New Posts
System Design Interview: Scaling Single Server
Scaling past one server: stateless API servers, sharded memory caches, consistent hashing, Raft or Paxos replication, and DNS to balance load balancers.
Docker: The Container Metaphor with Profound Revolution
Docker is more than virtualization: hermetic images bundle app, config, and dependencies for universal tooling, atomic upgrades, and stateless containers.
Istio: Noninvasive Governance of Microservices on Hybrid Cloud
How Istio injects an Envoy proxy into each Kubernetes pod for canary releases, secure RPC, policy enforcement, and telemetry with no service code changes.
Killer Apps of Message Queues
When message queues beat RPC: absorbing traffic spikes with pull-based flow control, pub/sub to cut reverse dependencies, and async results for slow calls.
A Primer on Secure Communication Channels
Why clear text, symmetric keys, and raw public keys fail, how PKI and certificate authorities solve key distribution, and what a compromised CA breaks.
Dependency Update and Artifacts Promotion in Multi-repo Project
Istio's multi-repo layout loses monorepo atomicity and leaves Bazel dependency SHAs stale. A cron job opening update PRs settles for eventual consistency.