This article examines why many enterprises struggle to adopt containers and Kubernetes, outlines the four main sources of complexity, and presents a range of open‑source tools, managed services, serverless options, and practical guidance to help teams choose the most suitable solution.
This article explains the background, design, and usage of Alibaba Cloud Function Compute's Instance Exec capability, showing how developers can securely access live function instances via the console or SDK, and apply it to troubleshooting, performance profiling, and custom runtime optimization.
This article introduces cloud native concepts, explains the evolution from Docker containers to Kubernetes orchestration and serverless services, and surveys major industry offerings, helping readers grasp the fundamentals and practical implications of modern cloud-native architectures.
This article explores microservice data design, covering the definition and benefits of microservices, principles for decoupling, lightweight APIs, DevOps integration, decentralized data governance, database per service versus shared databases, polyglot persistence, multi‑model databases, and why MongoDB’s dynamic schema, change streams, and sharding make it a strong fit for scalable microservice architectures.
This article explains how Kubernetes clusters can be deployed across multiple failure zones and regions, detailing control plane replication, node labeling, pod topology constraints, storage zone awareness, network considerations, and disaster recovery strategies to achieve high availability in cloud‑native environments.
This article analyzes Baidu's offline mixed‑tenant technology that combines online and offline workloads on the same physical servers, detailing the resource‑usage problems, dynamic resource views, priority schemes, isolation mechanisms, high‑performance scheduling, and future directions for cloud‑native clusters.
This step‑by‑step guide shows how to prepare a VM, clone the open‑source Mall project, build Docker images for its dependencies, push them to Alibaba Cloud Container Registry, configure Serverless Devs, and finally deploy both the backend and Vue‑based frontend to Alibaba Cloud Function Compute, including log inspection and verification.
This article details the challenges Ctrip faced with Istio control‑plane performance at massive scale and explains the systematic methodology, concrete optimizations—including O(n²) to O(n) patching, Merkle‑tree based success‑rate metrics, and startup improvements—that reduced xDS push latency from minutes to seconds while enhancing reliability.
Learn how to deploy a Redis cluster on Kubernetes by using a StatefulSet with a headless Service, configuring persistent storage, creating ConfigMaps, initializing the cluster with redis-cli, and exposing it via a regular Service, complete with step‑by‑step commands and YAML examples.
This article explains how cloud‑native teams can adopt chaos engineering—defining its concepts, outlining its unique characteristics, and detailing a four‑stage implementation process from manual drills to production‑level raids, with practical steps, environment setups, and real‑world results.
The article analyzes the trade‑offs of deploying container platforms on bare‑metal servers versus virtual machines in banks, covering performance, cost, management, security, workload flexibility, and IaaS capabilities to help decide the optimal underlying compute resource.
This article reviews the progress of Kubernetes' in‑tree storage to CSI migration from v1.17 through v1.23, explains the purpose and benefits of CSI migration, outlines new feature gates, observability metrics, bug fixes, collaboration efforts, the release roadmap, and provides guidance for users and contributors.
This article explains what Serverless architecture is, compares it with traditional monolithic setups, outlines its cost and scalability benefits, discusses its drawbacks, and provides a practical guide on the knowledge and tools needed to build Serverless solutions in production.
This article explains why mastering English is essential for developers and then curates a list of high‑quality cloud native podcasts, each with a brief description and link, to help listeners improve their knowledge and keep up with the latest industry trends.
This article explains how PolarisMesh, Tencent's open‑source service discovery and governance platform, solves service address management and fault tolerance challenges in a Spring Boot microservice ecosystem, and provides step‑by‑step instructions—including Maven dependency, provider and consumer configuration, and sample code—to quickly integrate PolarisMesh via Feign.
This article introduces Alibaba’s Nacos, tracing its origins from an internal project to an open‑source configuration service, and explains its core capabilities, basic configuration model, namespace design for multi‑tenant isolation, and provides visual diagrams to illustrate these concepts.
Based on 1,016 valid questionnaire responses and 17 enterprise interviews, the 2021 China Chaos Engineering Survey Report reveals low software system stability, limited adoption of chaos engineering, its positive impact on availability, and provides data‑driven recommendations for improving stability through mature tools, metrics, and cultural shifts.
