This article explains Kubernetes' network model, covering container‑to‑container, pod‑to‑pod, pod‑to‑service, and external traffic flows, while detailing network namespaces, veth pairs, Linux bridges, iptables/IPVS load‑balancing, and cloud‑native solutions like LoadBalancer and Ingress controllers.
This article outlines essential Kubernetes security principles based on the 4C model, discusses best practices for clusters, containers, and code, and reviews several open‑source tools such as Kubescape, kube‑bench, Terrascan, kube‑hunter, and Anchore for assessing and improving cluster security.
This article explains the kube-ovn-cni component of the Kube-OVN project, detailing the CNI workflow, the cmdAdd interface, daemon handling, and the configureNic function that together create and configure pod network interfaces within a Kubernetes cluster.
This article explains the evolution of container runtimes, distinguishing low‑level and high‑level runtimes, introduces key projects such as runC, containerd, CRI‑O, and demonstrates practical demos and CRI integration with Kubernetes, providing code examples and architectural diagrams for cloud‑native practitioners.
OpenYurt v0.7.0 introduces the Raven solution, a non‑intrusive, encrypted‑tunnel based approach that seamlessly connects pods across public‑cloud, edge‑to‑edge, and edge‑to‑cloud environments without modifying existing CNI plugins, while also adding EdgeX Foundry LTS support, Kubernetes 1.22 compatibility, and IPv6 networking.
This article examines HashiCorp's Nomad as a lightweight, versatile orchestration tool, compares its features, strengths, and weaknesses against Kubernetes, and helps readers decide which platform best fits their workloads and operational requirements.
This article compares Alibaba Cloud's MSE cloud‑native gateway with the traditional Nginx Ingress Controller across performance, cost, reliability and security, presenting benchmark data, CVE analysis, architectural advantages, and a step‑by‑step migration plan for Kubernetes clusters.
This article describes the challenges encountered when migrating tens of thousands of Kubernetes cronjobs from VMs to a cluster—node instability, low resource utilization, and scheduling delays—and explains how introducing a serverless architecture with virtual nodes, a custom job scheduler, unified logging and monitoring, and sandbox reuse restored stability, improved performance, and reduced resource costs by about 70%.
Shopee reduces data‑center carbon emissions by over 40,000 tons annually through three 2021 green‑computing technologies—Overcommit resource oversubscription, mixed‑model Colocation of latency‑sensitive and batch workloads, and enhanced Auto Scaling that leverages global metrics to cut machine usage and improve resource efficiency.
This article examines how heavy LIST operations in unstructured storage systems like Ceph and etcd consume massive I/O, network and CPU, threaten cluster stability, and offers detailed code analysis, performance testing, and practical tuning recommendations to keep large‑scale Kubernetes clusters reliable.
Facing the limitation of LoadBalancer services on bare‑metal Kubernetes, this guide walks through the background, MetalLB overview, and step‑by‑step deployment using BGP, including environment setup, configuration files, and verification of external IP routing.
This article provides a comprehensive overview of Kubernetes, covering its revolutionary role in cloud computing, master‑worker architecture, core concepts such as Pods and Controllers, storage and networking models, workload types, and extensibility through CRI, CNI, and CSI standards.
This article explains the evolution of cloud service models, defines cloud‑native databases, and presents a detailed maturity model—from basic cloud‑ready deployments to fully serverless data services—helping enterprises evaluate and adopt the most suitable architecture and technology stack for their workloads.
This article reviews the evolution of cloud‑native networking in China, analyzes platformization and underlay trends, explains the technical challenges of traditional CNI solutions, and details Kube‑OVN's architecture, features, and roadmap as a comprehensive enterprise‑grade Kubernetes networking platform.
This article explains how the Kube-OVN controller manages pod IP and MAC allocation, processes pod add and delete events through a list‑watch mechanism, and details the worker workflow and key functions involved in networking for Kubernetes clusters.
This article explains how to execute several containers one after another within a single Kubernetes pod by leveraging initContainers and native Job mechanisms, compares alternative solutions such as Volcano and Argo, provides complete YAML examples, and discusses practical considerations like volume sharing, security contexts, and timeout settings.
This comprehensive tutorial walks you through the fundamentals of K3s, a lightweight CNCF‑certified Kubernetes distribution, covering its architecture, installation on server and agent nodes, configuration options, networking, storage, Helm integration, high‑availability setups, offline installation, upgrades, backups, and advanced customization for edge and cloud‑native environments.
