All 35 articles, sorted alphabetically
Alibaba Function Compute
Serverless functions. Similar to Lambda.
Read article →API gateway architecture
Deep-dive on the API gateway: the request pipeline of TLS termination, authentication, rate limiting, and routing; transform and aggregation stages; p…
Read article →Cloud autoscaling
Deep-dive on cloud autoscaling: metrics and scaling policies (target tracking, step, scheduled), scale out/in with cooldowns, horizontal vs vertical, …
Read article →Blue/green deployment architecture
Deep-dive on blue/green deployment in the cloud: how two complete production environments and a single router turn release and rollback into the same …
Read article →Cloud canary deployment architecture
Deep-dive on canary deployments: weighted traffic splitting via router/mesh, comparing the canary against a concurrent baseline under identical condit…
Read article →Configuration drift architecture
Deep-dive on cloud configuration drift: why declared/recorded/actual is a three-way comparison, the state file as a distinct participant, refresh cost…
Read article →Cloud DDoS protection architecture
Deep-dive on DDoS defense in depth: anycast dispersion, flow-telemetry detection, SYN cookies and edge TCP termination, L7 bot scoring and graduated c…
Read article →Cloud DNS failover and traffic steering
Deep-dive on DNS-based failover and traffic steering: authoritative DNS applying geo, latency, weighted, and active-passive routing policies, health c…
Read article →Cloud Edge Compute
How edge compute (CloudFront Functions, Cloud Run edge, workers) runs code near users.
Read article →Cloud egress cost architecture
Deep-dive on cloud egress cost: cross-AZ, cross-region, internet, VPC endpoints, CDN offload, compression, Direct Connect, attribution.
Read article →Cloud FinOps
How FinOps practices bring visibility + accountability to cloud spend.
Read article →Cloud IAM architecture
Deep-dive on cloud IAM: identity, workload identity, roles, policies, permission boundaries, SCPs, ABAC, session controls, and audit.
Read article →Cloud KMS architecture
Deep-dive on Cloud KMS: DEK, KEK, root key, envelope encryption, access policy, rotation, regional isolation, audit, cross-account grants.
Read article →Cloud Landing Zone Architecture in Depth
A 2500-word walkthrough of a cloud landing zone: management/security/network accounts, OU structure, guardrails, baseline, SSO, logging, cost, and aut…
Read article →Cloud load balancer architecture
Deep-dive on cloud load balancing: anycast VIPs, the L4 edge and L7 proxy split, backend pools across availability zones, active health checks plus pa…
Read article →Cloud Migration Patterns
The 6 R's of cloud migration and when each pattern makes sense.
Read article →Multi-Cloud Architecture in Depth
A 2500-word walkthrough of multi-cloud: workload, abstraction, landing zones, identity, data placement, networking, cost, observability, compliance.
Read article →Managed NAT gateway architecture
Deep-dive on the managed cloud NAT gateway: private-subnet egress without inbound exposure, route tables and port translation, ephemeral-port capacity…
Read article →Cloud networking architecture
Deep-dive on cloud networking: VPC, subnets, route tables, NAT, peering, PrivateLink, DNS, security groups, NACL, flow logs.
Read article →Private connectivity -- reaching services without the internet
Deep-dive on cloud private connectivity (AWS PrivateLink, GCP Private Service Connect, Azure Private Link): the public-exposure problem, the private e…
Read article →Cloud secrets architecture
Deep-dive on cloud secrets management: secret manager, rotation, injection, versioning, short-lived leases, audit, compliance.
Read article →Cloud Serverless
How serverless functions (Lambda, Cloud Functions, Azure Functions) compare.
Read article →Service mesh architecture
Deep-dive on the service mesh: a data plane of per-pod sidecar proxies programmed by a central control plane to handle mutual TLS, retries, timeouts, …
Read article →Spot capacity architecture
Deep-dive on running production workloads on spot instances: capacity pools and allocation strategies, interruption-notice plumbing and drain controll…
Read article →VPC peering architecture
Deep-dive on VPC peering: the request/accept handshake, the symmetric routes and security-group rules that make traffic flow over the provider backbon…
Read article →Cloud WAF -- filtering malicious web traffic at the edge
Deep-dive on cloud WAF: the block-attacks need, managed rules (OWASP/known threats), custom rules, rate-based rules, SQLi/XSS blocking, bot management…
Read article →The Well-Architected framework -- pillars for sound cloud systems
Deep-dive on the Well-Architected framework: the six pillars (operational excellence, security, reliability, performance efficiency, cost optimization…
Read article →DigitalOcean App Platform
Heroku-like PaaS. Apps from GitHub.
Read article →Multi-Cloud Strategy
When multi-cloud makes sense (regulatory, resilience, negotiation), and when it's more cost than benefit.
Read article →OCI IAM
How OCI IAM controls access via policies attached to compartments, and how it differs from AWS IAM.
Read article →OCI Monitoring
Metrics + alarms. Auto-populated from services.
Read article →OCI Networking
How VCN (Virtual Cloud Network) works in OCI: subnets, gateways, route tables, and security lists.
Read article →OCI Object Storage
How OCI Object Storage works, its storage tiers, and the S3-compatible API.
Read article →Oracle Cloud Infrastructure Overview
What OCI is, its distinctive architecture (compartments, tenancy), and where it fits versus AWS/GCP.
Read article →Vercel Edge Functions
V8 isolates. Similar to Cloudflare Workers.
Read article →