Blog
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 3517 posts
#2026-03 765#english 592#culture 264#deep-dive 254#kubernetes 247#career 229#ai 216#llm 208#devops 193#2026-04 146#security 141#database 114#observability 113#communication 109#history 107#architecture 100#productivity 96#finance 88#economy 84#mindset 81#psychology 80#ai-papers 79#food 78#it 78#travel 78#deep-learning 77#japanese 77#networking 77#performance 72#business-travel 70#linux 70#gpu 69#ai-agent 66#cs-fundamentals 63#postgresql 60#rag 58#self-improvement 55#learning 53#mlops 53#ai-platform 51
Managing Ingress as Code — Helm, Kustomize, and GitOps
How to put Ingress and controller configuration under version control. Deploy controllers per environment with Helm values, overlay manifests with Kustomize patches, automate delivery and drift detection with Argo CD and
2026-06-14 · 8 min read #ingress#kubernetes#helm#kustomize#gitopsUnderstanding Ingress Controllers Completely — From the Ingress Resource to How Controllers Actually Work
Clearly separates the Ingress API from the Ingress Controller, then walks through the control loop from API watch to config generation and reload with an ASCII diagram. Covers the Ingress resource spec, IngressClass, TLS
2026-06-14 · 13 min read #ingress#kubernetes#nginx#networking#devopsIngress Traffic Splitting — Canary and Blue-Green Deployments in Practice
A practical walkthrough of ingress-nginx canary annotations, Argo Rollouts integration, per-controller traffic splitting comparisons, blue-green patterns, and metric-based automated promotion. It also covers the 2026 shi
2026-06-14 · 16 min read #ingress#kubernetes#canary#argo-rollouts#deploymentThe Complete Guide to Emissary-ingress (Ambassador): Everything About API Gateway-style Ingress
A deep dive into Emissary-ingress (formerly Ambassador), the Envoy-based API Gateway-style Ingress controller, covering its architecture, the Mapping CRD, authentication, rate limiting, canary releases, and Gateway API s
2026-06-14 · 18 min read #emissary-ingress#ambassador#envoy#api-gateway#kubernetesTraefik Advanced — Middleware Design, TLS Options, Multi-Provider
A production-focused deep dive into Traefik middleware chains, forwardAuth-based SSO, TLSOption and mTLS, weighted routing and mirroring, multi-provider composition, and Yaegi plugins. We also cover canary deployments, o
2026-06-14 · 15 min read #traefik#middleware#tls#kubernetes#networkingKong Ingress Controller Guide — API Gateway-Style Ingress Through Its Plugin Ecosystem
A deep dive into Kong Ingress Controller (KIC) from an API Gateway perspective. We cover the architecture of Kong Gateway and KIC, DB-less versus DB mode, CRDs such as KongPlugin, KongIngress, and KongConsumer, the core
2026-06-14 · 20 min read #kong#ingress#kubernetes#api-gateway#networkingFrom Ingress to Gateway API — Why, What, and How It Changes
Starts from the limits of Ingress (annotation hell, no role separation), then lays out the Gateway API resource model in a mapping table. Covers the ingress2gateway migration tool, per-controller support status, a gradua
2026-06-14 · 8 min read #ingress#gateway-api#kubernetes#networking#migrationExposing TCP/UDP Services with Ingress — The Limits of L4 and How to Work Around Them
Ingress is fundamentally an L7 (HTTP) abstraction. Yet when you must expose TCP/UDP services like databases, game servers, or DNS, this post shows how to use the ingress-nginx ConfigMap, Traefik EntryPoints, TLS passthro
2026-06-14 · 8 min read #ingress#kubernetes#tcp#udp#networkingingress-nginx Security Hardening — WAF, mTLS, Blocking Annotation Risks
A security hardening guide for ingress-nginx: disabling snippet annotations and RBAC, ModSecurity/Coraza WAF integration, client-certificate mTLS, external auth, TLS policy, rate limiting, CVE response, multi-tenant isol
2026-06-14 · 11 min read #ingress#kubernetes#nginx#security#devopsAdvanced Ingress Protocols — gRPC, WebSocket, HTTP/2, HTTP/3
