This article explains Kubernetes RBAC fundamentals, walks through role, role binding, and service account configurations with code examples, describes the authentication‑authorization‑access flow, and offers practical best‑practice recommendations for secure, maintainable cluster access control.
This article walks through the complete Kubernetes workflow from a user‑submitted Deployment request to the creation and scheduling of the resulting Pod, detailing the roles of the control‑plane components, node services, admission webhooks, and the various plugins involved.
This article presents REDTao, Xiaohongshu's self‑built graph storage solution that unifies graph queries, reduces development duplication, and delivers low‑latency, high‑availability access to a trillion‑scale social graph through a three‑layer architecture, distributed cache, and cloud‑native deployment.
Podman, a daemonless OCI‑compatible container engine created by Red Hat, offers rootless operation, tighter security, and direct runtime interaction, positioning it as a compelling alternative to Docker while its broader adoption depends on ecosystem maturity and community support.
This article details Li Auto's end‑to‑end data integration practice using Flink on Kubernetes, covering the evolution of their integration platform, architectural design, cloud‑native deployment, operational challenges, and future roadmap, while highlighting unified batch‑stream processing and resource elasticity.
Five Minerals International Trust’s OGP platform passed the CAICT DevOps Continuous Delivery Level 3 assessment, marking the first trust‑industry certification in China; the interview reveals how standard‑based DevOps, team restructuring, automation, and cloud‑native architecture boosted efficiency, quality, and security.
This guide outlines practical Kubernetes best practices—including health checks, graceful shutdown, resource limits, security policies, network policies, RBAC, autoscaling, and logging—to help you build secure, resilient, and efficiently managed services on a cloud‑native platform.
AlterShield is an open‑source change‑risk prevention solution originally built by Ant Group that provides lifecycle‑aware change defense, cloud‑native operator integration, KDE‑based anomaly detection, and extensible plug‑in frameworks, with detailed module descriptions, recent v1.0 releases, and a roadmap for advanced monitoring and noise‑reduction capabilities.
The article details how China Civil Aviation Information Network's flight management system passed the CAICT DevOps Technical Operations 2+ assessment, showcasing the role of standardized DevOps practices, cloud‑native architecture, and continuous delivery pipelines in boosting efficiency, safety, and competitiveness in the aviation industry.
This article compares Tencent Cloud and Huawei Cloud ingress implementations, explaining why Tencent defaults to the ImplementationSpecific path rule, how each provider supports Exact, Prefix, and Regex matching, and provides Go code for handling CCE-specific annotations.
Five Minerals International Trust’s OGP platform passed the China Information & Communications Academy’s DevOps Continuous Delivery Level 3 assessment, showcasing how standardized DevOps practices, cloud‑native microservices, and automated pipelines can boost efficiency, quality, and security, while offering insights into the evaluation process and future plans.
The article details China’s Civil Aviation Information Network’s successful DevOps 2+ level assessment, highlighting the flight management system’s cloud‑native architecture, high‑concurrency capabilities, and the broader impact of CAICT’s DevOps standards on digital transformation across industries.
GitOps leverages Git's version‑control strengths to automate, codify, and make transparent infrastructure changes, combining IaC, merge requests, and CI/CD, while exploring its principles, toolchains like FluxCD, ArgoCD, Jenkins X, and practical implementations such as SRE Stack for end‑to‑end change management.
This article walks through the evolution from a single‑machine Java monolith to a distributed, container‑based platform, detailing master‑worker roles, core Kubernetes‑like components, networking, scheduling, and plug‑ins for a complete cloud‑native orchestration solution.
The talk explains how Vivo leverages a Kubernetes‑based solution that combines Calico and RoCEv2 to migrate offline training workloads from single‑NIC to multi‑NIC, integrating loss‑less RDMA, planning topology and IP allocation, and employing Volcano, SpiderPool, Macvlan, and Multus CNI for efficient container networking.
This article clarifies common misconceptions about Kubernetes CustomResourceDefinitions, explains the controller pattern, and demonstrates how CRDs enable custom controllers, versioned micro‑services, blue‑green deployments, and standardized management of application concepts within a Kubernetes cluster.
Nacos 2.3.0 introduces a suite of powerful enhancements—including an anti‑fragile plugin, server‑client capability negotiation, a configurable change plugin, and numerous gRPC and UI improvements—making it the most robust version yet for cloud‑native microservice discovery and configuration management.