This article explains why microservice architecture is preferred over monolithic applications, outlines a learning roadmap, and details essential concerns such as Docker, container orchestration, API gateways, load balancing, service discovery, event buses, logging, monitoring, tracing, persistence, caching, and cloud providers.
The article compares B2B and B2C business models, highlights differences in demand certainty and service‑quality tolerance, and proposes a four‑layer, cloud‑native technical architecture—including container, middleware, business, and low‑code platform layers—to guide B2B system and vision construction.
The article outlines strategic thinking for DevOps product planning, emphasizing open‑source logic, automation installation, high‑availability design, hybrid‑cloud bridge gateways, and the shift from raw resources to declarative service consumption in cloud‑native environments.
The article details how China Construction Bank's fintech arm designed, deployed, and operated a cloud‑native, three‑layer MPP data warehouse spanning 16,000 servers, covering architectural choices, performance gains, operational automation, and high‑availability strategies for ultra‑large scale workloads.
The article explains enterprise integration as the essential practice of connecting applications, data, and devices across distributed, cloud‑native environments, covering its evolution, key challenges, and core techniques such as messaging, application connectors, data flow platforms, integration patterns, and APIs.
OpenTelemetry unifies tracing, metrics, and logs by merging OpenTracing and OpenCensus into a cross‑language specification, collector, language SDKs, and instrumentation libraries, offering vendor‑agnostic, low‑maintenance telemetry collection that separates data gathering from business logic while requiring external back‑ends for storage and analysis.
Version 3.2.1 of the open‑source KubeSphere platform introduces a series of enhancements—including container group status filtering, improved image builder dialogs, expanded quota visibility, numerous UI bug fixes, and updated DevOps pipelines—alongside detailed installation and upgrade instructions for Linux and Kubernetes environments.
This article details Alibaba's Serverless Infrastructure (ASI) built on ACK, explaining its large‑scale Kubernetes architecture, fully managed operations, change‑risk controls, gray‑release pipelines, web‑shell access, taskflow orchestration, node lifecycle management, elasticity, risk mitigation, probing, and self‑healing capabilities that enable reliable cloud‑native services.
The article analyzes the Xi’an “Yima Tong” health‑code system outage, detailing the symptoms, root‑cause factors such as rate‑limiting gaps, server overload, architectural coupling, and ISP differences, and then offers short‑term, long‑term, design, high‑availability, and testing recommendations to prevent future crashes.
The article examines the U.S. Department of Defense’s DevSecOps initiative, outlining its cloud‑computing challenges, the shift to Kubernetes, Istio and Knative, the creation of a centralized container registry, and the broader lessons for large organizations seeking open‑source, vendor‑neutral cloud‑native transformations.
This article clarifies Docker’s true nature as an application container engine, explains its core namespace-based isolation mechanisms, and answers frequent questions about networking, hot updates, and volume mapping, while sharing real‑world deployment experiences and best‑practice recommendations.
This article details Vivo's AI container platform, explaining the design, deployment options, performance tuning, stability measures, and future enhancements of the ingress‑nginx gateway that powers AI services within their Kubernetes clusters.
This article surveys major open‑source workflow engines—including Activiti, Flowable, Camunda, jBPM, and osworkflow—and their associated visual designers such as bpmn‑js, mxGraph, activiti‑modeler, flowable‑modeler, and react‑flow, comparing features, performance, and suitability for cloud‑native, low‑code platforms while outlining future trends.
OpenKruise v1.0 introduces a suite of cloud‑native enhancements for Kubernetes, including in‑place upgrades for env variables, a new ResourceDistribution CRD for cross‑namespace resource syncing, container launch priority controls, an extended kubectl‑kruise plugin, and numerous optimizations across workloads and controllers.
This article provides step‑by‑step commands for creating Kubernetes pods, pulling images, running simple applications, exposing deployments, checking logs, and managing resources such as scaling, updating images, and viewing pod details, offering a practical guide for verifying network access and basic cluster operations.
This article explains how to design and implement a fully elastic, zero‑ops Serverless database using Alibaba Cloud Tablestore, covering its architecture, key features, step‑by‑step CLI setup, table creation, data import, querying, indexing, and cost efficiency for high‑volume order workloads.
