New Posts

Notes: The Lean Startup

Notes: The Lean Startup

Notes on Eric Ries's The Lean Startup: validated learning, MVPs, Build-Measure-Learn, vanity vs cohort metrics, pivots, and sticky, viral and paid growth.

Notes: Venture Deals

Notes: Venture Deals

Notes on Venture Deals by Brad Feld and Jason Mendelson: option pools, liquidation preference, pay-to-play, anti-dilution, board control, and no-shop clauses.

Scaling Istio

Scaling Istio

Trim xDS config and metrics to stop istio-proxy OOMKills, and keep istiod alive through scale-outs with discoverySelectors, HPA tuning, and idle timeouts.

Work Around Max Count of Security Group Rules on EKS

Work Around Max Count of Security Group Rules on EKS

EKS NLB Services can exhaust the 1000 security group rules allowed per ENI. Managing rules yourself with consecutive static NodePorts cuts 5 per Service to 2.

Layer-4 Load Balancer & Zero-downtime Autoscaling and Upgrade

Layer-4 Load Balancer & Zero-downtime Autoscaling and Upgrade

externalTrafficPolicy: Local drops NLB traffic on scale-in and rolling upgrades. IP targets or ProxyTerminatingEndpoints, plus a preStop drain, fix it.

Kubernetes Networking From the First Principles

Kubernetes Networking From the First Principles

How Pod-to-Pod, ClusterIP, and NodePort traffic flows through network namespaces, veth pairs, the cbr0 bridge, VXLAN, and kube-proxy iptables NAT.