André Weigelt

📈 We released DuckDB 1.4.0 today. This is our first LTS release that comes with one year of community support. 👉 The new release packs many new features for security, data lake support and productivity: swipe below for a quick summary. ⏱️ For a more complete list of performance optimizations, distribution improvements and new integrations, see the announcement blog post – link in the comments.

742

33 Kommentare

Kubernetes service doesn't load balance. Here is why 👇 By default, the kube-proxy component in Kubernetes uses iptables for routing requests. (Supports IPVS as well) We were curious about how it manages load balancing behind the scenes, and we discovered something interesting: a feature in iptables called 𝘀𝘁𝗮𝘁𝗶𝘀𝘁𝗶𝗰 𝗺𝗼𝗱𝗲 𝗿𝗮𝗻𝗱𝗼𝗺 𝗽𝗿𝗼𝗯𝗮𝗯𝗶𝗹𝗶𝘁𝘆. This feature is part of iptables and is used for packet filtering and network address translation. It allows you to create rules that match a specific percentage of packets at random. For example, we tested a service endpoint pointing to a three-pod deployment. It showed statistic mode random probability as 0.33 , essentially balancing the load across the three pods. It is more of a probabilistic traffic distribution, rather than actual load balancing. - It doesn't consider the actual load on the servers. - It doesn't guarantee an even distribution of traffic over time. - It doesn't maintain session persistence You might wonder, "Is it necessary to understand Kubernetes at this level?" The answer is Yes & No 😀 In one implementation, we encountered a major routing issue. By looking at the iptables rules, we ruled out any cluster configuration issues and pinpointed the problem. We cover many topics like these in our CKA course in bonus sections. 𝗖𝗵𝗲𝗰𝗸 𝗶𝘁 𝗼𝘂𝘁: https://lnkd.in/gGbQ5vYf If you have something to add, please drop a comment. #kubernetes #devops

202

13 Kommentare

With Great Access Comes Great Responsibility! Access tokens are powerful - too powerful, if you don’t rein them in. Developer Advocate Andrea Chiarelli's deep dive into OAuth 2.0 explains how to keep those tokens on a tight leash using the Principle of Least Privilege. 👀 Learn how to: ✔️ Scope like a pro (no more scope=*) ✔️ Design granular permissions (e.g., orders:read, not just orders) ✔️ Validate tokens the right way, not just checking if they’re expired ‼️ Bonus: It includes a checklist you can actually use before you ship. 🔗 https://lnkd.in/e9Jacend

63

2 Kommentare

When Kubernetes first took off, everything started with one question: Where will your cluster live? No matter the size of your environment or the tools you used, every setup began with a host cluster. It was the foundation you couldn’t skip, until now. With our latest release, that dependency disappears. It’s a fully self-contained control plane that runs anywhere: in a CI pipeline, on a laptop, or on bare metal, giving teams a fast and portable way to start Kubernetes instantly. In this deep dive, Saiyam Pathak walks through how Standalone vCluster simplifies the entire stack, removing layers of setup, vendors, and overhead, and why it marks a new chapter in Kubernetes tenancy. 🎥 Watch the full video: https://lnkd.in/ghCQ59CP #Kubernetes #vCluster #CloudNative #PlatformEngineering #MultiTenancy

32

Kubernetes is an open source tool that helps you manage all the parts of your apps in containers. So if you have an app with a bunch of microservices, for example, Kubernetes lets you wrangle them more easily. In this handbook, Prince teaches you about pods, workflows, deployments, creating clusters, use cases, & lots more. https://lnkd.in/gTk_aaae