This article details how SelectDB’s inverted‑index, Variant data type, and sampling capabilities were integrated into GuanceDB to replace Elasticsearch, achieving up to 70% storage cost reduction, 2‑4× query speed improvement, and a ten‑fold overall cost‑performance boost for log analytics and observability workloads.
This article examines the challenges of Kafka's traditional architecture, explains why local‑state heavy deployments cause operational difficulty and resource waste, and details Tencent Cloud's elastic, storage‑compute‑separated designs—including tiered storage, segment state machines, offset constraints, and performance optimizations—while sharing practical implementation insights and future directions.
This article details the challenges of managing a complex, multi‑layered offline testing environment at KuJiaLe, outlines the standardization of baseline, functional, and integration environments, and explains the comprehensive stability measures—including infrastructure upgrades, automated checks, emergency response, and daily operations—that dramatically improved reliability.
This article explains how Alibaba Cloud's native elastic solutions—covering application‑level scaling, resource‑level scaling, and the new instant elastic controller—help enterprises improve Kubernetes cluster resource utilization, reduce costs, and simplify operations through advanced metrics, custom scaling policies, and event‑driven node management.
This article traces the 70‑year evolution of databases, examines how the rise of AIGC, cloud computing and AI native architectures are reshaping the industry, and details Baidu Smart Cloud's historical milestones, flagship products such as GaiaDB and PegaDB, and the emerging trends that will drive the next generation of database solutions.
An in‑depth overview of Go (Golang) covers its origins at Google, core language features, tooling, concurrency model, ideal use cases such as cloud‑native and backend services, as well as its limitations and future outlook.
This article explains why Istio runs on Kubernetes, compares their roles in cloud‑native architectures, details how Istio extends Kubernetes with Envoy sidecars and xDS, and examines traffic management, load balancing, and the advantages and drawbacks of using a service mesh alongside kube‑proxy.
On November 25, Dewu Technology hosted an SRE Stability Engineering salon in Hangzhou where experts from Alibaba, Tencent, Ant Group and Dewu shared practical insights on C‑end link reliability, Alibaba’s system stability operations, Tencent Game’s cloud‑native SRE practices, and Ant Group’s chaos engineering, concluding with a Q&A and resource distribution.
This article walks developers through Sermant’s architecture, explaining its plugin mechanism, class isolation, and how to build practical plugins with basic capabilities, unified dynamic configuration, and unified logging, while showcasing real‑world examples and tips for efficient development.
This article introduces the architecture and core functions of Automotive Home Push Platform, covering its development history, technical implementation, monitoring system, and future plans for intelligent message distribution.
Spring Cloud 2023.0.0, built on Spring Boot 3.2, drops support for older Spring Boot versions and Java 8, and introduces enhancements across Gateway, OpenFeign, Function, Commons, Config, and Kubernetes, including MVC‑compatible gateway, Java HttpClient support, AWS Lambda deployment, native image Config Server, and upgraded fabric8 and Kubernetes clients.
The Rights Play Platform migrated from the in‑house Ring JVM container framework to a Serverless architecture, eliminating custom permission logic and memory‑leak risks while achieving roughly 30% faster development cycles, 80% shorter deployments, automatic scaling, unified base services, and significantly lower operational costs.
The article analyzes the evolution of cloud computing and the challenges of migrating applications from X86 to ARM architectures, covering cross‑architecture adaptation, virtualization, containerization, cloud‑native practices, language‑specific impacts, and a real‑world case study of the BlueMail platform.
This article recounts a conference presentation on using edge containers to enhance global audio‑video services, detailing the challenges of edge deployment, the cloud‑native architecture adopted, specific Kubernetes extensions, scaling strategies, cost optimizations, and future directions for edge computing.
The article analyzes the November 27 Didi outage caused by an aggressive Kubernetes upgrade, then presents four engineering principles—controlling cluster size, eliminating single points of failure, treating restarts as normal, and decoupling data and control planes—to build more resilient cloud‑native systems.
This guide walks through installing the open‑source JumpServer bastion host on a Kubernetes cluster using Helm, configuring external MySQL and Redis databases, customizing Helm values, and exposing the web UI through an Istio gateway for secure access.
