The article investigates why applications experience higher latency and lower QPS after moving from virtual machines to Kubernetes containers, analyzes soft‑interrupt overhead caused by Calico's overlay network, and proposes underlay networking and Cilium CNI as optimization solutions.
The mixed version proxy, introduced as an alpha feature in Kubernetes 1.28, enables correct handling of HTTP requests across clusters with multiple API server versions by routing requests to a compatible peer, preventing 404 errors during upgrades and providing flags for configuration and security.
This article explains why centralized logging is essential for modern micro‑service systems, outlines an ELK‑based architecture with Filebeat, Kafka, Logstash, Elasticsearch and Kibana, and provides detailed configuration examples for both file‑based and Kubernetes‑based log collection, plus visualization techniques.
This tutorial walks you through the concepts of Kubernetes Operators, how they work, and provides a hands‑on walkthrough using Kubebuilder to set up the development environment, create a simple Foo operator, define CRDs, implement controller logic, and deploy and test the operator on a local cluster.
This article examines the trade‑offs of using fewer large worker nodes versus many smaller ones in a Kubernetes cluster, covering capacity, resource reservations, scaling behavior, image pulling, API load, node limits, storage constraints, and practical recommendations.
ByteDance’s multi‑cloud evolution, driven by rapid business growth, cost control, and compliance needs, showcases a distributed cloud‑native platform built on open‑source orchestration, unified resource management, and advanced data‑lake solutions, while addressing operational complexity, interoperability, and emerging AI‑driven challenges.
This article details ZEEK Automotive's transition to a cloud‑native architecture, describing how the company adopted Kubernetes, containerization, micro‑service unification, and full‑link gray release to improve system stability, scalability, and development efficiency across its APP ecosystem.
This article explains how Kubernetes logging works, reviews popular log collection agents like Fluentd, outlines best‑practice guidelines such as centralized storage, log rotation, structured logs, and sensitive data handling, and provides useful CLI tools and kubectl commands for efficient log inspection.
During a migration from Nginx to APISIX, the team encountered TLS handshake failures caused by missing SNI fields and legacy SSLv2Hello usage, leading to a detailed investigation, protocol explanations, and configuration fixes to restore secure connections without modifying client code.
Kubernetes 1.28 adds two alpha features—Pod Replacement Policy and per‑index backoff limits—that let batch jobs replace terminating pods more intelligently and cap retries for each indexed pod, reducing resource waste and improving reliability for machine‑learning workloads.
This article explains how Prometheus stores alerts only as time‑series data, why that limits historical queries, and provides a complete open‑source solution using Alertmanager, Alertsnitch, MySQL, and Grafana to persist, query, and visualize alerts in production environments.
This article explains how the Ray distributed computing engine simplifies the design, deployment, and operation of complex cloud‑native distributed systems—illustrated through an AutoML service example—by detailing system complexity, Ray’s core concepts, resource customization, runtime environments, monitoring, and ecosystem integrations.
This article explains how to construct an Internal Developer Platform (IDP) on Kubernetes by outlining its essential components, adding default add‑on tools, establishing governance and policies, and implementing continuous integration/continuous delivery pipelines to provide developers with a safe, efficient, and cost‑effective experience.
This article details how ZEEK automotive tackled rapid growth challenges by redesigning its cloud‑native infrastructure, adopting Alibaba Cloud ACK FinOps and ACK One for multi‑cluster management, and implementing cost‑visibility, intelligent allocation, and configuration checks that yielded significant resource savings and operational stability.
This tutorial explains digital certificate fundamentals, common formats, the principles of one‑way and two‑way HTTPS authentication, and provides step‑by‑step Kubernetes configurations—including secret creation and Ingress setup—to implement secure TLS communication.
This guide shows beginners how to simplify Kubernetes YAML creation by leveraging kubectl's help, dry‑run, and explain commands, providing step‑by‑step examples, code snippets, and practical tips to boost efficiency and confidence when deploying applications.
Kubernetes v1.28, codenamed Planternetes, introduces 45 enhancements—including expanded version skew support, non‑graceful node shutdown recovery, improved CRD validation, beta ValidatingAdmissionPolicies, hybrid version proxy, and many features promoted to stable—while also deprecating and removing several older components, and provides download and community resources for adoption.
