4141
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,378 posts.
Infrastructure & DevOps
Any year
4142
New EC2 M3 Instance Sizes and Lower Prices for S3 and EBS
Discover more about what's new at AWS with Announcing New Amazon EC2 M3 Instance Sizes and Lower Prices for Amazon S3 and Amazon EBS
4143
Project Mini Rack – compact and portable homelabs
Today I'm announcing Project MINI RACK, an open source project to help those building homelabs, RF/wireless rigs, and other electronics projects into mini 10" racks. Not everyone can afford (either due to budget or space constraints) to have a full 19" rack in their home. Besides that, people may want to deploy small…
4144
BPF port-based firewall for systemd services
The first post introduced the IPIngressFilterPath and IPEgressFilterPath feature for the upcoming systemd release 243 to support custom BPF programs as firewall for services. There was a simple example for a minimal BPF program written in C and how to load it for a systemd service. Then there was a standalone program…
4145
4146
Building an open data pipeline in 2024
Using Iceberg allows us to pick the optimal "big data" compute environment for the specific requirements we have. There's no need to limit yourself to a single solution.
4147
OpenSSL Heartbleed Security Update
Yesterday the OpenSSL Project released an update to address the CVE-2014-0160 vulnerability, nicknamed “Heartbleed.” This serious vulnerability affects a..
4148
Why Certificate Lifecycle Automation Matters
If you’ve perused the ActivityPub feed of certificates whose keys are known to be compromised , and clicked on the “Show More” button to see the name of the certificate issuer, you may have noticed that some issuers seem to come up again and again. This might make sense – after all, if a CA is issuing a large volume…
4149
App Container Spec One Week In
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
4150
Good and Bad Monitoring
You remember that time you passive-aggressively completed a story in the most useless way possible to check that checkbox? That’s most…
4151
4152
Fixing an old hack – why we are bumping the IPv6 MTU
Back in 2015 we deployed ECMP routing - Equal Cost Multi Path - within our datacenters. This technology allowed us to spread traffic heading to a single IP address across multiple physical servers.
4153
AWS ELB adds support for Host-based routing on Application Load Balancer
Discover more about what's new at AWS with Elastic Load Balancing Adds Support for Host-based Routing and Increased Rules on its Application Load Balancer
4154
We stand to save $7M over five years from our cloud exit
Since declaring our intention to leave the cloud in October, we've been busy at work making it so. After a brief detour down a blind alley with an enterprise Kubernetes provider, we found our stride building our own tools, and successfully moved the first small application out of the cloud a few weeks ago. Now our…
4155
Amazon GuardDuty – Continuous Security Monitoring and Threat Detection
Threats to your IT infrastructure (AWS accounts & credentials, AWS resources, guest operating systems, and applications) come in all shapes and sizes! The online world can be a treacherous place and we want to make sure that you have the tools, knowledge, and perspective to keep your IT infrastructure safe & sound…
4156
Monitoring and Observability in the .NET Runtime
.NET is a managed runtime, which means that it provides high-level features that ‘manage’ your program for you, from Introduction to the Common Language Runtime (CLR) (written in 2007):
4157
Rethinking Infrastructure as Code from Scratch
Recently I’ve been thinking a lot about infrastructure complexity, and the current state of infrastructure as code. This is problem space that many talented people are tackling.
4158
Distribution packages considered insecure
If you ever have run a Linux-based operating system you are probably aware of the way that software is usually distributed on them: Using a software repository. Repositories are great for numerous …
4159
A monorepo misconception – atomic cross-project commits
Are cross-project changes in a single atomic commit the key advantage of monorepos? I do not think so.
4160
WSL2 – Installation Tutorial for Graphical Windows Subsystem on Linux
In 2001, Microsoft's former CEO— Steve Ballmer— was quoted by the online tech news publication, The Register, saying: Linux is a
4161
Frugal Computing (2021)
On the need for low-carbon and sustainable computing and the path towards zero-carbon computing.
4162
Google has acquired Crusoe's data center site in southeast Wyoming
Google has acquired Crusoe’s southeast Wyoming data center site after Crusoe completed site selection, approvals, and power strategy for the campus.
4163
New Compute Engine A2 VMs–First Nvidia Ampere A100 GPUs in the Cloud
Google Cloud’s new Accelerator-Optimized (A2) VM family is based on the NVIDIA Ampere A100 GPU, and designed for demanding HPC and ML workloads.
4164
Do we need to store all that telemetry?
In my last post I talked about why modern observability has become so expensive. At the end of the post I posit a question: What if by default we never send any telemetry at all? In this post I’m goin
4165
Nginx with dynamic upstreams
I recently made a setup at work where I had a Nginx server facing the user, which would forward requests to a service running behind an AWS Elastic Load Balancer (aka. ELB). That in itself doesn’t sound like a difficult task, you just find the hostname for the ELB and point Nginx at it with a proxy_pass statement like…
4166
BliKVM PCIe puts a computer in your computer
This is the BliKVM PCIe, a full computer on a PCI Express card. This is an IP KVM (Internet Protocol Keyboard-Video-Mouse) that can be put inside another computer or server. Most server motherboards already have remote 'lights-out' management functionality built in. Most frequently this is referred to as IPMI…
4167
Guide to Writing Dockerfiles for Go Web-Apps
Step by step guide to build highly optimized docker images for Golang web-app development and deployment
4168
4169
Tailscale on NixOS: A New Minecraft Server in Ten Minutes
How to provision a new NixOS machine on Digital Ocean with nixos-infect and automatically connect it to your Tailscale network, then use that server to set up a fully private Minecraft world.
4170
World IPv6 Launch on June 6, 2012, To Bring Permanent IPv6 Deployment
Today marks the start of a new era for IPv6. Building on the great success of last year’s World IPv6 Day, this year’s “World IPv6 Launch” will bring together major Internet service providers (ISPs), home networking equipment manufacturers, and web companies around the world to permanently enable IPv6 for their…