Topics /
The most popular blog posts about infrastructure & devops on Hacker News. 4,375 posts.
The first post introduced the IPIngressFilterPath and IPEgressFilterPath feature for the upcoming systemd release 243 to support custom BPF programs as firewall for services. There was a simple example for a minimal BPF program written in C and how to load it for a systemd service. Then there was a standalone program…
Using Iceberg allows us to pick the optimal "big data" compute environment for the specific requirements we have. There's no need to limit yourself to a single solution.
Yesterday the OpenSSL Project released an update to address the CVE-2014-0160 vulnerability, nicknamed “Heartbleed.” This serious vulnerability affects a..
If you’ve perused the ActivityPub feed of certificates whose keys are known to be compromised , and clicked on the “Show More” button to see the name of the certificate issuer, you may have noticed that some issuers seem to come up again and again. This might make sense – after all, if a CA is issuing a large volume…
No single cloud fits all. Explore how we build a more flexible future with hybrid cloud.
You remember that time you passive-aggressively completed a story in the most useless way possible to check that checkbox? That’s most…
Back in 2015 we deployed ECMP routing - Equal Cost Multi Path - within our datacenters. This technology allowed us to spread traffic heading to a single IP address across multiple physical servers.
Discover more about what's new at AWS with Elastic Load Balancing Adds Support for Host-based Routing and Increased Rules on its Application Load Balancer
Since declaring our intention to leave the cloud in October, we've been busy at work making it so. After a brief detour down a blind alley with an enterprise Kubernetes provider, we found our stride building our own tools, and successfully moved the first small application out of the cloud a few weeks ago. Now our…
Threats to your IT infrastructure (AWS accounts & credentials, AWS resources, guest operating systems, and applications) come in all shapes and sizes! The online world can be a treacherous place and we want to make sure that you have the tools, knowledge, and perspective to keep your IT infrastructure safe & sound…
.NET is a managed runtime, which means that it provides high-level features that ‘manage’ your program for you, from Introduction to the Common Language Runtime (CLR) (written in 2007):
Recently I’ve been thinking a lot about infrastructure complexity, and the current state of infrastructure as code. This is problem space that many talented people are tackling.
If you ever have run a Linux-based operating system you are probably aware of the way that software is usually distributed on them: Using a software repository. Repositories are great for numerous …
Are cross-project changes in a single atomic commit the key advantage of monorepos? I do not think so.
In 2001, Microsoft's former CEO— Steve Ballmer— was quoted by the online tech news publication, The Register, saying: Linux is a
On the need for low-carbon and sustainable computing and the path towards zero-carbon computing.
Google has acquired Crusoe’s southeast Wyoming data center site after Crusoe completed site selection, approvals, and power strategy for the campus.
Google Cloud’s new Accelerator-Optimized (A2) VM family is based on the NVIDIA Ampere A100 GPU, and designed for demanding HPC and ML workloads.
In my last post I talked about why modern observability has become so expensive. At the end of the post I posit a question: What if by default we never send any telemetry at all? In this post I’m goin
I recently made a setup at work where I had a Nginx server facing the user, which would forward requests to a service running behind an AWS Elastic Load Balancer (aka. ELB). That in itself doesn’t sound like a difficult task, you just find the hostname for the ELB and point Nginx at it with a proxy_pass statement like…
This is the BliKVM PCIe, a full computer on a PCI Express card. This is an IP KVM (Internet Protocol Keyboard-Video-Mouse) that can be put inside another computer or server. Most server motherboards already have remote 'lights-out' management functionality built in. Most frequently this is referred to as IPMI…
Step by step guide to build highly optimized docker images for Golang web-app development and deployment
How to provision a new NixOS machine on Digital Ocean with nixos-infect and automatically connect it to your Tailscale network, then use that server to set up a fully private Minecraft world.
Today marks the start of a new era for IPv6. Building on the great success of last year’s World IPv6 Day, this year’s “World IPv6 Launch” will bring together major Internet service providers (ISPs), home networking equipment manufacturers, and web companies around the world to permanently enable IPv6 for their…
Perhaps you too remember that crayon-factory segment from Sesame Street. The one where they show dramatic shots of hot orange wax getting poured into vats and molds and eventually labeled and boxed up into neat packages of the rainbow, while Skrillex-junior music played in the background. This was my favorite segment…