The vivo Internet Container Team built a scalable, high‑availability container monitoring platform by deploying dual‑replica Prometheus clusters with a custom HA adapter, remoteWrite to VictoriaMetrics, and a Kafka forwarder, while cutting metric cardinality, tuning cAdvisor, and upgrading VictoriaMetrics to eliminate data loss and storage spikes, achieving stable, efficient monitoring.
The QQ image storage platform was fully migrated from VM‑based servers to Tencent Cloud’s Kubernetes Engine, consolidating services into containers, adding health checks, anti‑affinity, and autoscaling, which cut costs by 26%, reduced ops effort 30%, and improved scalability and reliability.
This article explains the evolution of service mesh data planes from traditional sidecar proxies to the ambient mesh model, detailing L4/L7 split, eBPF acceleration, Waypoint proxies, CNI and Geneve tunnel configurations, and the resulting end‑to‑end traffic flow in Kubernetes clusters.
Katalyst v0.3.0 introduces major upgrades including enhanced KCNR API bandwidth isolation, a more extensible task and async execution framework, advanced mixed‑deployment controls, load‑aware resource prediction, and concurrent unit testing, all aimed at improving cloud‑native resource management efficiency.
This guide walks through setting up a simulated Kubernetes cluster with Cilium, configuring BGP using FRR on a router node and Bird on worker nodes, and enabling Cilium's built‑in BGP speaker to achieve cross‑node pod communication and LoadBalancer IP advertisement.
This article explains the concept of multi‑tenant Kubernetes clusters, compares soft and hard isolation models, outlines enterprise, SaaS, and KaaS use cases, and provides practical guidance on access control, resource scheduling, and advanced security measures to achieve reliable tenant isolation.
This article reviews the architectures, training methods, and key characteristics of major open‑source large language models such as BERT, GPT, T5, LLaMA and ChatGLM, and then provides a step‑by‑step tutorial for deploying ChatGLM2‑6B on UCloud's UK8S platform using UFS storage, Kubernetes manifests, and command‑line tools.
This article explains what Kubernetes CustomResourceDefinitions (CRDs) are, how they extend the platform without modifying core code, and provides step‑by‑step examples for creating CRDs and custom objects using YAML manifests and kubectl commands.
This article explores the inner workings of Kubernetes Pods by examining how containers share network, IPC, mount, and PID namespaces, how cgroups enforce resource limits, and how similar behavior can be reproduced with Docker, providing hands‑on examples and code snippets for deeper understanding.
Datree is an open‑source CLI that validates Kubernetes YAML files against customizable policies, offering syntax checks, version validation, and resource limits enforcement, allowing developers to catch configuration errors without connecting to a live cluster and providing dashboard‑driven rule management.
This guide explains how to design a Kubernetes‑based architecture for a large‑scale online store, covering component containerization, auto‑scaling mechanisms, high‑availability deployment, continuous delivery, and monitoring integration to handle traffic spikes reliably.
By integrating Kubernetes with DevOps practices, teams can automate deployment pipelines, achieve dynamic resource allocation, centralize monitoring with tools like Prometheus and Grafana, and treat infrastructure as code, resulting in faster, higher-quality software delivery and improved collaboration between development and operations.
This article explains what a Kubernetes Service is, why it is needed, how to create one with a Deployment, and details the internal workings of Service controllers, Endpoints, and kube-proxy using iptables and ipvs modes.
This article explains how to use GitLab CI and Kubernetes namespaces to automate building, testing, and deploying containerized services, ensuring environment isolation, resource control, traceability, and low operational overhead without introducing additional platforms.
This article provides a comprehensive guide to Kubernetes Gateway API, covering its evolution from Ingress, core concepts, resource types, configuration examples, role‑based design, cross‑namespace routing, and practical steps for installation, deployment, and management using Istio and other controllers.
The article investigates why Kubernetes pods can access a CLB on port 80 but receive connection‑refused errors on port 443, explains the role of the dummy kube‑ipvs0 interface and IPVS rules, and presents annotation‑based and traffic‑policy solutions for both internal and external access.
This article explains Volcano Engine's next‑generation GPU sharing scheduling technology, detailing the two‑layer scheduler, card‑level bin‑pack/spread strategies, system architecture, API definitions, and optimization algorithms that together increase GPU deployment density over 500% and improve utilization by more than 50% for AI workloads.