This article explains how to install and run the lightweight, certified Kubernetes distribution K3s on a workstation, using k3d as a wrapper, and demonstrates deploying operators, Prometheus, and Grafana with full command‑line examples and configuration files.
The article walks through a real‑world online supermarket project, showing how a simple monolithic system evolves into a fully‑featured microservice architecture, detailing each refactoring stage, the problems encountered, and the concrete solutions such as service extraction, database sharding, monitoring, tracing, gateways, service discovery, reliability patterns, testing, and service‑mesh adoption.
The 2023 Yunqi Conference in Hangzhou showcased the latest advances in cloud computing and big‑data technologies, examined the evolution from big‑data 1.0 to 3.0, discussed the key difficulties of making big data cloud‑native, and presented a practical case study of MiHoYo’s cloud‑native transformation.
The article reviews Didi's late‑November 2023 service disruption, detailing the timeline of failures, official apologies, and expert analyses of six possible technical causes—including software bugs, server issues, third‑party failures, DDoS, other attacks, and ransomware—while highlighting the role of a Kubernetes upgrade and cost‑cutting pressures.
X (formerly Twitter) cut monthly cloud spending by 60% by shifting workloads and storage to on‑premises infrastructure, igniting a debate over whether de‑clouding is viable for all enterprises, how it signals a potential inflection point in cloud computing, and what strategies—balancing high availability, disaster recovery, and cost efficiency—should guide firms, as highlighted in the upcoming TVP Tech Sleepless Nights series featuring leading industry experts.
Guanying Interactive leveraged the OpenKruiseGame project to migrate its 2D MMO engine Thousand to a cloud‑native Kubernetes stack, overcoming isolation, management, and hot‑update challenges while dramatically improving server launch speed, update efficiency, cost savings, and fault‑diagnosis capabilities.
This guide explains how to deploy Jenkins as a Kubernetes pod, covering data persistence, Docker image download and tagging, RBAC setup, headless Service definition, and a StatefulSet with resource limits and volume claims for a robust CI/CD pipeline.
This article recounts a developer's journey into the Apache Seata project, detailing motivations for open‑source contribution, preparation steps, key architectural concepts, practical code‑reading tips, and effective ways to engage with the community to grow backend expertise.
This article details the design and implementation of REDtao, a self‑built graph storage system for Xiaohongshu that replaces MySQL with a three‑layer architecture, distributed cache, cross‑cloud multi‑active support, and delivers trillion‑edge scale, 150 M QPS, 90% cache hit rate, and significant cost reductions.
Koordinator, an open‑source cloud‑native mixed‑workload scheduler born from Alibaba’s internal container orchestration experience, enables Xiaohongshu to reclaim idle resources, improve CPU utilization beyond 45%, reduce resource costs by millions of core‑hours, and seamlessly integrate Kubernetes with YARN for batch and AI workloads.
This article details the challenges of RPC stability in a large‑scale microservice environment and explains the architectural redesign, SLO implementation, logging governance, exception dashboards, degradation, rate‑limiting, outlier removal, thread‑pool isolation, weak registry dependencies, and post‑incident knowledge‑base practices that together ensure reliable, high‑performance service communication.
At KubeCon China 2023, experts Liu Kai and Dong Shandong presented a three‑part deep dive into Kubernetes observability challenges, demonstrating how eBPF enables comprehensive data collection across all stack layers, seamless integration, and intelligent root‑cause analysis through dimension attribution, anomaly bounding, and fault‑tree methods.
This article explains how Helm, the Kubernetes package manager, simplifies deploying multiple micro‑service applications with a single command, covering its core features, workflow, key concepts, step‑by‑step usage, release management, installation order, and a comprehensive command reference.
This article details ByteDance's extensive migration of Spark Shuffle to a cloud‑native architecture, describing the massive data volumes, the underlying ESS and CSS services, the challenges of resource isolation, monitoring, throttling, spill‑splitting, and the performance gains achieved across stable and mixed‑resource clusters.
The article introduces Dubbo‑go 3.2’s comprehensive upgrade, focusing on the Triple protocol’s gRPC and HTTP compatibility, simplified API, service‑governance features, code examples for server and client, configuration‑driven deployment, built‑in observability, traffic‑management capabilities, and the modular plugin architecture.