This article chronicles Alibaba's three‑stage evolution of Envoy Gateway—from the 1.0 incubation that powered Double‑11 traffic, through the 2.0 growth phase adding north‑south routing and hybrid‑cloud support, to the mature 3.0 release that unifies traffic and micro‑service gateways with high performance and community‑driven extensions.
This article explains why microservice architecture improves flexibility and scalability, outlines a clear learning roadmap, and details essential components such as Docker, orchestration, API gateways, load balancing, service discovery, event buses, logging, monitoring, tracing, data persistence, caching, and cloud providers, helping readers start or migrate to microservices.
This article shares G7 Tech’s practical experience of exposing Kafka to the public internet, covering encryption, AAA, three authentication schemes, listener configuration, scaling for massive topics with Kubernetes, storage optimization, and integration with the gmq management platform and Kafka‑REST.
This guide explains how to leverage Zadig v1.11.0’s environment self‑test mode to create isolated developer sub‑environments for large‑scale microservice projects, using Istio’s traffic routing and SkyWalking tracing, detailing prerequisite components, configuration of a PiggyMetrics Spring Boot example, and step‑by‑step verification via Kubernetes commands and curl requests.
This article introduces Grafana Loki, an open‑source, horizontally scalable, highly available log aggregation system optimized for Kubernetes and Prometheus, covering its core concepts, architecture, component roles, deployment steps, configuration examples, and practical usage within Grafana.
This article explains how developers and operators should prepare a Go‑based service for Kubernetes by implementing health‑check endpoints, graceful shutdown handling, metrics exposure, tracing integration, standardized logging, and operational best practices such as stateless design, high availability, self‑healing, and HTTPS configuration.
This article provides an in‑depth technical overview of the Kube‑OVN controller, covering its deployment as a Kubernetes deployment, main initialization flow, worker processes for VPC handling, default VPC creation, and related code snippets, illustrating how OpenStack‑style networking is integrated into Kubernetes.
This article presents a detailed technical overview of how ByteDance selected Kube-OVN for a mixed virtual‑machine and container networking scenario, describes the initial network design, identifies performance issues, and outlines three improvement plans including OVS‑DPDK, source‑route optimization, and a switch from Geneve to VXLAN.
This article explains the evolution and core principles of the Kubernetes scheduler, outlines its fairness, efficiency, performance, and flexibility goals, describes the scheduling cycle and filtering‑scoring process, and introduces configuration methods for custom scheduling policies.
This guide introduces Loki, the open‑source, horizontally scalable log aggregation system optimized for Prometheus and Kubernetes, covering its core concepts, architecture, components, deployment steps, Grafana integration, label‑based indexing, and best practices for handling dynamic and high‑cardinality tags.
Version 0.7 of OpenClusterManagement introduces the DefaultClusterSet for automatic cluster grouping, upgrades the Placement API to v1beta1 with Taint/Toleration‑based scheduling, lowers the Hub cluster version requirement to 1.12, adds a Hosted deployment mode, and integrates enhanced multi‑cluster features with KubeVela 1.3 and Alibaba Cloud ACK Agile.
To overcome unsynchronized development, slow deployments, and fragmented testing after moving its document library to the cloud, the team built a Kubernetes‑driven environment‑management platform that automatically provisions containerized sub‑environments on demand, scaling to thousands, cutting costs, boosting security, and enabling rapid, parallel testing for hundreds of projects.
Understanding the data path in Kubernetes systems reveals performance bottlenecks and guides the selection among private‑cloud storage, container‑native storage software, and software‑defined storage to achieve scalable, low‑latency, high‑performance container workloads.
This article details Ctrip's transition from traditional SOA to a cloud‑native Service Mesh using Istio, covering background challenges, technical solutions for control and data planes, SDK compatibility, configuration management, performance optimizations, and future directions such as WebAssembly and sidecar considerations.
This article explains the core components of the Kubernetes control plane—including etcd, the API Server, Controller Manager, Scheduler—as well as key worker‑node components like Kubelet, kube‑proxy, and the container runtime, detailing their roles, interactions, and essential functions.
The article explains the challenges of running stateful applications on Kubernetes—including complexity, vendor lock‑in, elasticity limits, and bloated infrastructure—and presents multi‑cloud, one‑click storage platforms that provide resilient, portable workloads without data loss.
Zuoyebang’s shift to cloud‑native architecture leveraged Alibaba Cloud’s Kubernetes Serverless virtual nodes, achieving a 22.5% cost reduction during peak traffic by dynamically scaling workloads, while addressing scheduling, observability, and performance challenges through custom schedulers, enhanced monitoring, and careful testing.