This article examines Kubernetes networking models, detailing underlay and overlay concepts, the role of layer‑2/3 infrastructures, and how CNI plugins like Flannel, Calico, IPVLAN, Multus, and DANM implement these models for efficient pod communication.
This article explains how Kubernetes ensures each Pod receives a unique IP address by detailing the roles of the network provider, CNI plugins, CRI, and container runtimes such as containerd, with a focus on Flannel's vxlan and bridge implementations.
This article explains how Kubernetes stores objects via the API and etcd, compares imperative and declarative management with kubectl commands and YAML files, describes the spec/status model, outlines the API server processing pipeline, and details the controller‑based reconciliation loop that drives desired state convergence.
This tutorial walks through deploying a simple Hello World application on a Kubernetes cluster using YAML files, covering Deployment and Service definitions, key fields such as name, selector, labels, image, ports, and how to expose the service via a NodePort.
This guide presents a collection of advanced kubectl techniques—including printing API details, filtering and deleting pods by status, counting pods per node, analyzing pod distribution across machines, and leveraging kubectl proxy—providing practical command examples and explanations for experienced Kubernetes users.
This guide shows how to accelerate Bloom‑7B1 inference on Alibaba Cloud ACK by converting the model to FasterTransformer format, deploying it with Triton Server, and comparing performance against the original HuggingFace checkpoint, achieving roughly a 2.5‑fold speedup.
This article explains how the open‑source Koordinator scheduler, combined with KubeDL, tackles the resource‑intensive demands of large‑scale AI and LLM training on Kubernetes by introducing heterogeneous resource management, elastic quota, coscheduling, and fine‑grained GPU & RDMA allocation.
This article compares traditional independent config centers with Kubernetes as a config center, explains how to simplify environment variable handling, automatically generate Dockerfiles, and manage build and runtime images in Go projects, offering practical tips and code examples for containerized service deployment.
This tutorial walks through installing the etcd client, creating an Nginx deployment for verification, backing up the etcd data store, validating the backup, and restoring the backup to a Kubernetes cluster while handling component shutdown and restart procedures.
ByteFUSE, a user‑space FUSE‑based solution for ByteNAS, delivers low‑latency, high‑throughput, POSIX‑compatible storage across AI training, database backup, and search services by replacing NFS with a cloud‑native architecture that leverages CSI, RDMA, and kernel‑module hot‑upgrade techniques.
This guide explains how to register for Akuity Academy's free ArgoCD GitOps introductory course, walk through the training modules, complete the hands‑on GitOps experiment, and obtain the certification badge, providing a practical pathway for DevOps practitioners to master continuous delivery with Argo CD.
To overcome native HPA limits and business‑specific constraints in a fully containerized, cloud‑native Kubernetes environment, we implemented a dual‑threshold water‑level and scheduled scaling engine, hybrid‑cloud ClusterAutoScale, mixed‑deployment resource prioritization, and comprehensive Prometheus‑based observability, achieving higher utilization, lower costs, and a roadmap toward deeper optimization and AIOps.
Kubernetes v1.27 introduces an alpha in‑place pod vertical scaling feature that lets you adjust a running pod’s CPU and memory limits without restarting, explains the new API fields, usage steps, practical scenarios, and known limitations.
This article introduces a systematic approach for troubleshooting Kubernetes pod network problems, covering anomaly classification, essential diagnostic tools such as tcpdump, nsenter, paping and mtr, a step‑by‑step troubleshooting workflow, and detailed case studies that illustrate root‑cause analysis and resolution techniques.
This article explains what K3s and Kubernetes (K8s) are, compares their architectures, deployment methods, resource requirements, upgrade processes, performance and security, and advises when to choose the lightweight, CNCF‑certified K3s over the full‑featured Kubernetes for edge, development or production environments.
This article shares practical kubectl tips—including printing API calls, filtering and deleting pods, counting pod distribution, and using kubectl proxy—to help experienced Kubernetes users work more efficiently and troubleshoot clusters with powerful command‑line shortcuts.
The article explains how Kubernetes allocates Pod IPs—from cluster and node CIDR configuration, through the kubelet‑driven Pod lifecycle and CNI IPAM process, including dual‑stack support, hostNetwork handling, and optional IP reservation/reclamation mechanisms for stable stateful workloads.
