This article provides a detailed overview of Istio’s architecture, explaining the roles and interactions of its data plane, control plane, and core components such as Envoy sidecar, Pilot, Mixer, Citadel, Galley, sidecar‑injector, and ingress gateway within a Kubernetes‑based service mesh.
This article analyzes the ten‑day, large‑scale construction of Huoshenshan and Leishenshan hospitals from a DevOps perspective, detailing the "small team‑big backend" organization, parallel value streams, modular building techniques, cloud‑native analogies, waterfall versus agile models, quality‑in‑built practices, and the operational challenges faced by the medical teams.
Kong’s Insomnia Designer adds a collaborative, spec‑first environment for designing REST and GraphQL APIs, integrates CI/CD, GitOps, and Kubernetes, and embeds Kong gateway policies directly into API specifications, boosting productivity for cloud‑native development.
This article explains how Docker solves environment‑configuration challenges, compares containers with virtual machines on startup speed, resource usage, and isolation, outlines Docker’s key advantages such as easy deployment and low cost, and discusses its remaining drawbacks like isolation limits, performance under high concurrency, and storage considerations.
Dragonfly, an open‑source P2P image distribution system, was promoted to CNCF incubation after demonstrating scalable download, CDN‑assisted long‑distance transfer, bandwidth‑saving compression, and secure transmission, while the CNCF TOC outlined its promotion process and the project's growing industry adoption.
This article provides a comprehensive introduction to Istio, explaining what a service mesh is, its core components and functions, the challenges it addresses in microservice architectures, and practical steps for adopting Istio in production environments.
This article explains what a service mesh is, outlines the operational challenges of microservice architectures, and details how Istio’s data‑plane and control‑plane components provide traffic control, security, and observability to simplify cloud‑native deployments.
This article explains how to use infrastructure‑as‑code techniques on Kubernetes to automate the deployment and CI/CD pipelines of .NET Core microservices, detailing the role of k8s.yaml files, Jenkinsfiles, and related automation tools.
This article offers a pictorial introduction to Kubernetes, explaining what containers are, when to use orchestration, why Kubernetes stands out, and detailing its core architecture—including master components, pods, controllers, services, and ingress—providing a clear, beginner-friendly overview of container orchestration in cloud-native environments.
This article provides a comprehensive overview of Prometheus, covering its origins, architecture, step‑by‑step deployment, configuration, web UI usage, as well as its key advantages and limitations for cloud‑native monitoring and operations.
This article explains how to combine RocketMQ with Knative to create cloud‑native, event‑driven serverless applications, covering cloud‑native fundamentals, Knative architecture, RocketMQSource integration, a food‑delivery use case, deployment steps, command‑line examples, and additional scenarios.
This article details the evolution of an online development platform—from early WebIDE experiments and code‑server integration to a cloud‑native architecture with client, server, and container pool components—highlighting challenges in resource scheduling, high availability, startup speed, and plugin ecosystems, and sharing practical solutions and scenario deployments.
This article explains the principles, advantages, and drawbacks of blue‑green deployment, canary (gray) release, and A/B testing, compares their use cases, and provides step‑by‑step guidance for safely rolling out new versions in modern cloud‑native environments.
This article provides a comprehensive guide to Spring Cloud Gateway, covering its role as an API gateway, core features, underlying principles, step‑by‑step module creation, Maven dependency configuration, application annotations, YAML routing examples, and a runnable demo for building cloud‑native microservice architectures.
This article explains the principles behind Alibaba Cloud Kubernetes cluster node scaling, covering manual and automatic node addition, cluster expansion with ESS, and auto‑scaling using Cluster Autoscaler, along with troubleshooting steps and key components involved.
This roundup highlights recent cloud‑native developments, including the donation of Istio to an open‑source foundation, Kotlin gRPC becoming open source, dynamic watch‑cache sizing and authentication tweaks in Kubernetes, Knative 0.14 release details, xDS v3 planning, plus curated open‑source project and reading recommendations.
This article provides a comprehensive overview of Kubernetes, covering its definition, advantages, core features, typical use cases, architectural layout, essential control‑plane and node components, as well as common add‑on tools for monitoring and networking.
