2671
I traced my traffic through a home Tailscale exit node
A practical deep dive into Tailscale exit nodes: route changes, traceroute evidence, DERP fallback, trust boundaries, and why this model can be free.
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,378 posts.
Infrastructure & DevOps
Any year
2672
2673
2674
Building a dependable hosting stack using Hetzner’s servers
SupportBee's support ticket system enables teams to organize, prioritize and collaborate on customer support emails.
2675
The Evolving Infrastructure of .NET Core
A deep dive into the infrastructure of .NET Core. Challenges, changes and the future.
2676
2677
2678
Rainbow Deployments with Kubernetes
or: how you can deploy services to Kubernetes that require long periods of draining. #🌈 🌈 🌈 #If you want to jump directly to the technical solution, check out the project repo. Below is a short story about how we got to this solution.
2679
OWASP Non-Human Identities Top 10
A list of OWASP's Non-Human Identities Top 10 risks for 2025
2680
Kubernetes at Box: Microservices at Maximum Velocity
“Box is the leader in Intelligent Content Management. Its platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI.”
2681
Rebuilding Our Infrastructure with Docker, ECS, and Terraform
Explore technical topics, solutions, and resources for building with Twilio – and beyond.
2682
2683
Running servers and services well is not trivial (2018)
You're probably reading this page because you've attempted to access some part of my blog (Wandering Thoughts) or CSpace , the wiki thing it's part of. Unfortunately you're using a browser version that my anti-crawler precautions consider suspicious, most often because it's too old (most often this applies to versions…
2684
You can serve static data over HTTP
This will be short. I need to let some steam off and flush this thing out of my mind because it's already hanging around for too long. The story goes like this: we're prototyping small tool for whatever and we're at the point where there is a visible need to store some (most likely) static data. Oh, the thing is in…
2685
GitHub Pages with a custom root domain is slow
GitHub Pages with a custom root domain is terribly slow. It will make 35% of your visitors go away.
2686
2687
Hetzner is working on LLM Inference
Hetzner has launched an experimental LLM inference API. I tested its Qwen model—and have a few guesses about where the product could go next.
2688
2689
Podman and Buildah for Docker Users
What docker users need to know to move from Docker to Podman and Buildah and the advantages of doing so. Developers/operators can easily move to Podman, do all the fun tasks that they are familiar
2690
There are only 12 binaries in Talos Linux
Updated October 2025 to reflect the growth in binaries from 12 to <50.
2691
Untangling microservices, or balancing complexity in distributed systems
The microservices honeymoon period is over. Uber is refactoring thousands of microservices into a more manageable solution [1]; Kelsey Hightower is predicting monoliths are the future [2]; and even Sam Newman is declaring that microservices should never be the default choice, but rather a last resort [3]. What’s going…
2692
Centrifuge: a reliable system for delivering billions of events per day
Discover Centrifuge—a system designed for high-performance, exact data delivery. Learn how it handles massive event volumes, ensuring no data loss. Join Segment's innovation.
2693
Cloud Traffic
I recently watched Build an enterprise-grade service mesh with Traffic Director , featuring Stewart Reichling and Kelsey Hightower of GCP, and of course Google Cloud’s Traffic Director . Coming at this with a brain steeped in 5½ years of AWS technology and culture was surprising in ways that seem worth sharing.
2694
2695
Improving NGINX Performance with Kernel TLS and SSL_sendfile
Deliver modern applications with NGINX. Explore high-performance load balancing, API gateways, and web server solutions trusted by top global enterprises.
2696
Why Tarsnap won't use DynamoDB
As I've blogged about before, the Tarsnap server code synthesizes a log-structured filesystem on top of Amazon S3 . As a result of this design, for each block of data stored on Tarsnap, the server code needs to keep track of two key-value pairs: First, to map a 64-bit machine number and a 256-bit block ID to a 64-bit…
2697
2698
Backblaze B2 Drops Download Pricing by 60%
Effective immediately B2 download pricing is only $.02/GB. B2 cloud storage pricing is now 1/4th the price of Amazon S3, Google Cloud, or Azure.
2699
When Every Network is 192.168.1.x
Solving the conflicting subnet problem with overlay addressing, WireGuard, and 1:1 NAT.
2700
MQTT vs. Kafka: An IoT Advocate's Perspective
In this blog series, I hope to summarize what Kafka and MQTT are and how they can both fit into an IoT architecture.