This guide explains the common challenges enterprises face when adopting cloud‑native release strategies and provides a step‑by‑step solution using Alibaba Cloud MSE and ZadigX to create, configure, and manage full‑link gray deployments on Kubernetes clusters, including code examples and workflow automation.
This guide explains how to set up a StarRocks cluster using Docker for rapid testing and the StarRocks Kubernetes Operator for production‑grade deployments, covering architecture basics, required tools, command‑line steps, YAML configuration, and connection methods for both internal and external access.
This informal blog recounts a developer’s hands‑on journey from puzzling over the buzzword “containerization” to building an automated GitLab‑CI, Docker, and Kubernetes pipeline, highlighting practical benefits, challenges, and the humorous “mop‑up” moments that make the transition both enlightening and entertaining.
Kubeflow is an open‑source, CNCF‑incubated project that provides a Kubernetes‑native MLOps platform integrating notebooks, training operators, AutoML (Katib), pipelines, and model serving (KServe) to streamline the development, deployment, and scaling of machine learning models across diverse frameworks.
Datree is an open‑source CLI tool that validates Kubernetes YAML files, enforces custom policies, and prevents misconfigurations without needing cluster access, offering dashboard‑driven rule management and a step‑by‑step example that shows how to fix memory and CPU limits in a deployment manifest.
This article explains the mechanics of Kubernetes CPU resource limits, how to interpret limits as time slices, the Linux accounting system behind them, and which Prometheus metrics can be used to set proper limits and diagnose CPU throttling issues.
This guide walks through setting up a Kubernetes cluster with NFS storage, loading Jenkins and agent Docker images, configuring ArgoCD, deploying Jenkins via declarative manifests, initializing Jenkins, creating and deploying a static Jenkins agent, and troubleshooting common issues, providing full code snippets and screenshots.
This article details Tongcheng Travel's cloud‑native migration journey, describing the challenges of resource quota management, component versioning, and operational automation, and explains how a Kubernetes Operator platform built with Go, kubebuilder, and a watch‑broadcast mechanism addresses these issues while outlining future expansion plans.
This article explains how microservice traffic can be controlled and routed using Istio’s Service‑Mesh features—covering concepts such as header‑based routing, traffic splitting, canary releases, A/B testing, and traffic shading—along with practical YAML examples and Kubernetes deployment details.
This article explains why Loki is a lightweight, cloud‑native log aggregation solution, outlines its advantages and supported storage backends, compares log collectors, details Loki's indexing and query mechanisms, and provides step‑by‑step instructions for deploying Loki in Kubernetes with all‑in‑one, read/write, and microservice modes.
Datree is an open-source CLI that validates Kubernetes YAML files against customizable policies, allowing users to detect syntax errors, version mismatches, and resource limits without connecting to a live cluster, and it provides a dashboard for managing and editing rules.
This article explains the relationship between Docker and Kubernetes, clarifies why Docker knowledge isn’t mandatory for K8s beginners, and outlines the essential Docker skills needed to effectively work with Kubernetes clusters.
Tim's Coffee transformed its legacy systems into a fully containerized, micro‑service, cloud‑native platform, using Kubernetes, Dubbo, ARMS, Prometheus and Grafana to boost deployment efficiency, scalability, cost savings, and observability, while tackling alert storms and improving development productivity.
An accessible Chinese-to-English guide demystifies cloud native by likening it to a city, outlines its definition, core traits, evolution through three philosophical questions, practical “Wang’s Four Rules,” development stages from cloud‑hosted VMs to containers and serverless, and discusses applicability in private and traditional enterprises.
Tengine‑Ingress is Alibaba’s cloud‑native Ingress gateway built on the high‑performance Tengine‑Proxy, replacing the legacy Unified Access with dynamic, loss‑less configuration, per‑domain gray‑rollout, dual‑certificate TLS, real‑time observability, and checksum validation, achieving up to 20 % lower latency, CPU and memory usage while scaling to thousands of pods, and paving the way for a universal API gateway supporting TCP, UDP, gRPC, QUIC/HTTP3 and advanced TLS.