PayPal’s engineering team detailed their journey of scaling Kubernetes from a few hundred nodes to over 4,100 nodes and 200,000 Pods, describing cluster topology, workload generation, API server bottlenecks, controller manager and scheduler tuning, extensive etcd optimizations, and the resulting performance gains that met Kubernetes SLOs.
This article provides a comprehensive overview of Kubernetes, covering container operation fundamentals, multi‑site deployment models, service discovery mechanisms, shared pod resources, common CNI plugins, layered load‑balancing approaches, isolation dimensions, and essential network model principles for large‑scale clusters.
This guide walks through creating a two‑region, three‑center disaster‑recovery architecture using ACK One’s multi‑cluster application distribution and GTM traffic management, covering cluster setup, differential configuration, workflow control, traffic policies, and verification steps with concrete kubectl commands and YAML manifests.
This article reviews the core structure of Kubernetes pods, explains how pods expose services externally, explores load‑balancing strategies using Services and virtual IPs, and details how kube‑proxy and selectors keep services in sync with changing pod lifecycles.
The Fourth Techo TVP Developer Conference highlighted current cloud‑native adoption, FinOps cost‑optimization, distributed‑cloud strategies, and maturity models on Day 1, then showcased practical best‑practice case studies—from automotive edge computing to service‑mesh migration, hybrid‑cloud PaaS evolution, observability standards, and high‑performance API‑gateway deployments—on Day 2.
This article provides a comprehensive overview of Kubernetes architecture, covering its core components, service discovery methods, pod shared resources, common CNI plugins, multi‑layer load balancing, isolation dimensions, and network model principles that enable scalable, high‑availability container operations.
Kubernetes 1.24 introduces 46 enhancements—including dockershim removal, default‑disabled beta APIs, signed release artifacts, OpenAPI v3 support, storage capacity tracking, CSI volume expansion, and new priority options—while also detailing CNI version considerations, upgraded runtimes, and how to access the release notes and tutorials.
This article provides a comprehensive overview of Kubernetes architecture, covering container operations, multi‑center deployment, service discovery mechanisms, shared Pod resources, common CNI plugins, multi‑layer load balancing, isolation dimensions, and network model principles.
This article explains how to use Kubernetes native autoscaling components—HPA, VPA, Cluster Autoscaler—and cloud‑native extensions such as Alibaba Cloud's Virtual Node, Elastic Container Instance, Elastic Workload, and the open‑source OpenKruise to build a cost‑effective, highly elastic architecture on ACK clusters.
Kubernetes 1.24, released in early 2022, introduces 46 enhancements—including the removal of dockershim, default‑off test APIs, signed release artifacts, OpenAPI v3 support, GA storage capacity tracking and volume expansion, new CNI requirements, and numerous API graduations—while also deprecating or deleting several legacy components.
This article explains Kubernetes' networking model, covering container‑to‑container, pod‑to‑pod, pod‑to‑service, and external traffic flows, detailing network namespaces, veth pairs, bridges, iptables/IPVS load balancing, and cloud‑provider integrations such as AWS VPC and Ingress controllers.
DaemonSets in Kubernetes automatically run a dedicated pod on each node, handling storage, logging, and monitoring tasks, while using node selectors, affinities, and tolerations to manage placement, resources, and lifecycle, with examples and YAML definitions for fluentd‑elasticsearch deployment.
This article explains the fundamentals of Kubernetes, its three core characteristics, practical deployment scenarios for enterprises of different sizes, resource‑utilization calculations, service migration challenges, the evolution from physical servers to containers, and a detailed overview of cloud‑native concepts and Kubernetes components.
This article shares Ctrip's practical experiences in scaling a hybrid private‑cloud platform to over ten thousand nodes, covering Kubernetes control‑plane stability, host monitoring, network observability, image management, and capacity planning to ensure high availability for massive online services.
This article explains the two primary ways to create resources in Kubernetes—using the direct kubectl run command and using kubectl create/apply with YAML files—providing examples, code snippets, and guidance on when each method is appropriate for ad‑hoc testing or declarative, large‑scale deployments.
This article explains the motivations for selecting Grafana Loki instead of traditional ELK/EFK stacks, introduces Loki's core concepts and architecture, details component roles, provides step‑by‑step deployment of Promtail and Loki, and demonstrates how to configure and query logs in Grafana while addressing label indexing, dynamic tags, high‑cardinality challenges, and query performance.
