Earlier this month, Let's Encrypt (the free, automated, open Certificate Authority EFF helped launch two years ago) passed a huge milestone: issuing over 50 million active certificates. And that

Written by Mike Robinson, Consultant at Indigo Blue

Fail-slow at scale: evidence of hardware performance faults in large production systems Gunawi et al., FAST’18 The first thing that strikes you about this paper is the long list of authors from mul…

In a recent post, I showed how it was possible to run the Kubernetes control plane components on Azure Container Instances. The cloud moves fast, and there have been some great improvements to ACI in the last month. In keeping up with the times, I’ve upgraded…

How we reduced error rates, and dropped latencies across merchants’ flows
Reading Time: 6 Minutes
Shopify merchants trust that when they build their stores on our platform, we’ve got their back. They can focus on their business, while we handle everything…

The O’Reilly Podcast: Modern day DNS for hybrid cloud, intelligent traffic steering, and DevOps.

On Wednesday, a 1.3Tbps DDoS attack pummeled GitHub for 15-20 minutes. Here's how it stayed online.

This is for those of you out there who are about to start your job search and who may be worried that you can’t land a top-tier tech job without a Stanford CS degree. Someone told you that you’re not good enough to get a job at Microsoft or Facebook....

Step by step guide to writing highly optimized Dockerfiles for Python web app development and deployment.

The following post describes how we migrated a large NoSql database from one vendor to another in production without any downtime or data…

Immutable Infrastructure has become a hot topic recently. I’ve written a couple of posts about it, and I think the term should be more…

Over last couple of days we've seen a big increase in an obscure amplification attack vector - using the memcached protocol, coming from UDP port 11211. In the past, we have talked a lot about amplification attacks happening on the internet.

For the pending release of version 1.10 of the Data Center Operating System (DC/OS), Mesosphere is adding full support for Kubernetes, alongside its own container orchestration system Marathon. DC/OS 1.10 was released in Beta form in September, and the pending…

A common pattern in Microservices is to use HTTP and REST to communicate. But there are better solutions out there.

Microservices appear to be the major topic of discussion at this year's O'Reilly Software Architecture conference in New York, with developers and system designers in attendance curious as to how to transform their monolithic legacy systems into more nimble…

Monitoring with Prometheus

Recently Tesla (the car company) was alerted, by security firm RedLock, that their Kubernetes infrastructure was compromised. The attackers…

Yes, being on call typically and anecdotally sucks. I understand! If you’ve heard me speak, I often point out that I’ve been oncall since I was 17 years old—so I know how terrible it...

  Update from April 24, 2018: On April 24, 2018, we updated ACM to publish certificates to CT logs on issuance and on renewal, unless you disable Certificate Transparency logging. No action from you is required if you want ACM to publish your certificates…

Many types of business problems boil down to making recommendations, and machine learning is the special sauce that makes these problems solvable. Machine learning for recommendations is a challenging endeavor in its own right, but it is just one part of…