Join us
Updates from DevOpsDayLA...
Open source security just hit a new level: self-spreading worms, AI-run attacks, and registry abuse at a massive scale. Shai-Hulud, GlassWorm, and AI-orchestrated intrusions show how fast threats now move, and how easily one stolen token can infect entire ecosystems. The supply chain has changed. Our defenses must too.
Oracle performance issues rarely come from a single metric. This guide breaks down the most important Oracle performance indicators across instance health, memory, storage, waits, SQL, and availability, and shows how to use them together to detect bottlenecks early and prevent downtime.
To truly master Kubernetes, you need a safe sandbox, and running a lightweight distribution is the perfect solution for your local development workflow. These smaller K8s flavors provide a full-featured, yet constrained, environment that is easy on system resources. Both MicroK8s (maintained by Canonical) and k3s (from Rancher) are popular, production-ready options that deliver the core K8s experience with minimal operational burden, low storage needs, and simple networking setups.
These two platforms are fantastic for learning, experimentation, rapid testing, and skill development. If you don't know which one to choose, this post will give you the quick overview you need to decide.
AWS rolled out a newaws loginCLI command using OAuth 2.0 with PKCE. It grabs short-lived credentials, finally pushing out those dusty long-lived access keys. But here’s the hitch:The remote login flow opens up a phishing gap. Since the CLI session and browser session aren’t bound, attackers could sp.. read more
SQLite’sJSON virtual generated columnspunch way above their weight. They let you index JSON fields on the fly, no migrations, no whining. Computed like real columns, queryable like real columns, indexable like real columns. But from JSON. Want flexibility without surrendering speed? This flips the s.. read more
To stop a wave of scraping on their self-hosted Forgejo, the author stacked defenses like a firewall architect on caffeine. First camemanual IP rate-limiting. ThenNGINX caching and traffic shaping. Finally:Iocaine 3. That last one didn’t just block bots, it lured them into a maze of junk pages. The .. read more
A team movedover 1 billion production records- no downtime, no drama. The stack: dual writes, Kafka retries, and idempotent inserts to keep it clean. They ranshadow readsto sniff for errors, chunked the transfers with checksums, and held off indexing to keep inserts fast. Caches got warmed early to .. read more
Reddit successfully migrated its monolithic, high-traffic Comments service from legacy Python to modern Go microservices with zero user disruption. This was achieved by using a "tap compare" for reads and isolated "sister datastores" for writes, ensuring safe verification of the new code against pro.. read more
ParadeDB brings Elasticsearch-stylefacetingtoPostgreSQL, ranked search results and filter counts, all in one shot. No extra passes. It pulls this off with a customwindow function, planner hooks, andTantivy's columnar index under the hood. That's how they’re squeezing out10×+ speedupson hefty dataset.. read more
