Topics /
Infrastructure & DevOps
The most popular blog posts about infrastructure & devops on Hacker News. 4,374 posts.
Scaling our observability platform by embracing wide events and replacing OTel
Read how we scaled our observability platform from 19PB to 100PB and 500 trillion rows by replacing OpenTelemetry with a native ClickHouse-to-ClickHouse pipeline, embracing wide events and cutting CPU usage by 90%.
How the modern containerization trend is exploited by attackers
This MacKeeper report will tell you about 6 major data breaches that happened in 2018.
Blending complex systems made my latency 10x higher
Every time someone reports higher latency after migrating to Kubernetes, the root cause is an assumption that changed. This is one of those stories.
Eliminating JavaScript cold starts on AWS Lambda
Porffor can run on Lambda now!
Timescale Cloud: Multi-cloud, fully-managed time-series in AWS, Azure, and GCP
Fully managed PostgreSQL from the creators of TimescaleDB. 99.9% uptime SLA, 10,000+ IOPS, columnar compression up to 95%, and built-in search. Try it free.
Best practices for managing and storing secrets like API keys and credentials
We have compiled a list of some of the best practices to prevent API key leakage and keep secrets and credentials safe. Secrets management doesn’t have a one-size-fits-all approach, so this list considers multiple perspectives so you can be informed in deciding to or not to implement strategies.
Run More Stuff in Docker
In 2020, Docker is the best medium for distributing and running most developer-facing software . It’s widely accepted that Docker is great for building and deploying the artifacts for your enterprise web app, but this is less well known when it comes to things like developer tools. However, running tools in containers…
Encryption at Rest: Whose Threat Model Is It Anyway?
Head’s up: This is a blog post about applied cryptography, with a focus on web and cloud applications that encrypt data at rest in a database or filesystem. While the lessons can be broadly a…
An almost perfect rsync over SSH backup script
Creating backups is a basic necessity for anyone who stores data. With the help of a dedicated server, the Linux operating system and the rsync software, you can securely and efficiently retrieve data from any computer via an SSH connection and store it in a backup. It doesn’t matter if there is another Linux server…
Dagger: A shell for the container age
Build powerful software environments and containerized operations from modular components and simple functions. Perfect for complex software delivery and AI agents. Built by the creators of Docker.
Train an AI model once and deploy on any cloud
Organizations are increasingly adopting hybrid and multi-cloud strategies to access the latest compute resources, consistently support worldwide customers, and optimize cost. However…
Unikernels were hard. key word: were
Justin Cormack, who worked on MirageOS back in the day, called me at the pub to talk about why unikernels are coming back. The friction that made them hard is gone, the operating system is design debt, and if you care about security you should seriously consider them.
Building Permanent and Censorship-Resistant Blog with Ethereum ENS and IPFS
The internet nowadays is ephemeral. Layers upon layers of trusted 3rd parties are necessary to distribute content online. It requires ongoing maintenance and is susceptible to censorship or hostile takedowns. In this blog post, I describe the steps I took to host my blog in a trustless, permanent, and…
Kubernetes on Oxide: How customer needs shaped our integrations
How customer needs shaped Oxide's Kubernetes integrations.
Ways we harden our KVM hypervisor at Google Cloud: Security in plaintext
Google Cloud uses the open-source KVM hypervisor that has been validated by scores of researchers as the foundation of Google Compute Engine and Google Container Engine , and invests in additional security hardening and protection based on our research and testing experience. Then we contribute back our changes to the…
Workers Cache
We are launching Workers Cache, a regionally tiered cache that sits directly in front of your Worker entrypoints. Infinitely composable, configured via standard HTTP headers
Our container platform is in production. It has GPUs. Here's an early look
We’ve been working on something new — a platform for running containers across Cloudflare’s network. We already use it in production, for AI inference and more. Today we want to share an early look at how it’s built, why we built it, and how we use it ourselves.
Geolocating requests with Google Load Balancer for free
Insights, guides, and product updates from Cloud Intelligence™.
Amazon S3 now supports the ability to append data to an object
Discover more about what's new at AWS with Amazon S3 Express One Zone now supports the ability to append data to an object
Crawling a billion web pages in just over 24 hours, in 2025
For some reason, nobody's written about what it takes to crawl a big chunk of the web in a while: the last point of reference I saw was Michael Nielsen's post from 2012 .
Cloud TPU VMs are generally available
Cloud TPU VMs with Ranking & Recommendation acceleration are generally available on Google Cloud. Customers will have direct access to TPU host machines.
Is there hope for IPv6?
Last year Georgia Tech’s Internet Governance Project teamed up with ICANN’s Office of the Chief Technology Officer to research the economic factors affecting the decisions of network operators to deploy Internet Protocol version 6 (IPv6). The study was commissioned because we both believe that the Internet community…
The cost of cloud, a trillion dollar paradox
The pressure the cloud puts on margins can start to outweigh the benefits you scale and growth slows. Understand how much market cap is being suppressed by the cloud to help inform the decision-making framework on managing infrastructure as companies scale.