This article details the design and optimization of 58.com’s WPAI machine learning platform, covering background, training‑task scheduling, elastic inference scaling, offline‑online resource mixing, and model‑inference acceleration, and shows how these techniques collectively raised GPU usage by 51% and CPU usage by 38% while cutting costs.
This article explains how Alibaba Cloud Container Service for Kubernetes (ACK) uses container‑level resource profiling with half‑life sliding windows and quantile algorithms to automatically recommend accurate CPU and memory requests, improving cluster utilization while maintaining application stability.
This talk describes Huya’s elastic distributed training system, covering the motivation behind elasticity, its design using Kubernetes and ETCD for dynamic node registration and scaling, implementation details of the EFDL framework, performance evaluations on ResNet‑50, and the resulting benefits and future directions.
Zhang's team at Zuoyebang details their journey to serverless Kubernetes virtual nodes, explaining how elastic scaling, fine-grained scheduling, and cost‑effective resource utilization transformed high‑peak online services, while addressing challenges in scheduling, observability, performance, and multi‑cloud resilience.
This article explains the challenges of traditional open‑source log collection in cloud‑native environments, describes Volcano Engine’s unified TLS architecture, its centralized configuration, CRD‑based deployment, and showcases real‑world case studies that demonstrate improved availability, efficiency, and scalability.
This article walks through building the first stage of an open‑source MLOps pipeline—data ingestion and storage—by outlining requirements, selecting tools such as Argo Workflows, Minio and Great Expectations, showing how to set up a minikube cluster, and providing Python scripts and an Argo CronWorkflow to extract, transform, and load OpenAQ air‑quality data into Minio.
This article explains how OpenKruise Rollout enables non‑intrusive, extensible progressive delivery on Kubernetes, covering its architecture, design goals, traffic scheduling, metric‑driven automation, and a complete canary release walkthrough with code examples.
This article explains the goals, design principles, and detailed components of Kubernetes architecture, covering its control plane, API server, etcd store, scheduler, kubelet, container runtime, and kube-proxy, and summarizes how these parts work together to provide a scalable, portable, and automated container orchestration platform.
This article presents a detailed checklist covering general information, application requirements, security and compliance, CI/CD practices, Kubernetes configuration, monitoring, testing, and 24/7 service team readiness to ensure reliable production deployment of HTTP‑based web services on Kubernetes.
This article describes Huya's elastic distributed training system, explaining why elasticity is needed, the architectural design using Kubernetes and ETCD, the dynamic scaling process, performance evaluations on ResNet‑50, and future improvements for more efficient and reliable AI model training.
IntelliJ IDEA 2022.1 introduces a Dependency Analyzer for managing conflicts, an enhanced New Project wizard, a new Notifications tool window, expanded Java 18 and Kotlin 1.6.20 support, Kubernetes editing capabilities, improved Gradle progress, and numerous UI and language feature upgrades across Java, Kotlin, Go, and other technologies.
This article demonstrates how to split a Tekton pipeline into CI and CD phases, using Tekton for continuous integration and ArgoCD for continuous deployment, covering repository setup, Helm chart management, task and pipeline creation, and verification of the end‑to‑end workflow.
A comprehensive, step‑by‑step checklist guides teams through documentation, application design, security, CI/CD, Kubernetes configuration, monitoring, testing, and 24/7 support to reliably run web services with HTTP APIs in production on Kubernetes.
This article walks through a real‑world case of a SpringBoot service whose message routing failed due to missing configuration, then demonstrates how to redesign the delivery workflow using a single Docker image, unified application.yaml, Helm charts, and CI/CD scripts to achieve environment‑agnostic, reliable deployments across development, staging, and production.
This article explains Apache Flink's fine‑grained resource management, describing typical use cases, the slot‑based mechanism, how it improves resource efficiency, the default allocation strategy, current limitations, and provides example code for configuring slot sharing groups.
Volcano, the first cloud‑native batch computing project contributed by Huawei Cloud, has been promoted to a CNCF incubating project, signaling broad industry recognition and outlining a roadmap that includes cross‑cloud scheduling, GPU virtualization, fine‑grained resource management, and workflow orchestration for AI and big‑data workloads.
To meet rapid business growth, the team at 收钱吧 evolved its testing environments through several generations—from isolated physical setups to a Kubernetes‑based multi‑lane system powered by Istio and custom operators—significantly reducing resource usage, speeding deployments, and improving scalability and flexibility.
