Blog
Engineering notes on Kubernetes, containers, networking and DevOps.
-
NAT, Demystified: From Your Home Router to Docker and Kubernetes
One idea - rewriting addresses in flight - quietly powers your home Wi-Fi, every Docker container, and the pod network in Kubernetes. This is NAT from first principles up to kube-proxy.
-
How CSI Drivers Actually Work in Kubernetes
A ground-up deep dive into the Container Storage Interface - the gRPC contract, the controller/node split, the full provision-attach-mount lifecycle, and how it all maps onto Azure Disk in a real cluster.
-
CRI-O: The Container Runtime Built for Kubernetes - A Complete History and Technical Deep Dive
From the CRI specification to dockershim removal to production default - the complete story of CRI-O, its architecture, its relationship to OCI and runc, how it differs from containerd, and why it matters.
-
Security Contexts in Kubernetes: From Process Isolation to Defense in Depth
An exhaustive examination of security contexts - every field explained, how they interact with Linux kernel security mechanisms, their place in the broader Kubernetes security stack, and patterns for production hardening.
-
Liveness, Readiness, and Startup Probes: The Complete Guide
How Kubernetes knows if a container is actually working - the history of probes, how each handler type works under the hood, the timing mechanics every operator should know, and production patterns for reliability.
-
Why Istio? kube-proxy Handles Routing - Or Does It?
A detailed examination of what kube-proxy actually does versus what a service mesh adds, the architectural differences, and a decision framework for when each makes sense.
-
Networking in Kubernetes: From the Four Axioms to Production Traffic
A complete walk through the Kubernetes networking model - the design principles from 2014, how CNI plugins implement them, the mechanics of kube-proxy, DNS, policy, and the evolution to Gateway API.
Browse the Archive for the full list.