181
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 376 posts.
Infrastructure & DevOps
Any year
182
Shortening the Let's Encrypt chain of trust
When Let’s Encrypt first launched, we needed to ensure that our certificates were widely trusted. To that end, we arranged to have our intermediate certificates cross-signed by IdenTrust’s DST Root CA X3. This meant that all certificates issued by those intermediates would be trusted, even while our own ISRG Root X1…
183
6-Day and IP Address Certificates Are Generally Available
Update: March 11, 2026 If you use Certbot, see Six-Day and IP Address Certificates Available in Certbot for details on requesting these certificates. Short-lived and IP address certificates are now generally available from Let’s Encrypt. These certificates are valid for 160 hours, just over six days. In order to get a…
184
Vault – A tool for managing secrets
Vault is a platform for centralized secrets management, encryption as a service, and identity-based access.
185
Migrating Dropbox from Nginx to Envoy
In this blogpost we’ll talk about the old Nginx-based traffic infrastructure, its pain points, and the benefits we gained by migrating to Envoy . We’ll compare Nginx to Envoy across many software engineering and operational dimensions. We’ll also briefly touch on the migration process, its current state, and some of…
186
Rethinking serverless with FLAME
Imagine if you could auto scale simply by wrapping any existing app code in a function and have that block of code run in a temporary copy of your app
187
EC2 Bare Metal Instances with Direct Access to Hardware
When customers come to us with new and unique requirements for AWS, we listen closely, ask lots of questions, and do our best to understand and address their needs. When we do this, we make the resulting service or feature generally available; we do not build one-offs or “snowflakes” for individual customers. That…
188
189
Publishing with Apache Kafka at The New York Times
This post covers how Apache Kafka and its Streams API are used for storing and processing all the articles ever published by The New York Times
190
Cloudflare One
Today we’re announcing Cloudflare One. It provides secure, fast, reliable, cost-effective network services, integrated with leading identity management and endpoint security providers.
191
AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS
I am fascinated by things that are simple on the surface and complex underneath! For example, consider the popular padlock icon that is used to signify that traffic to and from a web site is encrypted: How does the browser know that it should display the green padlock? Well, that’s quite the story! It all […]
192
Scaling PostgreSQL to power 800M ChatGPT users
An inside look at how OpenAI scaled PostgreSQL to millions of queries per second using replicas, caching, rate limiting, and workload isolation.
193
Heroku - Bamboo Routing Performance
Yesterday, one of our customers let us know about significant performance issues they have experienced on Heroku. They raised an important issue and I want
194
Backblaze Hard Drive Stats for 2020
The AFR for 2020 dropped below 1% down to 0.93%. In 2019, it stood at 1.89%. That’s over a 50% drop year over year.
195
Docker Security Cheat Sheet
Website with the collection of all the cheat sheets of the project.
196
Backblaze Hard Drive Stats for 2016
We take a deep dive on hard drive performance stats from 73,653 hard drives. What are the most reliable hard drives by size, manufacturer, and model?
197
Proposed top-level domain string for private use: ".internal"
ICANN received a total of 32 public comments from across the community on the Proposed Top-Level Domain String for Private Use. Thirteen of these were in support of the proposal. Of the remaining nineteen comments, six believed a shorter string should be selected, one believed a more meaningful string should be…
198
199
How we use HashiCorp Nomad
A walkthrough on how we are improving the reliability of our management services running in each data center by using Nomad for dynamic task scheduling.
200
GPUs for Google Cloud Platform
CPU-based machines in the cloud are terrific for general purpose computing, but certain tasks such as rendering or large-scale simulations are much faster on specialized processors. Graphics Processing Units (GPUs) contain hundreds of times as many computational cores as CPUs and are great at accelerating risk…
201
Aurora - New MySQL-Compatible Database Engine
We launched the Amazon Relational Database Service (Amazon RDS) service way back in 2009 to help you to set up, operate, and scale a MySQL database in the cloud. Since that time, we have added a multitude of options to RDS including extensive console support, three additional database engines ( Oracle, SQL Server, and…
202
Introducing Heka
We here on the Mozilla Services team are happy to announce our first beta release (v0.2b1) of Heka, a tool for high performance data gathering, ...
203
NetBSD fully reproducible builds
I have been working on and off for almost a year trying to get reproducible builds (the same source tree always builds an identical cdrom) on NetBSD. I did not think at the time it would take as long or be so difficult, so I did not keep a log of all the changes I needed to make. I was also not the only one working on…
204
Backblaze Drive Stats for Q3 2023
Explore Backblaze's Q3 2023 hard drive stats, revealing insights on 259,533 HDDs, failure rates, and data center performance for enhanced reliability.
205
Update about the October 4th outage
To all the people and businesses around the world who depend on us, we are sorry for the inconvenience caused by today’s outage across our platforms. We’ve been working as hard as we can to restore…
206
Shipping a Linux Kernel with Windows
Beginning with Windows Insiders builds this Summer, we will include an in-house custom-built Linux kernel to underpin the newest version of the Windows
207
Run Ordinary Rails Apps Globally (2021)
Documentation and guides from the team at Fly.io.
208
209
Cloudflare launches Workers Unbound, next evolution of its serverless platform
Today, we are excited to announce the next phase of this with the launch of our new platform, Workers Unbound, without restrictive CPU limits in a private beta.
210
Using load shedding to avoid overload
How Amazon uses load shedding to stay available under overload, rejecting excess work early so the system keeps serving requests it can handle.