Designing SMART key performance indicators (KPI)

With a set of requirements in place, we will now move on to consider how to measure whether the technical and business requirements have been met. To manage a service well, it is important to understand which behaviors matter, and how to measure and evaluate these behaviors. These must always be considered in the context … Read more

Best practices for virtual private clouds (VPCs) design

This article introduces best practices and typical enterprise architectures for virtual private clouds (VPCs) design with AWS, Azure or Google Cloud. Below, I tried to list a common steps in organizing right process for creating complex network solution, which meets current needs and ready for future enchantments. General principles Identify decision makers, timelines, and pre-work As a first step … Read more

Explore, compromise and harden Kubernetes pods

By default, many container services run as the privileged root user. Every container is just a running process. Preventing root execution by using non-root containers (configured when the image is built) or a rootless container engine (some container engines run in an unprivileged context rather than using a daemon running as root; for example, podman) limits the … Read more

Istio service mesh: sidecar vs ambient

A service mesh is a dedicated infrastructure layer built into an application that controls service-to-service communication in a microservices architecture. It controls the delivery of service requests to other services, performs load balancing, encrypts data, and discovers other services. Istio is a popular solution for service mesh, managing the different microservices that make up a … Read more