https://freepeak.github.io/categories/architecture/ Recent content in Architecture on FreePeak Labs https://FreePeak.github.io/images/freepeak-labs-cover.png https://FreePeak.github.io/images/freepeak-labs-cover.png Hugo -- 0.167.0 en Tue, 27 Jan 2026 10:00:00 +0700 https://freepeak.github.io/posts/hsm-concept-definition/ Tue, 27 Jan 2026 10:00:00 +0700 https://freepeak.github.io/posts/hsm-concept-definition/ An HSM is not just faster crypto hardware. It is a physical fortress where a private key is born, survives, and destroys itself if tampered with. A deep dive into FIPS 140-2, True Random Number Generators (TRNG) and side-channel attacks. https://freepeak.github.io/posts/hsm-3-tren-5-ky-so-firmware-yubihsm2/ Wed, 21 Jan 2026 10:00:00 +0700 https://freepeak.github.io/posts/hsm-3-tren-5-ky-so-firmware-yubihsm2/ A pragmatic look at putting an HSM into a firmware signing system: choosing a model, the key lifecycle, and why 3-of-5 cuts risk without slowing releases down. https://freepeak.github.io/posts/kong-opensource-k8s-gcp/ Mon, 19 Jan 2026 10:00:00 +0700 https://freepeak.github.io/posts/kong-opensource-k8s-gcp/ A deep dive into the architecture and best practices for deploying Kong Open Source as an API gateway and ingress controller on Google Kubernetes Engine (GKE). https://freepeak.github.io/posts/kong-eks-aws-rate-limit-tenant/ Mon, 19 Jan 2026 10:00:00 +0700 https://freepeak.github.io/posts/kong-eks-aws-rate-limit-tenant/ A pragmatic look at running Kong DB-less on AWS EKS for per-tenant rate limiting: why ALB Ingress, WAF and Lambda quickly turn into duct tape, plus the best practices for running Kong lean, safe and easy to scale. https://freepeak.github.io/posts/chot-vpc-cidr-tu-som/ Mon, 19 Jan 2026 10:00:00 +0700 https://freepeak.github.io/posts/chot-vpc-cidr-tu-som/ Why choosing a VPC CIDR early matters: real-world experience on how CIDR decisions shape AWS infrastructure growth, and how to govern CIDR effectively with Terragrunt.