NetEase Cloud Music’s self‑built FinOps platform tackles rising cloud spend by unifying cost data, visualizing and allocating expenses, rating resource utilization, and empowering platform providers, business units, and developers with data‑driven governance to curb the Andy‑Bill effect and enable scalable, long‑term cost control.
iQIYI’s mixed‑workload system colocates Spark/Hive big‑data jobs with online video services by running YARN NodeManagers inside Kubernetes, using an Elastic YARN Operator, Koordinator‑driven CPU oversubscription, and remote shuffle, boosting online CPU utilization from ~9 % to over 40 % and saving tens of millions of RMB annually.
Learn how to quickly set up a development‑test Azure Kubernetes Service (AKS) cluster using Terraform with default settings, including creating a Service Principal, configuring Terraform Cloud backend, defining variables, and applying the infrastructure, plus commands for login, plan, apply, and destroy.
Cloudflare abandoned Nginx for its home‑grown Rust‑based proxy Pingora, detailing architectural limits of Nginx, design choices, multithreaded scheduling, connection‑reuse improvements, and how these changes deliver faster, more efficient, and safer traffic handling at massive scale.
This article explains the evolution from classic sidecar‑based service mesh to Istio's Ambient sidecarless architecture, details ASM's control‑plane and data‑plane separation, L4 ztunnel and L7 Waypoint proxies, traffic flow, serverless components, and real‑world benefits such as reduced resource usage and operational overhead.
This article explains Docker and Kubernetes fundamentals, compares their architectures, highlights Docker's achievements, traces the evolution of container technology, and clarifies why Kubernetes is essential while addressing common misconceptions about Docker’s role in modern cloud‑native environments.
This article details the recent technical upgrades to Alibaba Cloud's SLS Prometheus storage engine, describing how compatibility with PromQL was retained while achieving more than tenfold query speed improvements, reducing costs through smarter aggregation writes, built‑in downsampling, global caching, parallel computation, and push‑down processing, and presenting benchmark comparisons with open‑source solutions.
This article reviews the most popular Docker security tools, explains their key features, and shows how they help organizations automatically scan images, detect vulnerabilities, enforce policies, and improve container runtime protection across development and production environments.
This article compares the open‑source monitoring solutions Prometheus and Zabbix, outlining their histories, architectures, data collection methods, scalability, storage models, configuration complexity, community activity, and suitability for different environments such as traditional servers versus cloud‑native container platforms.
This article provides a comprehensive overview of Kubernetes, covering its core components such as Nodes, Pods, Services, Namespaces, Deployments, StatefulSets, Jobs and CronJobs, as well as detailed explanations of Pod networking, Service types (ClusterIP, NodePort, LoadBalancer) and practical YAML examples for each resource.
This guide explains why a Kubernetes namespace may remain in a Terminating state, shows how to inspect resources, edit the namespace JSON to remove finalizers, use the Kubernetes API via curl with a proxy, and verify that the namespace is finally removed.
This article explains the different Kubernetes node types—including Worker, Control Plane, and Edge nodes—their roles, required software components, resource considerations, and provides practical command‑line examples for creating and managing these nodes within a cloud‑native cluster.
This article explains how an Ingress Controller automatically translates Ingress resources into routing rules, updates service routing tables, configures load balancers, and sets up SSL/TLS by providing clear examples and YAML manifests for Kubernetes environments.
The article traces the evolution of software delivery from early lean and continuous‑integration tools through the rise of DevOps, cloud, SaaS, and container orchestration, highlighting how growing scale and complexity gave birth to platform engineering and a shift‑left mindset for developers and ops teams.
This article provides a comprehensive overview of Kubernetes core components, such as Master and Worker nodes, and explains the purpose and usage of various plugins—including network, volume, ingress, DNS, dashboard, heapster, kubelet, and container runtime—along with practical command‑line examples for each.
The article describes how Ant Group’s consumer credit technology platform leverages AI and cloud‑native architectures to achieve ultra‑fast operations, precise fund verification, large‑scale simulation, and seamless migration for dozens of financial institutions, addressing the massive technical challenges of internet‑scale credit services.
tRPC is a highly extensible, plugin‑driven backend RPC framework designed to unify disparate service stacks, support cloud‑native components, and provide cross‑language, multi‑protocol, and streaming capabilities while delivering strong performance and easy integration for large‑scale enterprises.