This guide explains why exec‑based pod debugging is limited and demonstrates how to use Kubernetes ephemeral containers to troubleshoot network issues, trace processes, and debug nodes without restarting the pod, including step‑by‑step commands and code examples.
This guide walks you through provisioning a local Kubernetes environment using Terraform and Kind, installing essential tools like kubectl and ArgoCD, and deploying a cloud‑native continuous‑delivery pipeline, providing a repeatable setup for DevOps hands‑on training.
This article explores how Zong An Insurance has pioneered digital transformation in the financial technology sector over the past decade, achieving 100% cloud-native architecture, developing core systems like WuJieShan, and integrating AIGC technologies to create a comprehensive insurance ecosystem.
Tengine-Ingress, Alibaba’s cloud‑native ingress gateway built on Tengine‑Proxy, replaces the legacy Tengine gateway by delivering dynamic, loss‑less configuration updates, high‑availability gray‑release mechanisms, global consistency checks, and significant performance gains in TLS handshake latency, CPU usage, and memory consumption across large‑scale deployments.
This article explains how Kubernetes assigns a unique IP address to each pod by detailing the roles of container runtimes, CRI, CNI plugins, Flannel's vxlan encapsulation, Linux bridges, and the node IPAM controller that allocates podCIDR subnets across the cluster.
This article examines the trade‑offs between running Kubernetes on bare metal versus virtual machines, covering performance differences, orchestration complexity, hardware visibility, capacity planning, network impact, and when each approach makes sense for modern cloud‑native workloads.
This article explains how to achieve zero‑trust security in Kubernetes by using a service mesh such as Linkerd, covering workload identity, mTLS, certificate management, policy definition with CRDs, and the practical limitations of mesh‑based protection.
When a pod crashes and continuously restarts, standard kubelet logs may miss the previous container's output, but using kubectl logs with the --previous flag lets you access the logs of the last terminated instance, as explained with commands, file locations, and practical verification steps.
Kelemetry, an open‑source tracing system from ByteDance, visualizes Kubernetes control‑plane events by treating each object as a span, linking audit logs, events, and component interactions to provide a unified, searchable view that simplifies debugging, performance analysis, and multi‑cluster observability.
This article explains the motivations for adopting KubeVirt, introduces its concepts and architecture, details the component design, and provides step‑by‑step instructions—including code snippets—for deploying KubeVirt, CDI, Ceph‑CSI, external snapshotter, creating VMs and exposing VNC, while outlining future directions for cloud‑native virtualization.
This guide explains what KubeLinter is, why it’s useful for cloud‑native security, how to install it via Go, Homebrew or source, and provides step‑by‑step instructions for linting Kubernetes and Helm manifests, customizing checks, and interpreting results.
Meiqia, a global intelligent cloud‑customer‑service provider, replaced a tangled multi‑middleware routing stack with a unified Higress gateway, achieving hot‑reloadable routing, WebSocket stability, multi‑cloud deployment, and a clear control‑plane/data‑plane separation that dramatically reduced costs and operational complexity.
The 2023 Fairwinds Kubernetes benchmark, analyzing over 150,000 workloads, reveals that many organizations still miss critical best‑practice configurations such as memory limits, liveness probes, proper image pull policies, replica counts, and CPU limits or requests, leading to increased security risks, uncontrolled cloud costs, and reduced reliability.
When a pod crashes and continuously restarts, using kubelet logs may fail to capture output, but the kubectl --previous flag lets you access the logs of the previous container instance by reading the linked log files stored under /var/log/pods.
This comic visually explains Kubernetes fundamentals and demonstrates how to implement continuous integration and continuous delivery pipelines on the platform, using a series of illustrated panels accompanied by translator notes and source references.
Datree is an open‑source CLI that validates Kubernetes YAML files against customizable policies, preventing misconfigurations without needing cluster access; this guide explains why it’s needed, how it works, and demonstrates a step‑by‑step example fixing resource limits in a deployment.
When a Kubernetes pod that previously created connections stops working and reports “Address not available”, the root cause is often exhaustion of the kernel’s random port range, which can be resolved by adjusting net.ipv4.ip_local_port_range and aligning it with ServiceNodePortRange settings.
This article examines Kubernetes networking by defining underlay and overlay models, describing how underlay networks like flannel host‑gw and Calico BGP operate, explaining IPVLAN/MACVLAN virtualization, and reviewing common tunnel protocols such as VxLAN and IPIP used by various CNI plugins.
