Blogs.

Deep dives on infrastructure, distributed systems, Go, and CNCF projects. Real code, honest tradeoffs, and the occasional career lesson.

infra · distributed systems · go · cncf

Latest post 2026-06-09 · 11 min read

How Prometheus Finds Matching Series in Milliseconds

How Prometheus finds the series matching your query in milliseconds: inverted indexes, posting lists, Seek-based set intersection, and why negative matchers and regex are the expensive part.

tech prometheus read →
8 min read →

Observability That Actually Helps at 3am

infra observability
11 min read →

Service-to-Service Auth From Scratch, and the Five Things That Bite You

infra security
8 min read →

The Right Tool in the Wrong Runtime: Querying Cloud Cost Data with DuckDB

infra tech
13 min read →

I Built a File System Where Nobody Can Lie to You

tech golang web3
8 min read →

Sister CVEs: Predicting the Vulnerabilities You Haven't Found Yet

security tech
12 min read →

How I Stopped Fake Emails From Wrecking My Signup Flow

tech golang
10 min read →

What Hardening a Container Image Actually Removes

infra security
4 min read →

From Scared of the Repo to Mentoring People Into It

opensource ideology
1 min read →

Fail Forward

ideology
3 min read →

Beginner's Guide to Programming

tech
2 min read →

How to Contribute to Open Source

tech
13 min read →

A Load Balancer Is 200 Lines of Go, and Five Bugs You Won't See Coming

tech golang
5 min read →

My First Merged PR Into Kubernetes Was 25 Lines of Tests. Here's Why That's the Move

opensource golang
11 min read →

I Wrote a Container Runtime From Scratch to Find Out What a Container Even Is

tech golang
5 min read →

Rebuilding a Site 11 Million People Read, With Antora and Gatsby

tech opensource
3 min read →

How I Got Into GSoC (and Stopped Being Scared of Jenkins)

opensource ideology