This article explains how the Open Application Model (OAM) abstracts away infrastructure details, enabling developers to define applications with concise YAML files and deploy them to AWS Fargate via the Amazon ECS for OAM project using just a few simple commands.
This article explains the Thanos architecture, compares Sidecar and Receiver deployment modes, walks through object‑storage configuration, and provides complete Kubernetes YAML examples for Prometheus, Thanos Sidecar, Query, Store Gateway, Ruler, Compact, and Receiver to build a large‑scale cloud‑native monitoring system.
This article explains how the CNCF‑incubated Argo suite enables native Kubernetes workflows, details performance‑enhancing contributions such as RBAC‑aware executors, parallel scanning, and status compression, and showcases a real‑world gene‑sequencing use case that achieves over a hundred‑fold speedup.
Rakuten Mobile leveraged Kubernetes, OpenNESS, and the open‑source Kube‑OVN data‑plane to replace virtual machines with containers in its NFV and RAN infrastructure, creating the first cloud‑native 5G network and outlining future enhancements for telecom‑grade performance and scalability.
This guide explains the concepts of apiserver clients, authentication methods, service accounts, RBAC authorization, admission control, and provides step‑by‑step instructions for installing and accessing the Kubernetes Dashboard 2.0.
The article examines the challenges of traditional SOA and microservice architectures in large enterprises, proposes a distributed multi‑center integration model that combines traditional services with microservices, emphasizes security, scalability, and data redundancy, and outlines the roles of capability centers, open platforms, and routing components within a cloud‑native environment.
Apache ShardingSphere, the open‑source distributed database middleware originally contributed by Dangdang and now backed by the Apache Software Foundation, has graduated to a top‑level Apache project, showcasing its evolution from a simple JDBC sharding driver to a comprehensive ecosystem with JDBC, Proxy, and Sidecar components, adopted by over 120 companies.
The article analyzes a recurring Kubernetes node NotReady problem where restarting kubelet only restores readiness for three minutes, explains the underlying PLEG timeout mechanism, investigates unresponsive Terway CNI plugin behavior, and presents a netlink‑timeout fix to prevent the issue.
This article introduces Spring Cloud Alibaba as a one‑stop microservice solution, compares it with traditional Spring Cloud, outlines its advantages, presents a detailed component selection for the PassJava project, and provides version compatibility, Maven dependency snippets, and final technology choices.
This article examines the evolution of Tencent's TSF Mesh Service Mesh platform, detailing its architecture, the technical hurdles faced when supporting heterogeneous environments, multi‑tenant isolation, DNS and Spring Cloud interoperability, and the solutions implemented to achieve robust, cloud‑native service governance.
This article explains the evolution from manual deployment to container orchestration, compares Docker Compose, Mesos, and Kubernetes, outlines DevOps principles, and provides a detailed overview of Kubernetes origins, features, architecture, and core components.
This article reviews the SIG Cloud‑Provider‑Alibaba webinar, explains Kubernetes container networking fundamentals, details Alibaba Cloud's high‑performance CNI implementation using Terway with exclusive and shared ENI modes, and shows how eBPF, AutoPath DNS and resource‑pooling improve scalability and latency.
The article explains Docker's new cross‑platform Compose specification, highlights its concise syntax and cloud‑native benefits over Kubernetes, showcases example configurations, and describes related open‑source projects and Lingque Cloud's contributions to the spec development.
This article explains the fundamentals and advantages of edge computing, examines how Kubernetes can be applied to edge scenarios, discusses the challenges involved, and reviews major open‑source Kubernetes‑based edge projects such as K3s, Microk8s, and KubeEdge.
In a live Q&A, OPPO cloud platform senior backend engineer shares practical insights on hybrid deployment of offline jobs on Kubernetes, custom high‑performance monitoring with a distributed TSDB, storage scalability via CSI, pod readiness detection, and deploying Ceph/HDFS within the container cluster.
This article provides a detailed analysis of Thanos' architecture, explaining each core component—Query, Sidecar, Store Gateway, Ruler, Compact, and the upcoming Receiver—how they enable global view, high availability, and long‑term storage for distributed Prometheus deployments, and discusses design trade‑offs and optimization strategies.