This article explains how to integrate security into the DevOps pipeline for Kubernetes, covering DevSecOps concepts, image protection, role‑based access control, network policies, encryption, etcd safeguarding, and disaster‑recovery strategies to keep clusters safe and releases fast.
This tutorial walks through creating a complete GitOps CI/CD pipeline on OpenShift using Tekton for builds and ArgoCD for declarative continuous delivery, covering installation, secret management, pipeline definition, webhook configuration, and verification of automated deployments.
This guide explains what Higress is, compares it with traditional gateways, and provides step‑by‑step instructions—including code snippets—to deploy Higress 1.1 as a standalone, non‑Kubernetes cloud‑native gateway, configure routes, and test migration from Spring Cloud Gateway for microservice applications.
This article provides a comprehensive guide to Jenkins pipelines, explaining the difference between declarative and scripted syntax, detailing pipeline components such as agents, stages, steps, post actions, directives, triggers, environment variables, credential handling, and Kubernetes integration for modern CI/CD workflows.
Learn how Kubernetes abstracts persistent storage using PersistentVolumes (PV) and PersistentVolumeClaims (PVC), why HostPath is limited, the role of network storage, and how to implement CSI drivers with practical YAML examples and kubectl commands for creating and managing PVs and PVCs.
This article introduces KubeLinter, an open‑source tool that scans Kubernetes YAML files and Helm charts for best‑practice compliance, explains why it is useful, shows installation methods, provides usage examples, and details configuration and integration options for secure, production‑ready deployments.
Kelemetry, an open‑source tracing system from ByteDance, links Kubernetes control‑plane components by treating each object as a span, aggregating audit logs and events into unified traces that are visualized as trees or timelines, supporting multi‑cluster monitoring and custom conversion pipelines.
The KubeVirt community announces the v1.0 release, detailing its history from a 2016 Red Hat experiment to a CNCF graduated project, describing new features across SIGs, updated release cadence, and future roadmap for cloud‑native virtualization on Kubernetes.
This article explains how to perform data‑driven A/B testing in progressive delivery using Argo Rollouts Experiments on Kubernetes, covering the concepts, required resources, YAML manifests, command‑line steps, and the benefits of combining A/B tests with canary deployments.
This article reviews container fundamentals, explains Docker’s architecture and Linux namespaces, cgroups, capabilities, and security mechanisms, then surveys recent developments such as containerd, CRI‑O, rootless containers, alternative runtimes like Podman, Kata, gVisor, and emerging WebAssembly‑based approaches, highlighting trends up to 2023.
This article introduces a systematic approach for troubleshooting Kubernetes pod network problems, covering common failure models, essential diagnostic tools such as tcpdump, nsenter, paping and mtr, and detailed case studies that illustrate step‑by‑step analysis and resolution techniques.
This article outlines comprehensive best‑practice guidelines for building Kubernetes applications, covering scalability design, containerization, pod scope, configuration management, health probes, deployments, service discovery, storage, monitoring, security, and CI/CD integration to achieve robust, highly available workloads.
The 2023 CNCF user survey of Argo CD and Argo Rollouts reveals high adoption rates, strong Net Promoter Scores, dominant usage by DevOps and platform engineers, expanding production deployments, and growing ecosystem integrations, highlighting opportunities and challenges for the GitOps and progressive delivery landscape.
Since Kubernetes became the de‑facto standard, ByteDance faced scaling limits with single‑cluster setups, prompting the adoption of KubeFed V2 and later the development of KubeAdmiral, a next‑generation multi‑cluster federation system that enhances scheduling, resource efficiency, native API support, and dynamic scaling across clouds.
This article explains the concept of Confidential Computing, examines Trusted Execution Environments such as AMD SEV, Intel SGX and TDX, compares their security properties and performance overhead, and shows how cloud‑native platforms like Kubernetes can leverage these technologies for stronger data protection.
nsenter, a util-linux command, lets you run programs inside a target process’s namespaces—such as network, mount, or PID—enabling container network debugging, namespace inspection, and execution of commands without needing built-in tools, with examples for Docker and Kubernetes and explanations of underlying clone and setns system calls.