This comprehensive technical tutorial demonstrates how to implement and configure core Dapr features, including publish/subscribe messaging, resource bindings, virtual actors, distributed tracing, secrets management, and dynamic configuration, using Java applications deployed on Kubernetes with practical code examples and command-line instructions.
IntelliJ IDEA 2022.1 introduces a Dependency Analyzer for conflict resolution, an enhanced New Project wizard, a dedicated Notifications tool window, extensive language and framework support—including Java 18, Kotlin 1.6.20, Go microservices, Kubernetes, and improved security scanning—plus numerous usability upgrades such as uniform tab splitting, UML export formats, and a Gradle progress bar.
This article explains how Kubernetes ensures container-to-container communication using network namespaces, veth pairs, bridges like docker0, and advanced CNI plugins such as Flannel and Calico, detailing their underlying Linux networking components, routing mechanisms, and deployment considerations for both intra‑host and inter‑host scenarios.
Stolon is an open‑source, cloud‑native manager that provides high‑availability for PostgreSQL by leveraging streaming replication, supporting any topology, integrating with Kubernetes, and using etcd, Consul, or the Kubernetes API for leader election and cluster storage.
Learn how to protect sensitive data in Kubernetes by encrypting secrets, using Bitnami Sealed Secrets or external secret managers, and safely storing encrypted manifests in Git, with step‑by‑step commands for installing kubeseal, creating sealed secrets, and deploying them as Kubernetes Secrets.
This guide walks you through using the official Kubernetes interactive tutorial to quickly create a minimal, free K8s cluster in your browser, verify it, deploy a sample app, scale it, perform rolling updates, and explore core concepts without any prior setup.
This article describes how Zhongtong tackled severe pod‑scheduling imbalance in its Kubernetes clusters by extending the scheduler with the Scheduling Framework, adding custom filter and score plugins that balanced CPU load, boosted overall utilization from 30% to 50%, and reduced manual scheduling interventions by about 80%.
IntelliJ IDEA 2022.1 introduces a Dependency Analyzer for conflict resolution, an enhanced New Project wizard, a revamped Notifications tool window, Java 18 and Kotlin 1.6.20 support, Go microservice tooling, Spring Data Mongo improvements, .proto and gRPC enhancements, Kubernetes integration, and a Gradle progress bar, offering developers a richer, more efficient coding experience.
This article breaks down the core principles and architecture of Kubernetes, illustrating how master and worker nodes interact, detailing key components such as the API server, scheduler, controllers, kubelet, kube-proxy, and container runtimes, and explains deployment scenarios on major cloud providers.
The article examines how rapid cloud‑native adoption reshapes application design and operations while introducing six distinct security risks, and proposes a comprehensive DevSecOps framework that integrates early‑stage security controls across infrastructure, compute, development, and management to protect modern containerized environments.
This article describes Yiche's adoption of Kubernetes, detailing its master‑node architecture, multi‑cluster strategies, custom container management platform, CI/CD pipeline, monitoring with Prometheus, logging, auditing, health checks, and future plans to streamline traffic and control planes.
This article explains how to use Tekton Trigger to automatically start PipelineRuns from GitLab webhook events, covering the core components, CRD definitions, installation steps, and detailed configurations of TriggerTemplate, TriggerBinding, EventListener, ServiceAccount, Ingress, and secret management, enabling fully automated CI/CD on Kubernetes.
This guide walks through using the Postgres Operator UI to create, start, update, and delete PostgreSQL clusters on Kubernetes, covering UI navigation, configuration options, troubleshooting steps, and limitations, with links to detailed documentation.
This article explains how Kube-OVN extends KubeVirt networking by providing fixed and stable VM IP addresses, multi‑tenant VPC/Subnet isolation, live‑migration IP preservation, and high‑performance SR‑IOV/OVS‑DPDK acceleration, along with practical configuration examples and reference links.
This article explains what microservices are, how they differ from traditional monolithic apps, illustrates their benefits and drawbacks with an Amazon product‑page example, describes containers and Docker, and shows why Kubernetes is a natural platform for managing microservice‑based systems.
The Zalando Postgres Operator enables easy deployment of high‑availability PostgreSQL clusters on Kubernetes using Patroni, managed entirely through CRDs, supporting rolling updates, sidecar monitoring, and seamless CI/CD integration without direct API calls.