This article provides a comprehensive step‑by‑step guide for installing, configuring, and performance‑tuning the Rainbond (formerly CloudHelp) Kubernetes‑based platform, covering prerequisites, FAQ, installation commands, node addition, kernel and system parameter adjustments, and post‑installation verification.
This article introduces Portainer.io, a lightweight graphical interface for Docker that simplifies container monitoring, image handling, and stack creation, providing step‑by‑step installation commands, feature highlights, and practical usage tips for cloud‑native developers.
This article explains the evolution of container runtimes, the introduction of the Container Runtime Interface, and how Kubernetes RuntimeClass—introduced in v1.12 and expanded in later versions—enables multiple runtimes, custom scheduling, and pod overhead accounting, with practical YAML examples and multi‑runtime deployment scenarios.
The TVP Technical Closed‑door Conference gathered 44 experts across eight sessions to examine post‑pandemic technology trends—including blockchain as institutional infrastructure, cloud‑native databases and serverless computing, industrial internet transformation, data‑driven online education, federated learning for privacy‑preserving AI, and the shift toward resource‑focused technical entrepreneurship.
This article analyzes how the rapid, modular construction methods used for the Huoshenshan and Leishenshan hospitals can be mapped to software development, illustrating parallels in requirement decomposition, architecture selection, containerization, and cloud‑native microservice design for efficient DevOps delivery.
This article demystifies cloud‑native infrastructure by clarifying common misconceptions, defining its core principles—API‑controlled, software‑managed resources aimed at running applications with minimal human intervention—and outlining its benefits, implementation steps, and the mindset shift required for modern operations.
This article explains the concept of secure containers, their definition based on the OCI specification, and how projects like Kata Containers and gVisor implement isolation layers to provide VM‑level security with container‑level performance in cloud‑native environments.
This article explains what Istio is, outlines the major updates in version 1.5—including the unified istiod control plane, WebAssembly extensibility, simplified installation, and improved observability—describes core control‑plane components, and provides step‑by‑step instructions for preparing a Kubernetes cluster and installing Istio.
This article explains how to design and implement a cloud‑native, large‑scale distributed monitoring system using Prometheus, covering its limitations, service‑level sharding, centralized storage, federation, and high‑availability strategies to overcome scaling challenges in Kubernetes environments.
Kubernetes 1.18, released on March 26 2020, introduces 38 enhancements—including beta and alpha features—such as the Topology Manager, ServerSideApply v2, IngressClass with pathType, kubectl alpha debug, Windows CSI support, and a dozen enhancements that have graduated to stable, reshaping cluster performance and usability.
The article reviews the rapid rise of Serverless as the next evolution of cloud computing, citing Gartner forecasts, real‑world case studies, best‑practice recommendations, and perspectives from global experts on its benefits, challenges, and future impact on development and operations.
This article explains OceanBase's public‑cloud deployment, its unique architecture without a central controller, horizontal scaling via partition groups, LSM‑Tree storage design, advanced SQL engine features, ACID‑plus‑Availability guarantees, and real‑world performance records, illustrating why it suits high‑availability financial workloads.
This article explains Envoy's hot‑restart capability, various dynamic configuration options—including static, SDS/EDS, CDS, RDS, and LDS—and the initialization and drain processes that enable seamless updates and graceful connection handling in cloud‑native deployments.
The case study details how a major state‑owned real estate company, with nearly 40 years of experience, built a three‑stage cloud‑native middle‑platform strategy—business, data, and technology platforms—using microservices, containers, and Tencent Cloud TSF to achieve integrated operations, data‑driven decision making, and agile infrastructure across its nationwide projects.
This article details NetEase's game monitoring system that supports billions of users worldwide, covering global monitoring challenges, a layered observability architecture, massive time‑series processing, visualisation and alerting mechanisms, and intelligent AI‑driven anomaly detection practices.
This article introduces Istio as an open platform for connecting, securing, controlling, and observing services, explains the fundamentals of service mesh, outlines Istio’s architecture and components, and provides practical steps for adopting Istio in a Kubernetes environment.
The article explains Envoy's circuit‑breaking mechanisms, global rate‑limiting integration, and TLS support, detailing configuration options, limits, and example YAML snippets for deploying secure and resilient service‑mesh proxies.
