331
How when AWS was down, we were not
Nothing can have an unlimited uptime. But even when AWS and other hyperscalers are having incidents, we've created an architecture that is resilient to those outages. Here's how we do it for Authress.
New
The latest blog posts to take off on Hacker News. 4,377 posts.
Infrastructure & DevOps
Any year
332
I finally understand Cloudflare Zero Trust tunnels
Everything you wanted to know about using Cloudflare Zero Trust Argo tunnels for your personal network
333
I can't recommend Grafana anymore
The Grafana Stack can be an incredible powerful monitoring solution, but through my experience I found out how maintenance intensive it is and how uncertain the…
334
Minisforum Stuffs Entire Arm Homelab in the MS-R1
The Minisforum MS-R1 uses the same Cix CD8180 Arm SoC as the Orion O6 I reviewed earlier this year. But everything else about this thing is different. What this thing should be, is a box that runs Linux and can compete with at least an Apple M1 Mac mini, or a mid-range Mini PC. But what we got... is something…
335
Backblaze Drive Stats for Q3 2025
Read the Q3 2025 Drive Stats report to see the latest annualized failure rates, and an analysis of how we define failure in the first place.
336
How to Get a North Korea / Antarctica VPS
.admonition { margin: .75em 0; padding: .6rem; overflow: hidden; font-size: 12px; page-break-inside: avoid; border-left: .3rem solid #42b983; border-radius: .3rem; box-shadow: 0 0.1re
337
Kubernetes Ingress Nginx is retiring
To prioritize the safety and security of the ecosystem, Kubernetes SIG Network and the Security Response Committee are announcing the upcoming retirement of Ingress NGINX. Best-effort maintenance will continue until March 2026. Afterward, there will be no further releases, no bugfixes, and no updates to resolve any…
338
We cut our Mongo DB costs by 90% by moving to Hetzner
We moved MongoDB Atlas off AWS and onto self-hosted Hetzner boxes — 90% cost cut, no performance loss. Here's the setup, the Ansible, and what broke.
339
Heartbeats in Distributed Systems
In distributed systems, one of the fundamental challenges is knowing whether a node or service is alive and functioning properly. Unlike monolithic applications, where everything runs in a single process, distributed systems span multiple machines, networks, and data centers. This becomes even glaring when the nodes…
340
A brief look at FreeBSD
Recently I've been playing around with FreeBSD in a virtual machine. The reason for this is that (if all goes well) some time in December my new Framework laptop will arrive, replacing my current X1 Carbon that is starting to show signs of old age (e.g. a keyboard where certain keys don't always work). Framework in…
341
Run Nix Based Environments in Kubernetes
Run reproducible, immutable environments in Kubernetes without container images. Faster deploys, SBOMs-by-default, and zero drift with Flox.
342
Head in the Zed Cloud
For the past five months I've been leading the efforts to rebuild Zed 's cloud infrastructure.
343
Immutable Software Deploys Using ZFS Jails on FreeBSD
An article demonstrating immutable software deployments using ZFS snapshots and FreeBSD jails, with Caddy as a health‑checked reverse proxy for zero‑downtime upgrades.
344
I took all my projects off the cloud, saving thousands of dollars
You've been lied to. You don't need the cloud – you can just run servers and save 10x your AWS costs. It's not that difficult.
345
An eBPF loophole: Using XDP for egress traffic
XDP only works for ingress. We found a loophole that lets it work for egress. Here's how we did the impossible.
346
Google suspended my company's Google cloud account for the third time
On each of the last two Fridays, Google has suspended SSLMate 's Google Cloud access without notification, having previously suspended it in 2024 without notification. But this isn't just another cautionary tale about using Google Cloud Platform; it's also a story about usable security and how Google's capriciousness…
347
Why Nextcloud feels slow to use
No amount of tuning the backend service performance helped, and then I learned why. Oh no. Oh no no no no.
348
Reproducing the AWS Outage Race Condition with a Model Checker
Welcome to Waqas' blog
349
Using FreeBSD to make self-hosting fun again
Feeling like a kid in a candy store, once more
350
Nix Derivation Madness
I’ve written a bit about Nix and I still face moments where foundational aspects of the package system confounds and surprises me.
351
How We Found 7 TiB of Memory Just Sitting Around
How we saved 7 TiB of memory across our Kubernetes clusters by disabling namespace listwatching in Vector, reducing daemonset overhead and API server load at scale.
352
Tailscale Peer Relays
Tailscale Peer Relays provide predictable, performant access, entirely within your own tailnet.
353
Replacing EBS and Rethinking Postgres Storage from First Principles
Fluid Storage reimagines block storage like EBS with zero-copy forks, true elasticity, and sync replication. Built for the age of agents.
354
AWS to bare metal two years later: Answering your questions about leaving AWS
Two years after our AWS-to-bare-metal migration, we revisit the numbers, share what changed, and address the biggest questions from Hacker News and Reddit.
355
Tailscale Services
Tailscale Services is a new way to define available resources on your network and expand the granularity of your access controls to resources that may not have Tailscale installed on them.
356
Linux VM without VM software – User Mode Linux
Quick demonstration of using User Mode Linux (UML) to run a Linux VM inside Linux's userspace, without additional VM software or even root permissions
357
Avoid 2:00 and 3:00 am cron jobs (2013)
A word to the wise: Do not set any cron jobs for 2:00 am or 3:00 am on Sunday morning! Or to be safe, on other mornings besides Sunday as well, since jobs originally set to run on some particular day may eventually be changed to run on another day, or every day.
358
More than DNS: Learnings from the 14 hour AWS outage
A thorough review of a major cloud outage.
359
We saved $500k per year by rolling our own "S3"
At thousands of uploads/second, S3’s per-request fees dominated costs. We built N3, a Rust in-memory landing zone with S3 as overflow.
360
Making a micro Linux distro (2023)
A guide on building a simple Linux distribution from scratch. Detailed guide on building the kernel and the init process. Finally, a little distribution is built with u-root that is capable of connecting to the Internet.