The article presents Fabarta’s AI‑era data infrastructure that combines large language models with knowledge graphs and a multimodal database, detailing its data‑centric architecture, HTAP capabilities, cloud‑native design, and real‑world demos that illustrate how graph‑plus‑vector techniques improve model reliability and answer precision.
This article explores Docker's practical usage, the problems it addresses for developers and operations, its future development, Docker Hub services, technical limitations, and detailed security considerations for both the Docker environment and container deployments, including Hyper-V host setup.
This article offers a comprehensive overview of the Antrea CNI plugin for Kubernetes, covering its core concepts, pros and cons, typical use cases, and a step‑by‑step installation and testing workflow to help you secure and optimize container networking.
This article outlines Douyin’s step‑by‑step engineering evolution of its cloud‑native vector database, covering the background of vector search, core concepts, algorithmic optimizations, storage‑compute separation, streaming updates, multi‑tenant orchestration, and future applications such as large language model integration.
This tutorial explains the concepts of service registration and discovery in microservice architectures, introduces Nacos as a dynamic registry, and provides step‑by‑step PHP code for registering providers and discovering services using the Webman framework, including persistence and clustering considerations.
In this reflective piece, Docker co‑founder Sam Alba examines the past decade, highlighting three strategic decisions that propelled containers and cloud native computing forward and three critical errors in community, culture, and over‑reliance on containers that offer lessons for tech leaders today.
This guide walks you through preparing a Kubernetes cluster, creating deployment manifests, configuring Grafana and Prometheus, and verifying the monitoring setup, including code snippets and step‑by‑step commands for a seamless installation on a lightweight cloud server.
This tutorial walks you through preparing a Kubernetes cluster, deploying MySQL and Typecho containers with detailed YAML configurations, creating the necessary services and ingress, testing the setup, and highlighting Kubernetes' high‑availability and auto‑scaling benefits for a reliable blog platform.
The Apache Doris Summit Asia 2023 showcased the milestone 2.0 release, impressive performance gains, rapid community growth, and diverse industry deployments, while outlining future cloud‑native and unified analytics directions that position Doris as a leading real‑time data warehouse solution.
This tutorial walks you through quickly setting up a Qwen‑based AI assistant on Alibaba Cloud Function Compute, covering prerequisite API‑key acquisition, deployment steps, password protection, and how to access the running service.
This article details Huolala's end‑to‑end container security strategy—from Kubernetes component basics and a real unauthorized‑access incident to lifecycle‑based safeguards, threat‑matrix guidance, image/ecosystem/baseline/runtime protections, and a custom HIDS architecture—offering practical insights for cloud‑native environments.
This article compares Kubernetes Ingress and OpenShift Route, outlining their similar functions for exposing services, detailing their architectures, configuration steps, and highlighting essential differences such as ecosystem integration, syntax, and security features, while providing practical examples and code snippets for implementation.
This article visually dissects Prometheus, explaining its architecture, core features, data collection methods, exporter role, PromQL query language, and alerting workflow, while contrasting it with ELK and highlighting practical configuration examples for real‑world monitoring.
This article explains how Shuhe Tech combined Knative with AI workloads to achieve 60% resource cost savings and reduce model deployment cycles from one day to half a day, detailing Knative's architecture, request‑based autoscaling, multi‑version releases, and advanced scaling features.
This article analyzes the design of Vivo's push notification platform, detailing its high‑concurrency requirements, three‑region long‑connection deployment, traffic‑scheduling bypass layer, and layered storage disaster‑recovery solutions, while explaining the trade‑offs and performance metrics behind each architectural decision.
This article presents a comprehensive overview of Zhihu's event‑tracking system, covering its motivation, toolset, demand‑management platform, verification workflow, data‑collection pipeline, query service architecture, cloud‑native data service design, and practical Q&A on best practices and optimization strategies.
Microsoft has announced a renewed commitment to Java, unveiling a dedicated website, enhanced VS Code features, and deeper Azure integration, while recounting its historic legal battles and strategic shifts, illustrating how the tech giant now aims to attract Java developers to build and migrate cloud‑native applications.
