How OpenChoreo Cell architecture and Istio ambient mesh create defense-in-depth for Kubernetes workloads, with mTLS encryption, SPIFFE identities, and L7 authorization policies.
Setting up a Kubernetes homelab on a decade-old gaming laptop with Proxmox, tackling broken network drivers, offline package installs, and Kubeadm bootstrapping.
Architectural patterns and core components for building a distributed tracing infrastructure for cloud-native microservices, covering instrumentation, collection, storage, and visualization.
How to use Cilium Cluster Mesh to connect and manage multiple Kubernetes clusters across availability zones and regions for high availability and fault tolerance.
Understanding how Kubernetes custom controllers work behind the scenes — informers, work queues, reconciliation loops, and building your own controller from scratch.
A practical guide to building Kubernetes operators using Kubebuilder — from scaffolding to custom controllers, reconciliation logic, and deployment.
My experience preparing for and passing the Certified Kubernetes Administrator (CKA) exam on the first attempt, including study resources, tips, and exam strategy.
How to build a secure and scalable API layer using Envoy Proxy with rate limiting, authentication, and load balancing for production workloads.
An introduction to gRPC and Protocol Buffers — how they work together for efficient service-to-service communication with binary serialization.
Implementation details of an Envoy proxy authorization cache using Proxy-Wasm and WebAssembly, integrated with Red Hat 3scale API Management.
High-level design for an authorization cache in Envoy proxy using WebAssembly and Proxy-Wasm, reducing latency by caching auth decisions from external services.
Our experience contributing to open source during Google Summer of Code — working on Envoy proxy WebAssembly extensions with Red Hat 3scale.