This article details Bilibili's end‑to‑end Presto‑based SQL‑on‑Hadoop architecture, covering overall system components, query routing, Presto feature set, extensive stability and availability enhancements, performance boosts through caching and multi‑datacenter deployment, and outlines future development plans.
Ephemeral containers are temporary debugging pods in Kubernetes that lack resource guarantees and cannot restart automatically; this guide explains their differences, enabling the feature via kube-apiserver and kubelet flags, creating a sample Tomcat pod, adding an Ephemeral container with kubectl debug, and updating it using raw API calls.
This article walks through using Jenkins as Kubesphere's pipeline engine, installing the Tekton client plugin, configuring RBAC, writing a multi‑branch Jenkinsfile, and troubleshooting common errors to enable seamless Jenkins‑Tekton integration for CI/CD workflows.
This guide explains how to run and switch between several Kubernetes clusters on a single server by configuring separate kubeconfig entries, adding clusters, users, and contexts, and using kubectl commands to manage each cluster efficiently.
This guide walks you through prerequisites, configuration, and deployment options (manual, Kustomize, Helm) for the Zalando Postgres Operator on a local Kubernetes environment, then shows how to verify the operator, deploy its UI, create and connect to a Postgres cluster, and safely delete it.
This article explains how Zuoyebang redesigned its massive data retrieval platform by separating compute and storage with the Fluid project on Kubernetes, achieving minute‑level hundred‑TB distribution, elastic caching, and improved stability for real‑time educational services.
This article details Lyft’s evolution from a monolithic PHP architecture to a micro‑service ecosystem, describing the development and testing environments such as Devbox, Onebox, and pre‑release setups, the challenges of scaling, and the strategies adopted—including Kubernetes migration and automated acceptance testing—to maintain productivity.
This article introduces KubeZoo, a lightweight Kubernetes multi‑tenant gateway that improves resource utilization, reduces operational overhead, and provides strong isolation for massive small tenants by converting API requests and managing tenants through a single control plane.
This article introduces Apache Kyuubi—a multi‑tenant Thrift JDBC/ODBC service built on Spark—detailing its architecture, advantages over Spark Thrift Server, real‑world use cases, open‑source community progress, and practical deployment strategies on mobile cloud, Kubernetes, and with Trino.
Huolala’s architecture team shares a detailed walkthrough of their cloud‑native cost‑optimization journey, covering public‑cloud server pricing models, Kubernetes request/limit tuning, HPA and CronHPA scheduling, spot instance integration, intelligent pod placement, and practical lessons learned from scaling a global on‑demand logistics platform.
Koordinator, an open‑source cloud‑native scheduler born from Alibaba's massive production practice, enables efficient, low‑cost mixed‑workload orchestration on Kubernetes by addressing integration challenges, offering a resource‑oversell model, and providing zero‑intrusion deployment for both cloud and on‑prem environments.
This article explains MySQL high‑availability concepts, defines HA, RPO and RTO, outlines common HA architectures such as master‑slave+VIP, MHA and MGR+Proxy, and details AutoHome's evolution from simple master‑slave setups to a container‑based MGR solution with automated failover and monitoring platforms.
This article provides a step‑by‑step guide to installing RedisInsight, configuring its environment variables, launching the service on Linux, deploying it with Kubernetes, and using its graphical interface to monitor and manage Redis clusters, keys, and memory.
This article explains the memory challenges of containers in cloud‑native Kubernetes environments, describes how Kubernetes maps Request/Limit to cgroups, outlines the limitations of overcommit and mixed workloads, and details Alibaba Cloud Linux 2's Memory QoS features—including memory.min, memory.high, async reclaim, and global water‑mark adjustments—that improve fairness and latency, supported by Redis benchmark results.
This article recounts how a two‑person SaaS team evolved its architecture from a monolithic Java application to a suite of over ten Spring Cloud microservices, detailing RESTful API design, CI/CD pipelines with Jenkins, Docker containerization, Kubernetes integration, link tracing, and operational monitoring.
This article explains why Kubernetes single‑cluster scalability is limited to about 5,000 nodes, introduces the concept of multi‑cluster federation, compares the legacy kubefed project with the actively maintained Karmada solution, and shows how policies and replica‑scheduling enable flexible cross‑AZ deployments and failover.
This article explains how Alibaba Cloud’s service‑mesh‑based traffic lane technique enables rapid, safe verification of new software versions by labeling and routing traffic across isolated lanes, detailing concepts, implementation steps, CRD definitions, routing rules, and practical use cases for development, gray‑release, and critical‑business protection.
