Technical notes on distributed systems, Linux kernel networking, BGP routing, and infrastructure orchestration at scale. Practical experiences from production environments.
The ultimate test of IaC maturity: refactoring massive codebases without triggering a single resource recreation. State blast-radius reduction and zero-churn refactoring.
Moving beyond risky CLI state manipulation. How native moved and import blocks allow seamless zero-downtime refactoring and declarative onboarding in Git.
The honest confession: why creating heavy internal modules often leads to leaky abstractions, 60+ passthrough variables, and diamond dependency conflicts.
Securing Terraform pipelines with zero static cloud credentials. How to run ephemeral self-hosted GitHub runners inside a private VPC using OpenID Connect (OIDC).
Why mature engineering teams stick with Terraform and HCL despite CloudFormation, CDK, and Bicep. Busting the "single cloud" myth and orchestrating multi-provider infrastructure.
Optimize your WireGuard VPN performance by understanding and configuring MTU (Maximum Transmission Unit) and MSS (Maximum Segment Size) on your Linux router. This guide explains how to prevent packet loss when routing traffic between physical and virtual interfaces.
Learn how to configure your own BGP network using open-source tools like BIRD2, PathVector, and Routinator. This guide focuses on IPv6 and provides a practical approach to BGP routing with real-world examples.