-gateway#gateway-api#envoy#kubernetes#ingressIngress Observability — Metrics, Access Logs, and Tracing
Define the golden signals for an Ingress controller and build a practical observability stack: ingress-nginx Prometheus metrics, Grafana dashboards, structured access logs shipped to Loki, OpenTelemetry distributed traci
2026-06-14 · 11 min read #ingress#kubernetes#nginx#observability#networkingingress-nginx Deep Dive — Architecture, Annotations, and Templates
A practitioner-focused deep dive into the ingress-nginx controller: its internal architecture, the essential annotation catalog, ConfigMap global tuning, snippet security risks, and the 2026 reality of maintenance mode a
2026-06-14 · 12 min read #ingress#kubernetes#nginx#networking#devopsIntegrating Ingress with ExternalDNS and Cloud Load Balancers — From Domain to L4
This post walks the full path traffic travels, from domain registration through the cloud load balancer to the Ingress controller. It covers AWS/GCP/Azure LB integration annotations, ExternalDNS automation, MetalLB, Prox
2026-06-14 · 18 min read #ingress#kubernetes#externaldns#loadbalancer#dnsIngress Multitenancy and Cost Optimization — A Platform Teams Choice
The trade-offs of a shared controller vs per-tenant controllers, namespace isolation, load balancer cost, resource quotas, noisy-neighbor prevention, security boundaries, and showback models — multi-tenant Ingress operat
2026-06-14 · 9 min read #ingress#kubernetes#networking#multitenancy#devopsThe Complete Contour Guide - Managing Kubernetes Traffic with Envoy-Based Ingress and HTTPProxy
Contour is a Kubernetes ingress controller that uses Envoy as its data plane. We cover the HTTPProxy CRD, multi-tenancy through delegation, and Gateway API support with hands-on examples, plus operational tuning and trou
2026-06-14 · 16 min read #contour#envoy#ingress#kubernetes#httpproxyKernel Tuning for Low-Latency Trading Systems — The War Against Microseconds
How to tune the Linux kernel in domains like HFT and market making where microseconds decide profit and loss. Covers CPU isolation recipes, NUMA alignment, the kernel-bypass spectrum, C-state pinning, PTP time synchroniz
2026-06-13 · 17 min read #linux#kernel#low-latency#trading#performanceeBPF Fundamentals — Programs, Maps, and the World of the Verifier
A ground-up tour of how eBPF changed Linux kernel programming. We cover program types and maps, how the verifier works, and build a first eBPF program with libbpf and CO-RE from scratch.
2026-06-13 · 19 min read #ebpf#linux#kernel#libbpf#observabilityA Packet Journey — Tracing the Linux Kernel Networking Stack
We dissect the full path a packet takes from the NIC through DMA, ring buffers, NAPI, and the IP/TCP layers to the application socket. Covers RSS/RPS/RFS multi-core scaling, GRO/GSO/TSO offloads, XDP, socket buffer tunin
2026-06-13 · 19 min read #linux#kernel#networking#tcp#xdpCilium Datapath Architecture — Inside a Cluster Without kube-proxy
A deep dive into the eBPF datapath of Cilium, the CNCF graduated CNI, following a packet on its journey. We cover how kube-proxy replacement works, the identity-based security model, tunneling versus native routing, and
2026-06-13 · 16 min read #cilium#ebpf#kubernetes#cni#networking2026 Developer Job Market Survival Guide — Resumes and Job Search Strategy in the Age of AI Screening
How to survive the 2026 hiring market, where AI screening is universal and applications have exploded. Covers an impact-driven resume formula, ATS tactics, portfolio strategy, referral scripts, and salary negotiation, al
2026-06-12 · 18 min read #career#resume#job-search#interview#networkingNetworking 2026 Complete Guide - Cilium, WireGuard, Tailscale, Nebula, Istio, Envoy, Cloudflare Tunnel Deep Dive
A complete look at the 2026 production networking stack. eBPF-based K8s networking (Cilium, Calico eBPF, Antrea), overlay VPNs (WireGuard, Tailscale, Nebula, ZeroTier, Twingate, OpenZiti), service meshes (Istio ambient,
2026-05-16 · 18 min read #networking#cilium#ebpf#wireguard#tailscaleA Guide to Global Developer Communities: Recurse Center, KubeCon, IndieHackers, Discord, and More (2026)
Companion piece to the Korean-communities guide. A practical tour of retreats, conferences, forums, and chat servers where the world's developers gather: Recurse Center, KubeCon, the heirs of Strange Loop, !!Con, DEF CON
2026-05-14 · 24 min read #global-community#developer-community#recurse-center#kubecon#conferencesTCP Network Stack Deep Dive — State Machine, Congestion Control (Cubic vs BBR), Nagle, Delayed ACK, and the Evolution to QUIC (2025)
A TCP connection traverses 11 states from open to close. Why does TIMEWAIT linger for 30 seconds? Why does Nagle meeting Delayed ACK produce a 40ms stall? Why does BBR beat Cubic, and why did Google abandon TCP for QUIC?
2026-04-15 · 9 min read #tcp#networking#congestion-control#bbr#cubicDeveloper Networking & Personal Branding Complete Guide: LinkedIn, Twitter, GitHub, and Conferences for Introverts (2025)
Granovetter's "Strength of Weak Ties" theory and low-cost networking strategies for introverted developers. LinkedIn profile optimization, Twitter/X developer networking, GitHub profile polishing, conferences from attend
2026-04-15 · 14 min read #networking#personal-branding#linkedin#twitter#githubLinux I/O Evolution Deep Dive — blocking, select, poll, epoll, io_uring (2025)
How do you handle not 10,000 but 1,000,000 concurrent connections on a single server? 30 years of Linux I/O API evolution — from the 1970s blocking read, through the limits of select/poll, the epoll revolution, to iourin
2026-04-15 · 11 min read #linux#io#epoll#io-uring#asynceBPF Deep Dive — The VM, Verifier, XDP, and CO-RE That Made the Linux Kernel Programmable (2025)
Injecting safe code into the kernel — that is the eBPF revolution. This post dissects eBPF from internals to practice: the VM and bytecode, the Verifier that enforces safety, maps (Hash/Array/Ring Buffer/Perf), program t
2026-04-15 · 15 min read #ebpf#linux#kernel#xdp#observabilityThe Complete DNS Guide — Resolvers, DNSSEC, DoH/DoT, Anycast, CoreDNS, and Everything Else (2025)
Everything about DNS — the history of the name system that started with hosts.txt, query flow (stub to recursive to root to TLD to authoritative), record types (A/AAAA/CNAME/MX/TXT/NS/SOA/SRV/CAA/HTTPS/SVCB), EDNS0 and p
2026-04-15 · 25 min read #dns#dnssec#doh#networking#security