391
Topics /
Infrastructure & DevOps
The most popular blog posts about infrastructure & devops on Hacker News. 4,374 posts.
392
Replacing Kubernetes with systemd (2024)
In this post I go through the journey of overusing Kubernetes and how systemd can actually do most of what I use it for.
393
Intro Guide to Dockerfile Best Practices
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
394
DevOps is broken
A Critique of How We've Fooled Ourselves for Years.
395
The “mail is hard” myth
TL;DR: - Mail is not hard: people keep repeating that because they read it, not because they tried it - Big Mailer Corps are quite happy with that myth, it keeps their userbase growing - Big Mailer Corps control a large percentage of the e-mail address space which is good for none of us - It's ok that people have…
396
397
Docker 0.7 runs on all Linux distributions
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
398
399
Why are we templating YAML? (2019)
I was at cfgmgmtcamp 2019 in Ghent, and did a talk which I think was well received about the need for some Kubernetes configuration management as well as the solution
400
So you want to expose Go on the Internet
Back when crypto/tls was slow and net/http young, the general wisdom was to always put Go servers behind a reverse proxy like NGINX. That’s not necessary anymore!
401
Windows Server 2019 Includes OpenSSH
The OpenSSH client and server are now available as a supported Feature-on-Demand in Windows Server 2019 and Windows 10 1809! The Win32 port of OpenSSH was first included in the Windows 10 Fall Creators Update and Windows Server 1709 as a pre-release feature. In the Windows 10 1803 release, OpenSSH was released as a…
402
Behind the scenes of Bun Install
Learn how Bun is able to cut install times by up to 25×. Bun skips Node.js's overhead with direct system calls, cache-friendly data layouts, OS-level copy-on-write, and full-core parallelism.
403
Emerging Architectures for Modern Data Infrastructure
To help data teams stay on top of the changes happening in the industry, this article reviews an updated set of data infrastructure architectures.
404
Litestream v0.5.0
Same Litestream goodness but better, faster, stronger
405
How I run my servers (2022)
I've been writing recently about servers and internet infrastructure 1 . A lot of this writing is predicated on running server software on a VM or physical machine, rather than using a more cloudy solution, which is somewhat unpopular these days. However, I think it's a pretty reasonable way to do things, and it's not…
406
Docker operations slowing down on AWS
I’m CC’d on mails when things get slow, but never when things work as expected or are fast…oh well. Like an umpire in baseball, if we are doing our jobs, we are invisible. Subjec…
407
MagicDNS is generally available
Tailscale’s MagicDNS is now GA and enabled by default for new tailnets. Say goodbye to IP address management and access your devices using simple, memorable DNS names for enhanced connectivity.
408
Behind the scenes, AWS Lambda
How does AWS Lambda work under the hood? Let's find out together!
409
Let’s Encrypt 2016 in Review
Our first full year as a live CA was an exciting one. I’m incredibly proud of what our team and community accomplished during 2016. I’d like to share some thoughts about how we’ve changed, what we’ve accomplished, and what we’ve learned. At the start of 2016, Let’s Encrypt certificates had been available to the public…
410
411
Google Hits 50% IPv6
IPv6 has reached a major milestone, with around half of Google’s users now accessing its services over IPv6.
412
Reasons Kubernetes is so complex
Preface Hello friends! It’s been a while. I’ve been finding it very hard to write while holding up a full-time job, and I’ve also been dealing with some very...
413
Winding down Google Sync and Less Secure Apps support
MDM push of password based IMAP, CalDAV, CardDAV, STMP, POP and Exchange ActiveSync (Google Sync) will no longer work for customers who try to connect to an LSA for the first time.
414
Stack Overflow: How We Do Deployment
This is #3 in a very long series of posts on Stack Overflow’s architecture.Previous post (#2): Stack Overflow: The Hardware - 2016 EditionWe’ve talked abou...
415
Migrating Dropbox from Nginx to Envoy
In this blogpost we’ll talk about the old Nginx-based traffic infrastructure, its pain points, and the benefits we gained by migrating to Envoy . We’ll compare Nginx to Envoy across many software engineering and operational dimensions. We’ll also briefly touch on the migration process, its current state, and some of…
416
Golang SSH Security
Working on a project for a client recently, I needed to speak the SSH protocol in Golang code. So I started with the x/crypto/ssh package, part of the suite of libraries from the Golang developers which is not part of the standard library and not part of their usual compatibility guarantees, but more along the lines…
417
SSH tricks
This post is part of my “Unix fundamentals” series. Recent posts in this series include settling into Unix , standalone lexers with lex , and sculpting text with regex, grep, sed and awk .
418
419
420
Mullvad: Diskless infrastructure using stboot in beta
Diskless infrastructure using stboot (in beta) is now available on a pair of WireGuard servers in Sweden.