Blog

Engineering insights

Deep dives into infrastructure, DevOps, platform engineering, and networking. Written by engineers, for engineers.

2026

February 18, 2026·4 min read·
KubernetesSecurityDevOpsInfrastructure

Kubernetes Security Hardening: A Production Checklist

Default Kubernetes installations are not production-ready. Here's our battle-tested checklist for locking down clusters — from RBAC to network policies, pod security, and runtime protection.

Read article
February 15, 2026·3 min read·
NetworkingBGPAS210622Infrastructure

Building a Resilient Network: Our Journey with AS210622

How we designed and built our autonomous system from scratch — BGP peering, transit selection, and lessons learned operating AS210622.

Read article
February 12, 2026·6 min read·
DevOpsTerraformInfrastructureAutomation

Terraform at Scale: Managing Multi-Environment Infrastructure Without Losing Your Mind

Terraform is easy to start with and hard to scale. Here's how we structure Terraform for 50+ environments — state management, module design, CI/CD integration, and the patterns that keep us sane.

Read article
February 10, 2026·3 min read·
Platform EngineeringDevOpsDeveloper ExperienceKubernetes

Platform Engineering: Building Golden Paths for Your Developers

What is platform engineering, why every growing engineering team needs it, and how to start building your Internal Developer Platform.

Read article
February 8, 2026·6 min read·
DevOpsKubernetesReliabilityDeployments

Zero-Downtime Deployments: Blue-Green, Canary, and Rolling Strategies Compared

Your users shouldn't know you're deploying. We compare blue-green, canary, and rolling deployment strategies — when to use each, how to implement them, and the tradeoffs nobody talks about.

Read article
February 5, 2026·5 min read·
SREIncident ResponseReliabilityOperations

Building an Incident Response Playbook That Works at 3 AM

Incidents don't wait for business hours. Here's how we structure incident response — from detection to post-mortem — so the on-call engineer at 3 AM knows exactly what to do.

Read article
January 28, 2026·3 min read·
SREReliabilityMonitoringObservability

SRE Practices: Implementing SLOs That Actually Work

A practical guide to implementing Service Level Objectives that balance reliability with feature velocity. Lessons from running production systems at scale.

Read article
January 25, 2026·7 min read·
NetworkingKubernetesContainersInfrastructure

Container Networking Deep Dive: From veth Pairs to Service Mesh

How does a packet get from one container to another? We trace the journey through Linux networking primitives — veth pairs, bridges, iptables, and how Kubernetes networking actually works under the hood.

Read article
January 20, 2026·5 min read·
DevOpsGitOpsKubernetesInfrastructure

GitOps: Infrastructure as Code Done Right

GitOps goes beyond storing configs in Git. It's a complete operational model where Git is the single source of truth and reconciliation is continuous. Here's how we implement it.

Read article
January 16, 2026·7 min read·
DatabasePostgreSQLPerformanceInfrastructure

PostgreSQL Performance Tuning for Production Workloads

Default PostgreSQL settings are designed for a laptop. Here's how we tune Postgres for production — memory, connections, vacuum, indexing strategies, and the queries that kill your database at 3 AM.

Read article
January 12, 2026·5 min read·
ObservabilityMonitoringSREInfrastructure

Observability Beyond Monitoring: Logs, Metrics, and Traces in Practice

Monitoring tells you something is broken. Observability tells you why. A practical guide to implementing the three pillars — and how they work together to reduce MTTR.

Read article
January 5, 2026·6 min read·
NetworkingSecurityAS210622DDoS

DDoS Mitigation at the Network Edge: How We Keep AS210622 Clean

DDoS attacks are inevitable when you operate your own network. Here's how we built multi-layered mitigation into AS210622 — from BGP Flowspec to XDP filtering and scrubbing centers.

Read article