Tag: #nginx
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 17 posts
Migrating Between Ingress Controllers — A Zero-Downtime Strategy
When replacing an Ingress Controller due to ingress-nginx maintenance issues and more, this guide covers building an inventory, mapping annotations, coexisting via IngressClass separation, weighted DNS cutover, and stage
2026-06-14 · 9 min read #ingress#kubernetes#nginx#networking#devopsIngressClass Deep Dive — Running Multiple Ingress Controllers in One Cluster
Starts from the IngressClass resource and the default-class concept, then covers multi-controller scenarios like internal/external, per-team, and migration. Explains the difference between the annotation and spec.ingress
2026-06-14 · 8 min read #ingress#ingressclass#kubernetes#networking#devopsIngress Troubleshooting Playbook — From 502/504/404 to TLS
A practical playbook organizing the common Ingress symptoms (404, 502, 503, 504, TLS errors, redirect loops, 413) into symptom-based diagnostic trees. Each symptom comes with kubectl/curl/log inspection commands and fixe
2026-06-14 · 11 min read #ingress#kubernetes#nginx#troubleshooting#networkingingress-nginx Production Tuning — Performance, Timeouts, Connections, keepalive
A practitioner tuning guide for running ingress-nginx reliably in production: workers and connections, upstream keepalive, the three timeouts, buffering, compression, rate limiting, HPA scaling, graceful reload, and a 50
2026-06-14 · 14 min read #ingress#kubernetes#nginx#performance#devopsUnderstanding Ingress Controllers Completely — From the Ingress Resource to How Controllers Actually Work
Clearly separates the Ingress API from the Ingress Controller, then walks through the control loop from API watch to config generation and reload with an ASCII diagram. Covers the Ingress resource spec, IngressClass, TLS
2026-06-14 · 13 min read #ingress#kubernetes#nginx#networking#devopsingress-nginx Security Hardening — WAF, mTLS, Blocking Annotation Risks
A security hardening guide for ingress-nginx: disabling snippet annotations and RBAC, ModSecurity/Coraza WAF integration, client-certificate mTLS, external auth, TLS policy, rate limiting, CVE response, multi-tenant isol
2026-06-14 · 11 min read #ingress#kubernetes#nginx#security#devopsIngress Controller High Availability and Scaling
An operations guide to running an Ingress controller with zero downtime: HA topologies (DaemonSet vs Deployment+HPA), HA per exposure method, graceful drain and zero-downtime deploys, minimizing reload impact, leader ele
2026-06-14 · 11 min read #ingress#kubernetes#nginx#high-availability#networking2026 Ingress Controller Comparison — Benchmarking 8 Options and a Selection Guide
A comprehensive comparison of ingress-nginx, Traefik, HAProxy, Contour, Envoy Gateway, Kong, APISIX, and Emissary across configuration model, performance, observability, Gateway API support, and licensing. Includes selec
2026-06-14 · 13 min read #ingress#kubernetes#nginx#networking#devopsIngress Observability — Metrics, Access Logs, and Tracing
Define the golden signals for an Ingress controller and build a practical observability stack: ingress-nginx Prometheus metrics, Grafana dashboards, structured access logs shipped to Loki, OpenTelemetry distributed traci
2026-06-14 · 11 min read #ingress#kubernetes#nginx#observability#networkingingress-nginx Deep Dive — Architecture, Annotations, and Templates
A practitioner-focused deep dive into the ingress-nginx controller: its internal architecture, the essential annotation catalog, ConfigMap global tuning, snippet security risks, and the 2026 reality of maintenance mode a
2026-06-14 · 12 min read #ingress#kubernetes#nginx#networking#devopsReverse Proxy & Edge Servers 2026 Complete Guide — nginx · Caddy · Traefik · HAProxy · Envoy · OpenResty · Pingora · FrankenPHP Deep Dive
Full-stack anatomy of reverse proxies and edge servers in 2026. nginx 1.27 and the freenginx fork drama, Caddy 2.8 automatic HTTPS, Traefik 3 dynamic routing, HAProxy 3.x L4/L7, Envoy 1.32 service mesh data plane, OpenRe
2026-05-16 · 25 min read #reverse-proxy#nginx#caddy#traefik#haproxyLinux I/O Evolution Deep Dive — blocking, select, poll, epoll, io_uring (2025)
How do you handle not 10,000 but 1,000,000 concurrent connections on a single server? 30 years of Linux I/O API evolution — from the 1970s blocking read, through the limits of select/poll, the epoll revolution, to iourin
2026-04-15 · 11 min read #linux#io#epoll#io-uring#asyncNginx Complete Guide 2025: Reverse Proxy, Load Balancing, SSL, Caching & Security
Everything about Nginx! Event-driven architecture, reverse proxy configuration, load balancing (Round Robin/Least Conn/IP Hash), SSL/TLS setup, caching, rate limiting, WebSocket, Docker/K8s integration, and more.
2026-03-24 · 18 min read #nginx#reverse-proxy#load-balancing#ssl#caching[Architecture] Complete Guide to Rate Limiting and API Throttling
A comprehensive guide covering rate limiting algorithms (Token Bucket, Sliding Window, etc.), Redis/Nginx/Kong implementations, LLM API cost control, and distributed rate limiting.
2026-03-20 · 18 min read #architecture#rate-limiting#api-gateway#redis#nginx[DevOps] Nginx TLS Configuration Complete Guide: PEM/Key Setup and Security Optimization
A comprehensive guide to applying PEM/Key files in Nginx, configuring TLS versions and cipher suites, HSTS, OCSP Stapling, HTTP/2 optimization, and mTLS setup.
2026-03-20 · 11 min read #devops#nginx#tls#ssl#securityConcurrent Login Prevention Implementation Guide — Layer-by-Layer Strategies with IP, Session, JWT, and Nginx Including Practical Code
A comprehensive guide covering concurrent (duplicate) login control through IP-based, session-based, JWT-based, and Nginx-level approaches — with architecture, pros/cons, practical code, and operational checklists all in
2026-03-08 · 13 min read #architecture#security#authentication#session#nginxNginx Configuration Complete Guide: 15 Essential Topics from Architecture to Production Optimization
From Nginx event-driven architecture and configuration structure to reverse proxy, load balancing, SSL/TLS, caching, rate limiting, security headers, performance tuning, and health checks -- a comprehensive guide to 15 e
2026-03-01 · 33 min read #nginx#reverse-proxy#load-balancing#ssl#tls