Vivo’s internet team performed a zero‑downtime, in‑place upgrade of a 1,000‑node Kubernetes cluster from v1.10 to v1.17 by analyzing changelogs, backporting fixes, adjusting kubelet hash validation, adding tolerations, ensuring node labels, and using staged binary rollout, completing the process in roughly ten minutes.
The Log4j2 remote code execution flaw is hard to contain because it enables arbitrary code execution and hides its traffic signatures, but Runtime Application Self‑Protection (RASP) can detect malicious behavior at the application level, offering low false‑positives and automatic component discovery without relying on constantly updated rules.
This article explains Helm’s role in Kubernetes application management, its key benefits such as templating, version control, dependency handling, and how to host Helm charts in a Sonatype Nexus repository and integrate them into a Docker‑based CI/CD pipeline.
Fidelity Investments describes its multi‑cloud transformation using Kubernetes and a suite of CNCF projects to create a consistent, secure, and portable cloud‑native platform that accelerates product delivery, meets strict financial regulations, and enables workload mobility across providers.
This article explains the CPU Burst feature added in Linux 5.14, how it mitigates fine‑grained CPU throttling in Kubernetes containers, presents a queue‑theoretic model and Monte‑Carlo simulations to evaluate its impact on scheduler stability, and offers practical guidance for safely enabling it in production environments.
This article details the step‑by‑step evolution of a company's business gateway from a single Nginx instance to a cloud‑native, Kubernetes‑based Kong deployment, covering the initial architecture, identified risks, custom controller implementation, performance testing, graceful shutdown, and smooth traffic switching strategies.
This guide walks through setting up a cross‑subnet Kubernetes cluster with Calico in pure BGP mode by simulating routers and networks using ENSP and a workstation, covering architecture design, ENSP routing configuration, node integration, Calico BGP settings, and verification of pod communication.
The article explains the massive impact of the Log4j2 remote code execution vulnerability, details why its JNDI lookup is easily exploitable, lists affected software, and provides a concise four‑step guide using Alibaba Cloud ARMS RASP to detect, monitor, and block attacks while offering remediation recommendations.
This article recounts a year‑long journey of designing, implementing, and operating a multi‑environment Kubernetes architecture—including containerized workloads, unified logging, CI/CD pipelines, service governance with Istio, and private deployments—while sharing practical lessons and best‑practice recommendations for cloud‑native teams.
This article examines Docker's evolution from a pioneering container platform to its current struggles, detailing licensing changes, subscription models, internal leadership conflicts, missed opportunities with Kubernetes, and the company's attempts to reposition itself in the cloud‑native ecosystem.
This article explores the evolution of BPF from its origins as a packet‑filtering mechanism to the modern eBPF engine, detailing its architecture, security and performance benefits, core features such as hooks, maps and helper functions, and real‑world cloud‑native use cases like Cilium, Falco and kubectl‑trace.
This guide explains how to use Dubbo's cloud‑native features—service listings, dynamic routing (conditional, tag, and mesh), runtime configuration, testing, and mock support—providing step‑by‑step examples, YAML definitions, and Maven snippets for effective service governance.
This article details NetEase Yanxuan's real-time computing platform development from 2017 to present, covering its architecture, Flink‑SQL development environment, service‑oriented deployment, resource optimization, cloud‑native migration, comprehensive data governance, and future plans for stream‑batch integration and intelligent job diagnostics.
This article explains the design and implementation of a cloud‑native MPP query layer for ClickHouse, detailing its architecture, core features, execution flow, performance advantages, SQL compatibility, and future development plans to create a high‑performance, multi‑source OLAP data platform.
This article details NetEase Yanxuan's evolution of a real‑time data platform from 2017 to present, covering background, current scale, layered architecture, Flink‑SQL development IDE, service‑oriented task execution, resource‑optimizing deployment modes, cloud‑native migration, comprehensive data governance, and future batch‑stream integration plans.
This article introduces the cloud‑native LakeHouse solution from China Mobile Cloud, covering its lake‑warehouse integration concept, overall architecture, core functions such as storage‑compute separation, one‑click data ingestion, intelligent metadata discovery, serverless execution, JDBC support, incremental updates, and typical application scenarios in public and private clouds.
This article explains Nacos's architecture, the principles of service registration, how Spring Cloud integrates Nacos during startup, the implementation details of NacosServiceRegistry, heartbeat mechanisms, and dynamic service address discovery, providing a comprehensive guide for building resilient microservices.
