New Posts

System Design Interview: Scaling Single Server

System Design Interview: Scaling Single Server

Scaling past one server: stateless API servers, sharded memory caches, consistent hashing, Raft or Paxos replication, and DNS to balance load balancers.

Docker: The Container Metaphor with Profound Revolution

Docker: The Container Metaphor with Profound Revolution

Docker is more than virtualization: hermetic images bundle app, config, and dependencies for universal tooling, atomic upgrades, and stateless containers.

Istio: Noninvasive Governance of Microservices on Hybrid Cloud

Istio: Noninvasive Governance of Microservices on Hybrid Cloud

How Istio injects an Envoy proxy into each Kubernetes pod for canary releases, secure RPC, policy enforcement, and telemetry with no service code changes.

Killer Apps of Message Queues

Killer Apps of Message Queues

When message queues beat RPC: absorbing traffic spikes with pull-based flow control, pub/sub to cut reverse dependencies, and async results for slow calls.

A Primer on Secure Communication Channels

A Primer on Secure Communication Channels

Why clear text, symmetric keys, and raw public keys fail, how PKI and certificate authorities solve key distribution, and what a compromised CA breaks.

Dependency Update and Artifacts Promotion in Multi-repo Project

Dependency Update and Artifacts Promotion in Multi-repo Project

Istio's multi-repo layout loses monorepo atomicity and leaves Bazel dependency SHAs stale. A cron job opening update PRs settles for eventual consistency.