Walks through gRPC’s streams and messages starting from the structure of HTTP/2, and looks at why gRPC is used for internal service-to-service communication.
How eBPF hooks into the kernel, passes the verifier and JIT, and shares state through maps — and why iptables’ linear chains and eBPF’s hash maps diverge once a cluster reaches thousands of Pods, seen through Cilium and Calico.
With the AWS free tier running out, I put Raspberry Pi OS on a couple of Raspberry Pis, got them onto the network, and built a Kubernetes cluster with K3s.
Starting from the three pillars of observability, this post walks through the Prometheus architecture and the role of exporters, then builds node-exporter and Redis monitoring from scratch with docker-compose.
From SLOs, through why 100% availability is impossible, to error budgets and SLIs — instead of listing dictionary definitions, this follows how Google’s SRE treats reliability metrics as a decision-making device.
From the structure of the ~/.aws/ directory to the five paths for obtaining temporary credentials, and finally to the last scene of saml2aws collapsing under Passkey — a single tour through how AWS CLI credentials actually work.
Tracing the internals of a service mesh from kernel level — Istio’s Control Plane and Data Plane architecture, sidecar injection mechanism, iptables traffic interception, xDS protocol, and mTLS Zero Trust.
A deep dive into Kubernetes pod networking internals — from the flat network model and CNI spec, to same-node communication via veth pairs and bridges, to cross-node communication via VXLAN encapsulation.
From network interfaces and Ethernet frames to routing tables and Netfilter/iptables — a deep dive into how packets actually move at the OS level, with ifconfig, ip route, and iptables commands.