Softwares
去偶合正交设计对架构演进的作用
从函数、目录到包边界，理解去耦合、正交设计与可演进架构
AHdark
Senior high school student passionate about coding, focused on algorithms, skilled in TypeScript, Rust, and Golang.
Kubernetes
Making Kubernetes the Network Control Plane: Public Service IPs with Cilium, BGP and ExternalDNS
Moving the public identity of a service into Kubernetes, from address allocation and route advertisement to packet forwarding and DNS.
Network
Engineering a Multi-Exit Flow Router with XDP/eBPF
An anonymized engineering case study of an XDP/eBPF multi-exit router, focusing on partial TCP observation, bounded policy execution, fast/slow-path consistency, and failures involving verification, VLAN forwarding, neighbor resolution, and concurrent state updates.
Softwares
Agentic Coding and Software Architecture from First Principles
Why good architecture can reduce token consumption, improve the code agents produce, and make human engineering judgment more valuable.
Algorithm
Why Rendezvous Hashing Fits Distributed Cron Better Than a Hash Ring
A production-oriented design for decentralized scheduled-task ownership with TypeScript, Effect, Redis membership, and per-tick safety.
Kubernetes
Kubernetes Configuration (Kubeadm HA Cluster)
Step-by-step guide to deploying a highly available Kubernetes cluster on-prem using kubeadm. Covers CoreDNS setup, external etcd with SRV discovery, HAProxy + KeepAlived API load balancing, and Calico networking (iptables → eBPF). Includes configs, verification, and best-practice automation tips.
DevOps
Building and Pushing Docker Images to Google Artifact Registry with GitHub Actions
This article walks through building and pushing Docker images to Google Artifact Registry using GitHub Actions and Workload Identity Federation — without storing service account keys. It explains each step, from GCP setup to secure, keyless CI/CD.
Kubernetes
Why Prometheus Failed to Scrape Monitors' Metrics
Prometheus failed to scrape metrics due to missing RBAC permissions. This guide explains the symptoms, diagnosis, and fix using Role and RoleBinding, with YAML examples and logs for reference.
Kubernetes
Deployment and Challenges in Calico's eBPF Mode
This article explores the challenges of deploying Calico in eBPF mode for Kubernetes, focusing on issues like the need for an external load balancer, VIP certificate configurations, and circular dependencies when the control plane fails. Solutions for these challenges are also discussed.
Kubernetes
Analyzing Load Balancer VIP Routing with Calico BGP and MetalLB
MetalLB (controller-only) with Calico BGP does not bind VIPs to any node interface, causing ARP failures. Services stay unreachable externally. Solution: locally bind VIPs, enable strictARP, and disable rp_filter to restore correct traffic flow.
Kubernetes
Infrastructure Design for Self-Hosted Kubernetes Clusters
This article examines how to build a self-hosted Kubernetes cluster on bare-metal infrastructure, focusing on networks, high availability, DNS, and storage. It targets academic infrastructure engineers managing clusters under 50 nodes, contrasting with managed cloud solutions.
Kubernetes
MetalLB with Calico BGP: Deployment, Architecture, and Validation
Deploy MetalLB as controller-only and let Calico’s BGP advertise a LoadBalancer pool. The guide covers Helm setup, IP pool config with avoidBuggyIPs, route flow analysis, source-IP-preserving Local policy, and failover tests for production-grade bare-metal LB.