This article explains the origins and design of Kubernetes' Container Runtime Interface (CRI), how it abstracts container runtimes, details its lifecycle and streaming operations, reviews major implementations like CRI‑containerd and CRI‑O, and introduces essential debugging tools.
This article explains the classic definition of patterns, introduces architecture patterns, and reviews five common software architecture styles—layered, microservices, microkernel, event‑driven, and cloud‑native—detailing their principles, advantages, drawbacks, and typical use cases, helping developers choose the right structure for complex systems.
This article explains why Kubernetes has become the de‑facto standard, outlines simple methods to get a usable cluster such as Katacoda, Minikube or cloud services, and proposes a focused learning path that starts with core concepts and real‑world deployment scenarios for developers.
Nightingale, Didi’s open‑source enterprise monitoring platform, builds on Open‑Falcon but adds a hierarchical object tree, in‑memory indexing, Gorilla‑compressed time‑series storage, a hybrid push‑pull alert engine, built‑in log monitoring, and a unified monapi module, delivering scalable, cloud‑native observability for both container and bare‑metal workloads.
This article explains Envoy’s service discovery mechanisms—including static, strict DNS, logical DNS, original‑destination, and Service Discovery Service—detailing how they work, their consistency models, and how health‑checking influences routing decisions in production environments.
The article summarizes insights from Tencent’s TVP closed‑door tech forum, explaining what cloud native means, its evolution, benefits such as platformization and automation, challenges in adoption, Kubernetes’s growing role in serverless, edge computing, and service mesh, and how developers and enterprises can navigate the shift.
At Tencent Cloud’s closed‑door TVP meeting, experts traced cloud‑native’s evolution from monolithic to PB‑scale distributed platforms, highlighted its ecosystem of infrastructure, service‑mesh and Kubernetes‑driven scheduling, noted widespread Fortune‑100 and Tencent adoption, and stressed that successful implementation hinges more on organizational and developer mindset shifts than on technology maturity.
This article explains Envoy's core terminology, thread model, listener architecture, network (L3/L4) filters, HTTP connection manager, and routing configuration, providing a concise technical overview of how the service proxy operates within cloud‑native environments.
The article reviews a Tencent Cloud TVP closed‑door forum where experts compared MySQL 8.0, PostgreSQL, Redis and the cloud‑native CynosDB, highlighting each product’s technical strengths, ecosystem support, and the broader industry trend toward cloud‑native, multi‑database solutions as the future of data management.
This article provides a comprehensive introduction to Spring Cloud, explaining how it builds on Spring Boot to simplify distributed system development with components for service discovery, configuration management, messaging, monitoring, security, and compares its approach to Dubbo's RPC framework.
The article examines the energy sector’s digitalization challenges and presents CNPC’s “Dream Cloud” platform—detailing its cloud‑native architecture, container‑based PaaS, DevOps workflow, and service‑oriented framework—and shows how these technologies enable unified data sharing, agile application delivery, and measurable operational improvements across upstream oil and gas operations.
This article details Fliggy's year‑long journey of designing, building, and iterating a unified Serverless (FaaS) platform that unified front‑end and back‑end workflows, reduced operational overhead, and now powers over a dozen business scenarios with millions of daily function calls.
Zhihu's Moneta service stores over a trillion rows of user‑read posts and, facing massive write throughput and strict sub‑90 ms query latency requirements, migrated to the open‑source HTAP database TiDB, achieving horizontal scalability, high availability, and dramatically improved performance.
This article shares six practical techniques—including explicit image tagging, using Alpine base images, consolidating cleanup commands, leveraging Docker layer caching, avoiding process managers, and optimizing Java memory settings—to improve the efficiency, speed, and reliability of applications deployed on the Kubernetes‑based Xiaomi Application Engine.
This article explains the origin of the term Kubernetes, clarifies what containers are and why they’re popular, outlines when to adopt Kubernetes, and details its architecture, core components, pods, and key controllers such as ReplicaSet, Deployment, Service, and Ingress.
This article recounts how a pandemic‑era live‑streaming service rapidly expanded from ten‑thousand to one‑million concurrent viewers within three days by analyzing the pre‑deployment assessment, container‑based scaling, monitoring, emergency response plans, and post‑launch optimizations.
This article provides a comprehensive, illustrated introduction to Kubernetes, covering its definition, key advantages, practical scenarios such as logging, DevOps, and microservices, core features, architecture, and essential master and node components for beginners.
