Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 402 posts.
What chroot taught me about containers
In this article, the author explores the concept of containers and how they are essentially chrooted processes. They walk through the process of bu...
Our User-Mode WireGuard Year
For better or worse, flyctl isn't boring. Here's why.
WebAssembly: Docker Without Containers
Hands-on exploration of using Docker to run WebAssembly applications.
I won free load testing
Long story short: a couple of my articles got really popular on a bunch of sites, and someone, somewhere, went “well, let’s see how much traffic that smart-ass can handle”, and suddenly I was on th...
If you’re not using SSH certificates you’re doing SSH wrong (2019)
SSH has some pretty gnarly issues when it comes to usability, operability, and security. The good news is this is all easy to fix. SSH is ubiquitous. It’s the de-facto solution for remote administration of *nix systems. SSH certificate authentication makes SSH easier to use, easier to operate, and more secure.
Pingora, the proxy that connects Cloudflare to the Internet
Today we are excited to talk about Pingora, a new HTTP proxy we’ve built in-house using Rust that serves over 1 trillion requests a day
We're migrating many of our servers from Linux to FreeBSD
More about this in the article I wrote to accompany my talk at EuroBSDCon 2024 . Please note: This article was (unexpectedly) quite popular and many...
It’s time to leave the leap second in the past
The leap second concept was first introduced in 1972 by the International Earth Rotation and Reference Systems Service (IERS) in an attempt to periodically update Coordinated Universal Time (UTC) d…
DevOps is broken
A Critique of How We've Fooled Ourselves for Years.
MagicDNS is generally available
Tailscale’s MagicDNS is now GA and enabled by default for new tailnets. Say goodbye to IP address management and access your devices using simple, memorable DNS names for enhanced connectivity.
Reasons Kubernetes is so complex
Preface Hello friends! It’s been a while. I’ve been finding it very hard to write while holding up a full-time job, and I’ve also been dealing with some very...
Mullvad: Diskless infrastructure using stboot in beta
Diskless infrastructure using stboot (in beta) is now available on a pair of WireGuard servers in Sweden.
Minecraft as a Kubernetes admin tool
KubeCraftAdmin : The adventurer’s admin tool
Avoiding the top Nginx configuration mistakes
Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.
Garage, our self-hosted distributed object storage solution
Deuxfleurs is a non-profit based in France that aims to defend and promote individual freedom and rights on the Internet. In their quest to build a d…
Cloudflare Pages: Best server tech since CGI-bin?
Cloudflare Pages 😍 I got into Cloudflare pages because it lets you host static websites with all the latest optimizations conveniently and for free. Setting up a static website with a custom domain is easy, and you get the benefits of automatic SSL, CDN, and latest version of HTTP3. This is how this blog is hosted and…
35M Hot Dogs: Benchmarking Caddy vs. Nginx
Have you ever wondered about the performance delta between Caddy and Nginx? Wonder no more.
Exposing a web service with Cloudflare Tunnel
What if you could host a web service with no ports exposed? With Cloudflare Tunnel, you can!
Dagger: a new way to build CI/CD pipelines
Build powerful software environments and containerized operations from modular components and simple functions. Perfect for complex software delivery and AI agents. Built by the creators of Docker.
Spam blacklisting is out of control
If you got shuned by the society not because of what you did but what your neighbor did, you will cry bloody injustice. This is exactly what is happening in SPAM blacklisting.
An extensive tutorial on how to setup a Pi-Hole
Welcome! In this article, I am going to detail for you what I consider to be the perfect Pi-hole setup instructions for 2023 (yes, I know – as of the writing of this article, it’s still 2022, but we’re close enough).