181
GKE Sandbox: Independent operating system kernel to each container
Help lock down your containers with these Kubernetes Engine features and guidance
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 289 posts.
182
The Evolving Infrastructure of .NET Core
A deep dive into the infrastructure of .NET Core. Challenges, changes and the future.
183
Podman and Buildah for Docker Users
What docker users need to know to move from Docker to Podman and Buildah and the advantages of doing so. Developers/operators can easily move to Podman, do all the fun tasks that they are familiar
184
185
EU governments choose independence from US cloud providers with Nextcloud
European Governments are starting to take digital sovereignty more and more serious, moving away from large, centralized cloud solutions.
186
187
AWS Fargate Deep Dive
AWS Fargate is a serverless technology which lets you run your containers in the cloud without having to worry about the operational overhead of managing the infrastructure. In this article, we talk about what Fargate is and how it works under the hood. We also try to compare it to other AWS Services like Lambda and…
188
AWS Introducing Provisioned Concurrency for Lambda Functions
It’s really true that time flies, especially when you don’t have to think about servers: AWS Lambda just turned 5 years old and the team is always looking for new ways to help customers build and run applications in an easier way. As more mission critical applications move to serverless, customers need more control…
189
Mitigating a DDoS on Mastodon
<p>TLDR:</p> <!-- raw HTML omitted --> <p>This will mainly be a story into how I experienced and reacted to my first real-time attack. As you may or may not ...
190
Scaleway cloud adds AMD EPYC instances
With an ideal mix of compute, memory, and networking, General Purpose virtual machines are the default choice for reliable performance across most common applications. Whether you’re scaling dev/test environments or hosting production-grade applications, these instances deliver consistent performance and value for a…
191
Google’s Cloud TPU Pods are now publicly available in beta
Cloud TPU Pods are now available in beta, helping you train models faster and at lower cost in the cloud.
192
193
Finding Kafka’s throughput limit in Dropbox infrastructure
Dash knows your context, your team, and your work, so your team can stay organized, easily find and share knowledge, and keep projects secure, all from one place.
194
Faster, cheaper, and better: A story of breaking a monolith
On May 21st 2019, we broke search service out of vehicle-service. It was faster, cheaper, and better!
195
196
Infrastructure as Code, Part One
IaC uses code to provision, configure, and manage infrastructure. In part one of this IaC miniseries, I will introduce you to the basic concepts and explain some of the benefits.
197
AWS Control Tower
Earlier this month I met with an enterprise-scale AWS customer. They told me that they are planning to go all-in on AWS, and want to benefit from all that we have learned about setting up and running AWS at scale. In addition to setting up a Cloud Center of Excellence, they want to set up […]
198
Fighting vendor lock-in and designing testable serverless apps
Here is how you can fight vendor lock-in beyond testing on a serverless app, using hexagonal architecture.
199
Making Containers More Isolated: An Overview of Sandboxed Container Technologies
Currently available container-based infrastructure has limitations because containers are not truly sandboxed and share the host OS kernel. The root of the problem is the weak separation between containers when the host OS creates a virtualized userland for each container. This blog covers four unique projects from…
200
201
Oak, a Free and Open Certificate Transparency Log
Update: Feb. 5 2020 The Let’s Encrypt CT logs are now included in approved log lists and are usable by all publicly-trusted certificate authorities. Today we are announcing a new Certificate Transparency log called Oak. The Oak log will be operated by Let’s Encrypt and all publicly trusted certificate authorities will…
202
Benefits of a Monorepo
A monorepo? Isn't that just a weird Facebook and Google thing? Why is PSPDFKit using a monorepo?
203
Helm (the Kubernetes package manager) 3.0.0 has been released
The Helm Team is proud to announce the first stable release of Helm 3.
204
V100 Server On-Prem vs. AWS P3 Instance Cost Comparison
A cost and speed comparison between the Lambda Hyperplane 8 V100 GPU Server and AWS p3 GPU instances. A very similar comparison to the DGX-1.
205
206
207
Trigger a Kernel Panic to Diagnose Unresponsive EC2 Instances
When I was working on systems deployed in on-premises data centers, it sometimes happened I had to debug an unresponsive server. It usually involved asking someone to physically press a non-maskable interrupt (NMI) button on the frozen server or to send a signal to a command controller over a serial interface (yes…
208
How to build a distributed throttling system with Nginx, Lua, and Redis
At the last Globo.com’s hackathon, Lucas Costa and I built a simple Lua library to provide a distributed rate measurement system that depends on Redis and run embedded in Nginx but before we …
209
210