The article examines how the rapid adoption of Kubernetes accelerates development but also introduces hidden conflicts between platform and application teams, challenges standardization, and forces a rethink of monitoring, observability, and collaborative DevOps practices.
The article examines how rapid Kubernetes adoption accelerates development velocity but also introduces hidden frictions such as standardization limits, DevOps disruption, monitoring difficulties, and team isolation, emphasizing the need for collaborative platform engineering and contextual observability.
This article explains what Kubernetes (K8s) is, its core features such as portability, scalability and automation, explores enterprise use cases, resource estimation, service migration, deployment evolution, cloud‑native concepts, and details the master‑node architecture and components that enable efficient container orchestration.
This article provides a comprehensive overview of TiDB, an open‑source distributed NewSQL database, covering its origins, architecture components, high‑availability design, HTAP capabilities, MySQL compatibility, differences from traditional SQL and NoSQL, and practical deployment scenarios.
This article explains the challenges of memory management in mixed Kubernetes workloads, introduces ByteDance's open‑source Katalyst Memory Advisor, details native allocation and reclamation mechanisms, outlines its architecture and plugins, and describes interference detection and multi‑level mitigation strategies to improve memory utilization and service quality.
This article examines XDP (eXpress Data Path), a Linux kernel eBPF‑based technology that pushes packet processing to the earliest point in the network interface, delivering ultra‑low latency, enhanced security, and flexible custom processing for high‑performance routing, DDoS mitigation, and cloud environments.
This article explains Memcached’s architecture, key characteristics, suitable and unsuitable scenarios, memory management and LRU mechanisms, version details, and provides a comprehensive guide to monitoring its performance and health using Prometheus and Alibaba Cloud ARMS dashboards.
This guide explains how to install the Weave GitOps UI and its CLI, configure HelmRelease and HelmRepository objects, access the dashboard, and then introduces Flamingo as a Flux subsystem for Argo CD, showing its installation, loopback reconciliation, and conversion of existing Flux applications.
This article explains the concept of load balancing, describes how Kubernetes Ingress controllers implement it, and provides step‑by‑step YAML examples for deploying Nginx Ingress, configuring basic routing, sticky sessions, custom load‑balancing algorithms, and external traffic policies to achieve flexible traffic distribution in a cloud‑native environment.
This article explains the role of container runtimes, classifies them into low‑level, high‑level, and sandbox types, and details the architectures and key components of popular runtimes such as containerd, CRI‑O, and Docker, highlighting their interactions with OCI specifications and system resources.
This article explains why beginner Docker images can exceed 1 GB, then walks through multi‑stage builds, static versus dynamic linking, language‑specific tricks, and the use of minimal base images like scratch to reduce image size by over 99 % while preserving functionality.
The 2023 China International Service Trade Fair showcased a digital transformation case where Bank of China’s Open Banking platform, built on cloud‑native micro‑services, unified governance, robust security, and AI integration, demonstrated extensive industry impact, extensive partner ecosystems, and award‑winning innovation.
This guide explains how to install and configure the open‑source Pyroscope continuous profiler on a Kubernetes cluster, integrate it with Python, .NET, and Go microservices, and visualize low‑overhead flame graphs to identify performance bottlenecks and reduce cloud costs.
This article explains how to integrate feign-reactor with Spring Boot 2.7, covering OpenFeign features, reactive client setup, code examples, timeout configuration, and programmatic usage to enhance microservice communication.
This article explains how to build robust, highly available cloud‑native applications on Alibaba Cloud Container Service for Kubernetes (ACK) by covering architecture principles, multi‑zone cluster design, Kubernetes HA features such as topology spread constraints and pod anti‑affinity, storage strategies, load‑balancing, virtual nodes, health probes, monitoring, and multi‑cluster deployment patterns.
Oracle's Java 21 release introduces virtual threads, record patterns, ordered collections and a preview FFM API, while Eclipse survey data shows rising Spring and Spring Boot usage and accelerating cloud‑native adoption among Java developers.
This article reviews eight popular Docker monitoring solutions, detailing their key features such as performance metrics, dashboards, alerting, capacity planning, log analysis, and ease of setup, helping you choose the right tool for container observability.
This guide explains what NFS is, how to create a Kubernetes pod that mounts an NFS share, expose the pod via a NodePort service, and verify the NFS logs using standard Linux commands.