Baidu’s Aifanfan product migrated its entire suite to Kubernetes through a two‑phase, 11‑step process that standardized CI/CD, containerization, and traffic routing, enabling deployment of 200 + modules in under an hour, 99.99 % stability, cost‑effective operations, and laying groundwork for multi‑cluster, service‑mesh expansion.
By offloading thousands of short‑lived CronJob pods to Tencent Cloud EKS serverless virtual nodes, Zuoyebang isolated them from online services, eliminated IP waste, achieved millisecond‑level parallel scheduling and sub‑3‑second startup, freed 10 % of cluster resources and cut scheduling costs by roughly 70 % while markedly improving cluster stability.
This article explains how to create a custom Kubernetes authentication webhook in Go that supports GitHub token and LDAP authentication, details the required API Server configuration, provides full code examples, and demonstrates testing both methods, illustrating a practical way to integrate external account systems with Kubernetes.
This article introduces the third, post‑aggregation approach to link tracing—link analysis—showing how real‑time aggregation of stored trace data can quickly pinpoint uneven traffic, single‑machine failures, slow interfaces, business‑level traffic shifts, and gray‑release anomalies while outlining its practical constraints.
This article explains the design of an ECS‑based Function‑as‑a‑Service platform, covering multi‑tenant deployment, rapid horizontal scaling, resource‑utilization optimization, avalanche‑prevention strategies, and high‑density deployment techniques that together enable fast, cost‑effective cloud‑native serverless workloads.
GitOps is an automated infrastructure management approach that leverages DevOps best practices such as version control, code reviews, and CI/CD pipelines to treat infrastructure as code, enabling declarative, pull‑request‑driven deployments especially in Kubernetes‑centric cloud‑native environments.
This article explains how Dubbo3’s Triple protocol, built on HTTP/2 and compatible with gRPC, improves performance, routing, security, and usability over classic RPC protocols like Dubbo2 and HTTP/1.1, while offering cross‑language support, streaming, and seamless integration with cloud‑native service governance.
KubeDL introduces Model and ModelVersion resources that treat AI model files as Docker image layers, enabling versioned, immutable storage, automated build workflows, and direct integration of training and inference in Kubernetes‑based cloud‑native environments.
Spring Cloud 2021 (Jubilee) has been officially released, built on Spring Boot 2.6.x, introducing updated core components, new features like Redis routing, HTTP/2 and gRPC support, and important compatibility notes for Spring Boot and Spring Cloud Alibaba users.
Spring Cloud 2021.0.0 (Jubilee) introduces support for Spring Boot 2.6.1, adds configuration options for load balancing, integrates with major secret managers, and brings major enhancements to Gateway, Kubernetes, OpenFeign, and Sleuth, while providing a concise component version overview.
In this panel discussion, three seasoned operations leaders share how traditional IT operations evolve into cloud‑native practices, covering continuous iteration, container‑based automation, DevOps collaboration, observability, chaos engineering, and the strategic balance between specialization and versatility for modern SRE teams.
Facing high memory usage and slow builds with Java SpringBoot, NetEase Media switched to Go in 2020, rebuilt core services, and created the cloud‑native ngo framework to deliver lighter containers, faster compilation, built‑in business libraries, tracing and monitoring, now running in production while hiring engineers.
This article explains Alibaba's seven‑year experience with mixed deployment on Kubernetes, detailing how priority classes and QoS models are used to reclaim idle resources for low‑SLO workloads, improve overall cluster utilization, and maintain service‑level objectives for both online and offline pods.
This article examines how edge computing, combined with IoT and cloud‑native technologies, addresses latency, bandwidth, connectivity and security challenges of the emerging AIoT era, detailing Tencent Cloud’s IECP platform, its components, and real‑world smart‑water and smart‑factory deployments.
Tencent’s sTGW team introduced the TQUIC protocol stack, a lightweight QUIC/HTTP‑3 implementation with 0‑RTT handshakes, connection migration, and real‑time frames, cutting user login latency by 30 % and raising 500 ms download success from 60 % to 90 % in weak‑network conditions while shrinking the Android library to roughly 3 MB.
This article examines the hidden pitfalls of technology optimism, the inevitable vendor lock‑in of serverless platforms, and how to apply timeless architectural principles—such as abstraction, service layers, and token‑based authentication—to design portable, testable, and maintainable serverless applications across Azure and AWS.
