91
2025 Tariff Impacts at Puget Systems
Tariffs have been affecting numerous industries—including ours. This post explains the tariff impact on Puget Systems' pricing and our strategic approach.
Topics /
Infrastructure & DevOps
The most popular blog posts about infrastructure & devops on Hacker News. 151 posts.
92
Case Study: ByteDance Uses eBPF to Enhance Networking Performance
Bytedance, a global technology company operating a wide range of content platforms around the world at massive scale, faced significant challenges in ensuring performance and stability across its data centers. With over a million servers running containerized applications, the company required a networking solution…
93
The DevOps Engineer's Handbook
Rather than technology alone, it's the practices, processes, and culture changes DevOps introduces that can most positively impact your software delivery.
94
Decreasing Certificate Lifetimes to 45 Days
Let’s Encrypt will be reducing the validity period of the certificates we issue. We currently issue certificates valid for 90 days, which will be cut in half to 45 days by 2028. This change is being made along with the rest of the industry, as required by the CA/Browser Forum Baseline Requirements, which set the…
95
Native ACME support comes to Nginx
NGINX and Let's Encrypt share a common vision of an open and secure web. Now, with built-in support for ACME, the world's most popular web server, reverse proxy and ingress controller for Kubernetes can simplify certificate management for everyone. From the home lab to scaled-out, mission-critical enterprise…
96
Preview: Amazon S3 Tables and Lakehouse in DuckDB
We are happy to announce a new preview feature that adds support for Apache Iceberg REST Catalogs, enabling DuckDB users to connect to Amazon S3 Tables and Amazon SageMaker Lakehouse with ease.
97
Backblaze Drive Stats for Q3 2025
Read the Q3 2025 Drive Stats report to see the latest annualized failure rates, and an analysis of how we define failure in the first place.
98
How we scaled Slack to support 1000s of developers
Here’s how we built a two-way Slack bridge with full impersonation to deliver white glove support to thousands of Railway developers from our help center.
99
Tailscale Services
Tailscale Services is a new way to define available resources on your network and expand the granularity of your access controls to resources that may not have Tailscale installed on them.
100
Push Notifications for Decentralized Services
How mobile push notifications currently bring centralization to decentralized services, and how we can avoid it, even for mainstream configurations. Published the 31/01/2025 This post will focus on Android. We all know decentralized applications: emails, Mastodon (and the Fediverse), Nextcloud and other clouds, Git…
101
How Netflix Accurately Attributes eBPF Flow Logs
By: Cheng Xie, Bryan Shultz, and Christine Xu
102
Building the largest known Kubernetes cluster
Learn about the architectural innovations we used to build a 130,000-node Kubernetes cluster, and the trends driving demand for these environments.
103
OWASP Non-Human Identities Top 10
A list of OWASP's Non-Human Identities Top 10 risks for 2025
104
Running our Docker registry on-prem with Harbor
On hosting images without the price tag.
105
SourceFS: A 2h+ Android build becomes a 15m task with a virtual filesystem
SourceFS - a high-performance virtual filesystem that builds Android 9× faster, cuts compute costs by 14×, and reduces disk usage by 83× — unlocking a new level of developer productivity.
106
'I paid for the whole GPU, I am going to use the whole GPU'
A guide to maximizing the utilization of GPUs, from cloud allocations to FLOP/s.
107
Reverse engineering GitHub Actions cache to make it fast
We reverse engineered GitHub Actions cache internals to transparently route cache requests through our faster, colocated cache. This delivered up to 10x faster cache performance for some of our customers, with no code changes required and no need to maintain forks of upstream actions.
108
Breaking Up with On-Call
This article is about why on-call in it's current state in big-tech is flawed, or how to properly develop software.
109
GitHub CI/CD observability with OpenTelemetry step by step guide
Instrument your CI/CD pipelines with OpenTelemetry. A step-by-step guide to capturing GitHub Actions data via the Collector.
110
You want microservices, but do you need them?
Before you default to microservices, weigh hidden costs and consider a modular monolith or SOA. Learn when Docker delivers consistency and scale—without sprawl.
111
LLM Observability in the Wild – Why OpenTelemetry Should Be the Standard
LLM Observability breaks in wild today as new libraries like OpenInference don't adhere to OpenTelemetry standards leading to silos and suboptimal performance for users who want to tie LLM observability with rest of their observability stack
112
Migrating from AWS to a European Cloud – How We Cut Costs by 62%
This post describes how we successfully migrated our serverless offering from AWS US-East to OVHCloud North America, reducing our monthly spend from...
113
Model Once, Represent Everywhere: UDA (Unified Data Architecture) at Netflix
Introducing UDA, the knowledge-graph-based architecture that translates conceptual domain models into consistent schemas and data…
114
Azure's Weakest Link? How API Connections Spill Secrets
Binary Security found the undocumented APIs for Azure API Connections. In this post we examine the inner workings of the Connections allowing us to escalate privileges and read secrets in backend resources for services ranging from Key Vaults, Storage Blobs, Defender ATP, to Enterprise Jira and SalesForce servers.
115
Stategraph: Terraform state as a distributed systems problem
Terraform state is a distributed systems problem masquerading as file storage. Graph state fixes the bottlenecks.
116
SecretSpec: Declarative Secrets Management
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix.
117
Scaling request logging with ClickHouse, Kafka, and Vector
How we solved request logging at scale by moving from MariaDB to ClickHouse, Kafka, and Vector after our deprecated database engine couldn't keep up with billions of monthly requests.
118
The Connectivity Standards Alliance Announces Zigbee 4.0 and Suzi
DAVIS, California – November 18, 2025 – The Connectivity Standards Alliance (Alliance) announced today the release of Zigbee 4.0 and Suzi, the new brand for Zigbee’s Sub-GHz feature…
119
We built another object storage
High-performance object storage exists, but the economics make it unusable at scale. FractalBits breaks out of the high-performance trap.
120
Intelligent Kubernetes Load Balancing at Databricks
How Databricks uses client-side load balancing to improve gRPC traffic, reduce tail latency, and handle ingress with real-time service discovery.