Skip to content

Infra

Server operation, cloud resources, and network services.
Choose a tag. Hold Command or Control to combine tags.

A hosts file for one service

 1 min A systemd bind mount gave each Snap lobby its own hosts file while leaving the host machine’s resolver file in place.

Apr 15, 2023

Autoscaling with no coordinator

 3 min Symlinked peer status, systemd path activation, and one-neighbor watcher logic form a ring that starts, drains, and stops lobbies without a central controller.

Sep 10, 2022

Snap Game Services

 6 min Keeping competitive VR speedball lobbies available around a closed game server, and scaling down without ending people’s matches.

Sep 10, 2022

Docker transfer settings in kOps

 1 min Exposing Docker transfer settings in kOps required carrying them through internal types, versioned APIs, conversions, copies, and the CRD.

Sep 13, 2021

The target was already there

 1 min One Makefile alias exposed Kubernetes’ existing OpenAPI generator without adding another implementation.

Aug 8, 2019

The type disappeared

 2 min Inlining OpenAPI references preserved fields while removing the type identity that policy transforms needed.

Apr 23, 2019

Assume physical access

 7 min An Exosite webinar on connected-device security: what a datacenter’s layers of protection become when the device is in someone else’s hands.

May 18, 2017

Let the client carry the bytes

 1 min An S3 upload proxy became unnecessary once the service could authorize an upload by returning a presigned URL.

Oct 20, 2016

The old certificate still matters

 1 min A Convox proposal left certificate replacement to CloudFormation and kept the previous certificate available for rollback.

Mar 21, 2016

The stack’s other name

 2 min Convox needed rack-scoped cloud identities while keeping short application names and recognizing stacks created under the old naming scheme.

Feb 8, 2016

bcrypt in the auth query

 2 min A pam_pgsql path could not verify Django’s bc$ bcrypt value directly, so SQL performs the check and returns the submitted password as its own answer.

Sep 6, 2012

pacproxy

 4 min A caching proxy for Arch packages that streamed and cached in one pass, kept HTTP validators as sidecar state, and published its own caveat list.

Dec 20, 2009

Broadband for the Bakken

 3 min Installing satellite broadband at drilling sites and helping build a fixed-wireless ISP on the Montana–North Dakota line.

Apr 1, 2005
No matching items