Posts

A query that should have been a boring index scan turned into a full-table shuffle because the planner guessed wrong.

We flipped our edge servers from CUBIC to BBR and measured the actual win for our traffic, which was smaller than the marketing suggests

After a year on Flux and a quarter on Argo, here is a practical comparison from a four-person platform team

I ran a two-node Proxmox cluster for nine months and fought quorum constantly, and here is the specific set of workarounds and why I eventually added a third

A service that could no longer bind to low ports after an innocent systemd change, and what I learned about capability sets

A weekend of measuring, swapping, and tuning reduced my rack's idle draw from 220W to 180W, with surprises

Getting Let's Encrypt DNS-01 working when the authoritative internal view is different from the public view, without pulling my hair out

A pattern I now use for testing every firewall and routing change before it touches the edge: cheap, repeatable, and on a laptop

A collection of the mistakes I made designing custom resource definitions, and the patterns that emerged after a few painful migrations

Small kubectl plugins I wrote over the past year that punch above their weight in daily workflows

Replacing an epoll loop with io_uring gave a 1.8x throughput boost in a naive benchmark, and a 0.9x loss in a realistic one

I set up BGP between two homelab routers to learn, and reached some unromantic conclusions about when it earns its keep

How I sized (and then re-sized) a UPS for a homelab that started small and grew, and the surprising role of runtime vs capacity

Our Hetzner fleet went from 'cloud-init runs for four minutes per boot' to 'image is ready in seconds' with a reasonable Packer pipeline

Ansible got us from 10 to 200 managed hosts, but somewhere between 500 and 1000 it started to grind, and here are the specific pain points