Category
Architecture
- HSM: The Physical Fortress for Digital Secrets Why a regular Linux server is a terrible place to keep a private key. Decoding the hardcore concepts of HSMs: from self-destructing epoxy shells, to randomness harvested from physical noise, to keeping a poker face under …
- HSM and the 3-of-5 Signing Ritual: Turning Code Signing From a Script Into a Process An HSM is not just a hardware crypto box. It is a way to force digital signing - so often reduced to a script in CI - back into a ritual with constraints: the key never leaves the device, the signer shows up in person, …
- Architecture and Best Practices: Running Kong Open Source as an API Gateway on GKE Why choose Kong over the default GCP Ingress? Architecture, the reasoning behind the choice, and real-world best practices for running Kong Open Source on GKE efficiently, securely and cost-effectively.
- Kong DB-less on AWS EKS: Per-Tenant Rate Limiting, and Why ALB Ingress Is Not Enough If you need to rate limit by identity (tenant, API key, JWT claim) on EKS, ALB Ingress pushes you into a spiral of WAF, Lambda and custom code. Kong DB-less gives you one decision point at layer 7: plugins, consumers, …
- Lock In VPC CIDR Early: A Small Decision That Prevents Tearing It All Down Later A VPC CIDR looks like a small technical choice, but it is the foundation of the whole network. Here is why locking it in early and treating it as a project-level decision saves you from rebuilding when you scale.