Systems knowledge you can put to work.
Practical guides for Kubernetes, Linux, networking, observability, automation, and production infrastructure. Written for engineers operating real systems.
Start here
- Kubernetes Cluster operations, workloads, policy, and day-two troubleshooting.
- Rancher & RKE2 Install, upgrade, and run Rancher-managed RKE2 clusters.
- Linux & Systems Administration, kernel behavior, and the host layer under your workloads.
- Networking Load balancing, DNS, segmentation, and tracing packets end to end.
- Storage & Databases Persistent volumes, replication, backup, and recovery that holds up.
- Observability & SRE Metrics, logs, alerting, and reliability practice for production.
Reference designs
- Rancher on Small RKE2 Cluster Deploy Rancher on a highly available three-node RKE2 cluster on your own servers, with Traefik ingress, …
- Provisioning an RKE2 Cluster on Custom VMs Create a Rancher-managed RKE2 custom cluster on VMs or servers you provision yourself, using the node …
- Ingress NGINX Controller on RKE2: Retirement and the Traefik Default How ingress works on RKE2 now that Ingress NGINX is retired: Traefik is the default from v1.36, how to …
Latest writing
Setting Up the Linode (Akamai) Cloud Provider for RKE2
7 min readIntroduction RKE2 runs fine on plain Linode instances, but without a cloud provider the cluster knows nothing about the platform underneath it. Service type=LoadBalancer stays …
Cilium MTU Black Hole: How a Linux Bridge and KubeVirt VMs Silently Broke VXLAN and Kept Longhorn Degraded
24 min readFor about ten hours, roughly 45 Longhorn volumes on one of our production RKE2 clusters sat in a degraded state. Replicas flapped to ERR, rebuilds started and failed, and the …
Four Places PHP Was Hiding: Patching PHP2Shell (CVE-2026-109618/109619) Across the Fleet
16 min readOn 2026-10-21 the PHP project shipped an out-of-band release fixing a pair of vulnerabilities that quickly got the nickname “PHP2Shell”: CVE-2026-109618 and CVE-2026-109619, CVSS …
PostgreSQL High Availability with Patroni and Kubernetes: Enterprise Production Guide
23 min readExecutive Summary PostgreSQL high availability (HA) is critical for enterprise applications requiring minimal downtime and data consistency. This comprehensive guide explores …
The Complete Guide to Kubernetes CPU Limits: When Not Setting Them Makes Sense
11 min readThe Complete Guide to Kubernetes CPU Limits: When Not Setting Them Makes Sense One of the most nuanced decisions in Kubernetes resource management is whether to set CPU limits on …
Polyglot Architecture: Managing Multi-Language Microservices
12 min readIntroduction Modern enterprises increasingly adopt polyglot architectures, leveraging different programming languages for different services based on their strengths. While this …
Pod Security Standards Implementation Guide: Enforcing Container Security in Kubernetes Enterprise Environments
12 min readPod Security Standards (PSS) represent the modern approach to enforcing security policies in Kubernetes clusters, replacing the deprecated Pod Security Policies (PSP). This …
Kubernetes Beyond Docker: Migrating to containerd and What It Means for Your Clusters
11 min readKubernetes has deprecated and removed Docker support, but this doesn’t mean containers are going away. In fact, this architectural shift towards direct integration with containerd …