Facing Hadoop’s minute‑to‑hour query latency on petabyte‑scale data, WeChat partnered with Tencent Cloud to build a ClickHouse‑based real‑time warehouse, adding custom ingestion, query‑optimisation and management tools that deliver billion‑row throughput, sub‑5‑second queries and over ten‑fold performance gains across millions of daily queries.
Tencent’s sTGW team built the TQUIC protocol stack, leveraging QUIC/HTTP3 to cut login latency by 30% and achieve 90% request success within 500 ms on weak networks, and the article details its architecture, core advantages, implementation challenges, and real‑world performance gains across multiple services.
Learn how to set up a comprehensive container monitoring solution using CAdvisor for metrics collection, InfluxDB for time‑series storage, and Grafana for visualization, including deployment steps, integration details, common issues, and best‑practice configurations for reliable Docker‑based environments.
This article walks through the high‑level components of eBPF programs—backend, loader, frontend, and data structures—showing how the original sock_example.c is split into separate files, how LLVM compiles restricted C to ELF, and how projects like BCC, BPFtrace, and IOVisor automate development, deployment, and cloud‑native observability while highlighting their trade‑offs for embedded environments.
This article demonstrates how to use Tekton, a cloud‑native CI/CD framework, to automatically sync its component images to a Tencent Cloud container registry, generate mapping files, and deploy Tekton on Kubernetes using GitHub Actions and custom Python scripts.
The article examines how Docker, Docker Compose, and Kubernetes have transformed deployment, but also highlights the remaining complexities of cloud‑native development, microservices, and the need for next‑generation tools that seamlessly integrate local processes, containers, and cloud services.
This article explains the evolution of cloud‑native technologies, the need for an application management platform, the challenges it must address, and how KubeVela’s OAM‑based design principles provide a unified, workflow‑driven, extensible solution for multi‑cluster environments.
Join Xiaohongshu’s cloud‑native engineer Wang Chengcheng on November 23 for a 45‑minute talk and Q&A about the company’s Service Mesh evolution, Istio adaptation, Aeraki production optimizations, large‑scale deployment experiences, and practical strategies for deploying community Istio in production.
This article explains Kubernetes pod fundamentals, how pods obtain external access, the challenges of using Nginx for load balancing, and why the Service resource with label selectors, kube-proxy, and virtual IPs provides a robust solution for pod traffic distribution.
This article explains how to use Helm's Capabilities object and custom template functions to make Helm charts, especially Ingress resources, compatible with multiple Kubernetes versions by dynamically selecting the appropriate API version and fields.
This step‑by‑step guide shows how to initialize a CentOS 7 host, disable firewalls, configure time sync, prepare storage disks, pull the official Ceph Docker image, and launch MON, OSD, MGR, RGW, and MDS containers to build a functional single‑node Ceph cluster with a dashboard.
This tutorial walks through Kubernetes architecture, cluster setup methods, and a step‑by‑step Redis deployment using Pods, Deployments, StatefulSets, and an Operator SDK example, illustrating core concepts and practical commands for building reliable cloud‑native applications.
This article introduces service governance fundamentals, explains how etcd’s Raft‑based consensus and BoltDB storage work, compares etcd with ZooKeeper and Consul, and describes Baidu’s large‑scale, high‑availability, high‑performance service‑governance platform built on these technologies.
This article explains how Kubernetes implements service discovery by detailing the underlying pod network, the role of Services as stable endpoints, the registration process via CoreDNS, the creation of Endpoints objects, and how kube-proxy routes traffic using iptables or IPVS.
This guide enumerates 43 practical tasks for installing, configuring, securing, and operating Linkerd 2.11 on Kubernetes, covering service injection, canary releases, TLS credential rotation, Prometheus integration, traffic policies, multicluster communication, and more, each linked to detailed instructions.
This article presents a code-less business process orchestration framework that transforms static Go code into configurable drag‑and‑drop workflows, detailing the underlying concepts, architecture, core Go data structures, dynamic configuration, and practical deployment examples for distributed task scheduling and execution.
This article explains why, when, and how to split a monolithic application into microservices, covering the goals of splitting, timing decisions, guiding principles, granularity considerations, functional and non‑functional strategies, merging practices, and associated risks.