384

8 Kommentare

𝐇𝐨𝐰 𝐌𝐮𝐥𝐭𝐢-𝐂𝐥𝐨𝐮𝐝 𝐀𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐑𝐞𝐟𝐞𝐫𝐞𝐧𝐜𝐞 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞 𝐖𝐨𝐫𝐤𝐬❗ In today's dynamic cloud landscape, flexibility and redundancy are key. That's why I'm excited to share how the Microsoft team has leveraged the Serverless Framework to achieve multi-cloud magic and enhance our dataflow. 𝐃𝐚𝐭𝐚𝐟𝐥𝐨𝐰: User’s app can seamlessly connect from any source to our gateway app, which distributes requests equally between Azure and AWS clouds. This dual-cloud architecture ensures robustness and availability. Plus, all responses are routed through the API Manager gateway, guaranteeing a smooth user experience. 𝐓𝐡𝐞 𝐒𝐞𝐫𝐯𝐞𝐫𝐥𝐞𝐬𝐬 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤: The heart of our multi cloud solution! It simplifies infrastructure concerns, automating deployments to support GitOps. With a manifest-based approach, this approach driving serverless solutions across multiple clouds with ease. 𝐀𝐳𝐮𝐫𝐞 𝐈𝐧𝐭𝐞𝐠𝐫𝐚𝐭𝐢𝐨𝐧: To make Azure a part of our multi cloud strategy, this approach equipped with Node.js, Azure Functions, and the Serverless Multi Cloud Library. The Azure Functions Serverless Plugin extends the Serverless Framework capabilities for Azure, ensuring parity with AWS Lambda. 𝐂𝐈/𝐂𝐃 𝐰𝐢𝐭𝐡 𝐆𝐢𝐭𝐎𝐩𝐬: This Architecture implementing GitOps-driven serverless builds, tests, and deployments, streamlining our development workflow. Building from Git, quality gates for tests, and seamless deployment across cloud providers make us more agile and efficient. 𝐏𝐨𝐭𝐞𝐧𝐭𝐢𝐚𝐥 𝐔𝐬𝐞 𝐂𝐚𝐬𝐞𝐬: Imagine writing client-side applications for multiple platforms using a cloud-agnostic API from the Serverless Multi Cloud Library. Deploy functional microservices across multiple cloud platforms, or use a cloud-agnostic app without worrying about the underlying infrastructure. 𝐁𝐥𝐮𝐞-𝐆𝐫𝐞𝐞𝐧 𝐃𝐞𝐩𝐥𝐨𝐲𝐦𝐞𝐧𝐭: This Architecture has the best of Blue-Green Deployment into the multicloud realm. Each cloud platform hosts two duplicate sets of microservices, creating active-passive environments for increased availability. The multi cloud setup ensures high availability and minimizes risks, all thanks to the power of Serverless. In a world where multicloud is the future, this architecture pioneering with Serverless Framework and embracing multicloud excellence. Cloudairy can help you design, manage, and discuss multi-cloud architectures in a user-friendly and collaborative way. It offers a visual interface to: ✅𝐆𝐞𝐧𝐞𝐫𝐚𝐭𝐢𝐯𝐞 𝐀𝐈 𝐌𝐚𝐠𝐢𝐜: Bring your ideas to life with our AI-powered flowchart generator. ✅𝐑𝐞𝐚𝐥-𝐭𝐢𝐦𝐞 𝐂𝐨𝐥𝐥𝐚𝐛𝐨𝐫𝐚𝐭𝐢𝐨𝐧: Work seamlessly with your team, no matter where they are. ✅𝐓𝐞𝐦𝐩𝐥𝐚𝐭𝐞𝐬: Accelerate your design with 500+ pre-built cloud architecture templates. 𝐒𝐢𝐠𝐧 𝐮𝐩 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐂𝐥𝐨𝐮𝐝𝐚𝐢𝐫𝐲 𝐭𝐨𝐝𝐚𝐲❗ https://lnkd.in/e2zNP8Zp #cloudcomputing #aws #azure #cloud #cloudairy

174

8 Kommentare

🏗️ When your monolithic architecture hits scaling limits, is your team ready? Here's how to prepare! ➡️ https://go.aws/48nGeYX As engineering teams grow from 1 to 8+, that single repository can become a bottleneck: Start with these practices early to make future decomposition easier: • Build with logical separation in mind • Keep test automation current • Plan for eventual service boundaries • Maintain deployment velocity as you scale 🔑 The key is balancing speed today with flexibility tomorrow. Small teams can move quickly with unified codebases, but preparing for growth makes future transitions smoother. 🎧 Listen to the full #AWSDevelopersPodcast episode for more insights on building in the #Fintech space!

118

1 Kommentar

Why the OI4 was the odd one out in ContainerDays 25 At ContainerDays 2025 in Hamburg, the spotlight was on Kubernetes, DevOps, AI, ML, GoLang and cloud-native. OI4 stood apart. We brought industrial automation to a stage usually reserved for pure IT. What we showed: - The Software Defined Automation (SDA) project that connects operational technology with container and cloud ecosystems - Real industrial equipment on site to demonstrate the bridge between physical machines and containerized software - A clear path forward for combining standards, orchestration, and edge computing to make automation scalable and vendor-independent 👉 Read more here: https://lnkd.in/eaZYabhj

22

1 Kommentar

You know what makes building apps harder than it should be? Not the code. The circus of toolchains, configs, and cloud setup. 🎪 Every project starts the same: • Hours lost wiring auth and DB • Secret keys sprinkled across random files • Half the sprint gone before a single feature ships And then Google casually drops Firebase Studio. It’s not “another IDE.” It’s an agentic playground where Gemini builds with you. Draw something, type something, throw in a doodle, and you get a working app. Database, authentication, and hosting. Done. Three modes depending on how much you trust AI: • Chat planning • Step-by-step approval • Or full autopilot if you’re brave (and reckless). It’s about finally killing the Frankenstein ritual we call “setup.” Released is better than perfectly configured. 👉 If AI clears 80% of the boring stuff, your edge is mastering the 20% it can’t fake: https://lnkd.in/grRsgq9r So, what’s the one part of your workflow you’d never hand over to Gemini? #FrontendDevelopment #WebDevelopment #greatfrontend #Firebase #AItools #DevTools #CloudDevelopment

49

1 Kommentar