This guide explains branch development strategies, naming conventions, Dockerfile creation, image building and publishing, as well as automated Harbor image cleanup using Jenkins pipelines, providing a comprehensive workflow for managing container images in a cloud‑native environment.
This article details UCloud's engineering of API and SDK management—including unified modeling, code generation, automated testing, and CI/CD pipelines—to dramatically improve the stability, reliability, and release efficiency of its public cloud services.
The article presents the launch of Kube-OVN 1.0 GA, shares findings from a 158‑respondent survey on container network usage, outlines current network solutions and future feature demands, and provides a detailed Q&A from the online webinar for practitioners interested in Kubernetes cloud‑native networking.
This tutorial walks through using Groovy code to set up Docker Cloud in Jenkins, detailing class imports, parameter maps, template creation, cloud configuration, and an alternative JNLP‑based example for advanced container launch strategies.
This guide explains how to deploy Jenkins using Docker, set up both static and dynamic Docker‑based slaves, configure plugin sources, adjust certificates, and fine‑tune Docker Cloud settings for reliable CI/CD pipelines.
The article introduces Alibaba's open‑source web server Tengine, explains its Dubbo integration that enables HTTP‑to‑Dubbo proxying, compares it with traditional Java gateway architectures, highlights performance and stability advantages, and provides practical examples and future roadmap details.
This article walks through the step‑by‑step evolution of a high‑traffic e‑commerce backend—from a single‑machine setup to distributed caching, load‑balancing, database sharding, microservices, and finally cloud‑native deployment—highlighting the key technologies and design principles at each stage.
This study evaluates Kubernetes container networking options—Docker host networking, Flannel, IPvlan, VXLAN, host‑gw, and AWS‑VPC—by measuring latency, throughput, and installation cost under high‑load conditions, revealing IPvlan as the lowest‑latency, highest‑throughput solution while host‑gw offers a balanced, low‑dependency alternative.
This guide walks you through Harbor's purpose, core features, architecture components, step‑by‑step installation, testing procedures, and high‑availability setup with Nginx, providing a comprehensive tutorial for building a secure, enterprise‑grade Docker image registry.
This article explains cloud‑native fundamentals, the evolving role of DevOps in the cloud‑native era, and presents a detailed GitOps secure release model with architecture diagrams, branch‑to‑environment mappings, Jenkins pipelines, and supporting tools for efficient, safe application delivery.
This article introduces Kong, a cloud‑native API gateway, outlines its key features such as high performance, plugin architecture, and traffic control, explains why it solves common microservice challenges, and provides detailed deployment, clustering, plugin development, and troubleshooting guidance with practical code examples.
This article introduces Kong, a cloud‑native API gateway, outlines its key features such as high performance, plugin architecture, and built‑in security, explains why it solves common microservice challenges like unified entry, scalability and CI/CD, and provides step‑by‑step guidance for deployment, clustering, custom plugin development, and troubleshooting.
This article reviews the historical evolution, market size, and technical advantages of relational databases, explains the shift from centralized to distributed architectures, and highlights OceanBase's recent breakthroughs and community events as a modern distributed relational solution.
This article introduces the fundamentals of serverless architecture, explains how Docker containers and Kubernetes orchestration enable dynamic scaling, and outlines various autoscaling mechanisms and scenarios for elastic resource management in modern cloud-native applications.
The 2019 cloud‑native survey of over 400 enterprises across finance, energy, manufacturing and automotive sectors showed that 70.7% planned container, DevOps and micro‑service initiatives, 70% saw modest IT budget growth, and 11.4% had piloted benchmark cloud‑native practices, prompting a 2020 follow‑up study to assess current adoption and challenges.
This guide walks through installing the Spinnaker continuous‑delivery platform on a Kubernetes 1.16+ cluster using Helm 3, covering environment preparation, Helm chart adjustments for API version compatibility, storage class configuration, proxy settings for Halyard, and exposing the service via Traefik IngressRoute.
This article explains the fundamentals of Service Mesh, why it is needed in micro‑service environments, compares the two leading implementations Istio and AWS App Mesh, and shares practical deployment experiences and best‑practice recommendations for cloud‑native applications.