This article explains how to scale, back up, and upgrade Kubernetes clusters with Sealer by modifying the Clusterfile, using join/delete commands for both ALI_CLOUD and BAREMETAL providers, and configuring backup plugins and upgrade workflows.
This article reviews the core structure of Kubernetes pods, explains how pods expose services externally, details load‑balancing mechanisms using Services and kube‑proxy, and illustrates the role of selectors, VIPs, and iptables/ipvs in dynamic pod discovery and traffic routing.
This article explores how cloud‑native principles are reshaping DevOps collaboration, examines emerging trends in next‑generation DevOps platforms, and details how KubeVela—leveraging OAM, multi‑cluster delivery, workflow definitions, and GitOps—provides a unified, application‑centric solution for modern enterprise environments.
This article explains the design principles of Sealer's Clusterfile, details its configuration parameters, demonstrates how to inject additional settings and environment variables, and describes the supported plugins for customizing Kubernetes clusters, providing practical examples and code snippets.
This article explains the concept of canary (gray) releases, demonstrates how to perform rolling updates and precise traffic splitting in Kubernetes, and shows how to achieve fine‑grained canary deployments using Istio’s VirtualService and DestinationRule resources with practical YAML and kubectl examples.
This article explains the principles of agile development, outlines typical agile workflows and case studies, and then provides a comprehensive overview of the cloud native technology stack, including application definition, orchestration, runtime, provisioning, platform, observability, and serverless components, illustrating how modern IT teams can transition from traditional practices.
This article explains the core principles of Kubernetes networking, detailing how each pod receives a unique IP, how intra‑node and inter‑node communication occurs via virtual Ethernet pairs, bridges, and routing, and illustrates packet flow with diagrams to help troubleshoot network issues.
This guide walks through manually deploying a Prometheus federation on Kubernetes, covering environment setup with sealos, creating storage classes, persistent volumes, ConfigMaps, StatefulSets, services, applying manifests, and verifying the federation to aggregate metrics across multiple clusters.
This guide explains the blue‑green deployment concept, outlines its pros and cons, and provides a step‑by‑step Kubernetes tutorial—including image loading, namespace creation, deployment manifests, service configuration, and traffic switching—to achieve zero‑downtime releases.
The article explains how agile development and DevOps extend beyond coding to cover the entire application lifecycle, how containers and Kubernetes enable seamless collaboration between developers and operations, and why microservice architecture and Conway's law are essential for building scalable, cloud‑native systems.
KubeSphere 3.2.0, the latest cloud‑native distribution built on Kubernetes, introduces GPU resource scheduling and monitoring, enhanced observability with Grafana panels, multi‑cluster and multi‑tenant management, advanced storage features, a global gateway, OpenID Connect authentication, a dynamic application store, and a more independent DevOps suite, all aimed at improving user experience and operational efficiency.
This article introduces Sealer’s overall architecture, explains its core concepts such as CloudImage, Kubefile, and Clusterfile, details the purpose of each module within the project, and compares its workflow to Docker for building and running Kubernetes cluster images.
This article explains the principles, evolution, and practical scenarios of Serverless architecture—including static sites, micro‑services, event‑driven processing, and workflow orchestration—highlighting how it frees developers from server management to concentrate on core business value.
This article explains the fundamentals of time‑series anomaly detection, the limitations of static threshold rules in open‑source Prometheus, and how Alibaba Cloud Prometheus introduces template‑based and smart detection operators to handle spikes, periodic patterns, and data quality issues in AIOps scenarios.
This article demystifies Kubernetes networking by explaining the fundamental design of unique Pod IPs, intra‑node communication via veth pairs and bridges, and inter‑node packet routing across CIDR blocks, providing clear step‑by‑step illustrations of how containers talk within and between nodes.
This article explains how to use Kubernetes monitoring features such as service details, topology maps, and pod metrics to quickly identify load‑balancing imbalances, cluster scheduling bottlenecks, and resource hotspot problems, providing practical steps and visual examples for improving system reliability and performance.
This guide provides a step‑by‑step troubleshooting workflow for common Kubernetes problems across Pods, Services, and Ingresses, explaining key concepts, diagnostic commands, typical failure states, and remediation links to help operators quickly identify and resolve cluster issues.