A practical guide to handling gRPC, WebSocket, HTTP/2, and HTTP/3 (QUIC) in Kubernetes Ingress. Covers per-controller support, annotations, TLS ALPN, troubleshooting, and the migration path toward the Gateway API, with h
2026-06-14 · 10 min read #ingress#kubernetes#grpc#websocket#http2Ingress Controller High Availability and Scaling
An operations guide to running an Ingress controller with zero downtime: HA topologies (DaemonSet vs Deployment+HPA), HA per exposure method, graceful drain and zero-downtime deploys, minimizing reload impact, leader ele
2026-06-14 · 11 min read #ingress#kubernetes#nginx#high-availability#networking2026 Ingress Controller Comparison — Benchmarking 8 Options and a Selection Guide
A comprehensive comparison of ingress-nginx, Traefik, HAProxy, Contour, Envoy Gateway, Kong, APISIX, and Emissary across configuration model, performance, observability, Gateway API support, and licensing. Includes selec
2026-06-14 · 13 min read #ingress#kubernetes#nginx#networking#devopsHAProxy Ingress Controller — A Battle-Tested Load Balancer Enters Kubernetes
A deep dive into how HAProxy, a load balancer proven over more than two decades, enters Kubernetes as an ingress controller. We cover the difference between the official haproxytech project and the community jcmoraisjr p
2026-06-14 · 20 min read #haproxy#ingress#kubernetes#load-balancing#networkingApache APISIX Ingress Controller — A Deep Dive into etcd-Based Dynamic Routing
A deep dive into how the Apache APISIX Ingress Controller delivers zero-downtime configuration changes through etcd-based dynamic routing. Covers the architecture, the ApisixRoute/ApisixUpstream/ApisixPluginConfig custom
2026-06-14 · 20 min read #apisix#ingress#kubernetes#api-gateway#networkingThe Complete Traefik Guide — IngressRoute, Middleware, and Dynamic Configuration
A practical walkthrough of Traefik from its architecture (EntryPoint, Router, Middleware, Service) to IngressRoute CRDs, middleware chaining, automatic TLS, Gateway API support, Helm deployment, and troubleshooting. It c
2026-06-14 · 14 min read #traefik#ingress#kubernetes#networking#devopsEnvoy Gateway Deep Dive: Inside the Gateway API Reference Implementation
In 2026, with the Ingress API frozen and Gateway API established as the standard successor, this post takes a deep look at Envoy Gateway, the reference-grade implementation built by the Envoy community itself, covering a
2026-06-14 · 17 min read #envoy-gateway#gateway-api#envoy#kubernetes#ingressIngress WAF - Applying ModSecurity/Coraza and the OWASP CRS
A practical guide to applying a WAF at the Kubernetes Ingress layer. It covers the difference between legacy ModSecurity and its successor engine Coraza, ingress-nginx integration, OWASP CRS tuning and false-positive man
2026-06-14 · 18 min read #ingress#waf#modsecurity#security#kubernetesAutomating Ingress TLS — Fully Automated Certificates with cert-manager and ACME
A hands-on guide to fully automating TLS certificates for Kubernetes Ingress using cert-manager and Let’s Encrypt ACME. Covers the Issuer/Certificate CRD model, HTTP-01 versus DNS-01 challenges, wildcard certificates, re
2026-06-14 · 17 min read #ingress#kubernetes#cert-manager#tls#acmeIngress Observability — Metrics, Access Logs, and Tracing
Define the golden signals for an Ingress controller and build a practical observability stack: ingress-nginx Prometheus metrics, Grafana dashboards, structured access logs shipped to Loki, OpenTelemetry distributed traci
2026-06-14 · 11 min read #ingress#kubernetes#nginx#observability#networkingingress-nginx Deep Dive — Architecture, Annotations, and Templates
A practitioner-focused deep dive into the ingress-nginx controller: its internal architecture, the essential annotation catalog, ConfigMap global tuning, snippet security risks, and the 2026 reality of maintenance mode a
2026-06-14 · 12 min read #ingress#kubernetes#nginx#networking#devops