The article surveys 2020 DevOps trends, covering cloud‑native adoption, container registries, Go's role, heightened security, serverless growth, multi‑cloud strategies, and real‑world case studies, while highlighting key performance metrics and market forecasts for the next few years.
This article walks through Docker’s architecture, acceleration tricks, containerization best practices, and a hands‑on DevOps workflow that uses Jenkins to build Docker images and deploy them to a Kubernetes cluster, highlighting practical tips for Chinese developers and cost‑effective cloud‑native operations.
This article explains why container resource view isolation is needed, outlines common scenarios where lack of isolation causes issues, and demonstrates how to achieve isolation using Lxcfs together with a Kubernetes mutating admission webhook, including configuration details and sample scripts.
iQIYI has adopted Apache Dubbo since 2019, building a custom SPI‑based plugin system, integrating registration, configuration and metadata centers, enhancing availability with instance‑level health checks and Sentinel circuit‑breaking, implementing region‑aware routing and AK/SK authentication, and contributing extensive optimizations and future‑oriented plans to the open‑source Dubbo ecosystem.
The article answers a technical question about using Calico as the network mode in container cloud networks, explaining that Calico relies on three‑layer routing with BGP, requiring hardware BGP support and sufficient processing capacity to host the full‑mesh routing for all nodes.
This article explains the motivations behind OAM, outlines its eight core values—including cloud‑native declarative definitions, platform‑agnostic deployment, infrastructure‑as‑code, architecture‑focused design, integrated operations, transparent integration, role separation, scalability, and modular collaboration—while providing concrete YAML examples and AWS ECS CLI principles.
The article surveys the 2020 DevOps landscape, highlighting how cloud‑native architecture, container registries, Go adoption, heightened security, open‑source momentum, serverless computing, and multi‑cloud strategies are reshaping software delivery and organizational digital transformation.
Jenkins X introduces serverless Jenkins, leveraging Prow and Knative on Kubernetes to provide a cloud‑native, highly available CI/CD solution that eliminates single‑point failures, reduces costs, and integrates GitOps, while offering migration guidance, FAQs, and practical Terraform commands for deployment.
This article examines the functions, architectural positioning, practical applications, competing solutions, and selection criteria of API gateways for OpenAPI platforms, microservice architectures, and legacy system integration, offering guidance on private‑cloud, public‑cloud, and custom implementations.
This article details Tencent Online Education's three business lines, the challenges of mini‑program engineering such as inconsistent environments and release issues, and how a custom DevOps workflow, automated testing, a bespoke CLI tool, and Serverless cloud functions were introduced to create a unified, scalable cloud‑native development pipeline.
This article explores the evolution of ICBU’s cross‑border supply‑chain web architecture, detailing the rise of Serverless, the shift from traditional Webx to BFF and Egg‑based micro‑applications, the implementation of FaaS/EaaS, engineering and monitoring practices, and the resulting performance and business benefits.
This article explains what a Service Mesh is, how it simplifies inter‑service communication in microservice architectures, outlines its core features, and reviews the two most popular open‑source implementations, Linkerd and Istio.
This guide walks through deploying node‑exporter, Prometheus, and Grafana on a Kubernetes cluster with YAML manifests, configuring services, RBAC, and Grafana dashboards to monitor cluster metrics, and includes verification steps and code examples.
The article forecasts seven pivotal cloud‑native technology trends for 2020—including Serverless, Service Mesh, Kubernetes, edge computing, container instances, infrastructure evolution, and application development—while explaining how these shifts will reshape software lifecycles, operational efficiency, and business value.
This article introduces Vitess, a cloud‑native MySQL sharding middleware, explains its key features, architecture, core concepts such as cells, keyspaces, shards and vindexes, and provides a step‑by‑step guide to performing a reshard from two to four shards while highlighting operational challenges and practical recommendations.
This roundup covers VMware's $2.7 billion acquisition of Pivotal, Google's BeyondCorp zero‑trust whitepaper, PingCAP's open‑source Chaos Mesh, Kubernetes 1.16.5 Go upgrade, cache‑consistent reads in kube‑apiserver, master upgrade challenges, recommended open‑source tools, reading picks on DevOps and edge computing, and a free CNCF‑Alibaba cloud‑native course.
