the dangerous detour

it is 8 am Sunday morning. i was about to open “Zen and the Art of Motorcycle Maintenance” — a book with one simple truth: if you truly care to understand something, you go slow. that’s not laziness. that’s how you avoid breaking things you can’t fix. i didn’t get to the book. let me tell you why. [OPENING: the power outage — narrative, first-person, slow pace] mid-week, power cut in my building. everything stopped — laptop, internet, work. i sat there useless. and something settled in: this is what invisible infrastructure feels like when it’s gone. i work in cloud. i don’t touch bare metal. but right then, i felt it in the most physical way possible. ...

March 8, 2026 · 4 min

the dangerous detour

it is 8 am Sunday morning. i was about to open “Zen and the Art of Motorcycle Maintenance.” the book has one quiet truth: if you truly care to understand something, you go slow. not because you’re lazy. because that’s how you avoid breaking things you can’t fix. the fast-and-careless move belongs to someone who doesn’t plan to be around for the consequences. i didn’t get to the book. let me tell you why. ...

March 8, 2026 · 5 min

SAA-C03:: AWS Storage. EBS & EFS

EBS Volumes Storage volumes you can attach to your EC2 instances. Mission Critical 🟢 production workloads. designed for mission critical workloads 🟢 highly available. automatically replicated within a single AZ to protect against hardware failures. 🟢 scalable. dynamically increase capacity and chnage the volume type with no downtime or performance impact to your live systems. EBS Volume Types: Solid State Disk General Purpose SSD (gp2) - legacy 3 IOPS per GiB, up to maximum of 16,000 IOPS per volume regardless of how large the volume is, the maximum number of input/output operations the storage system can handle for that volume is 16,000 per second. this is the upper limit on the performance you can expect from the volume. ...

January 20, 2024 · 4 min

SAA-C03:: Simple Storage Service (S3)

S3 is Object-Based Storage Manages data as objects rather then in file systmes or data blocks. Upload any file type you can think of to S3. Examples include photos, videos, code, documents, and text files. Cannot be used to run an OS or DB. S3 Basics Unlimited storage. The total amount of data and the number of objects you can store is unlimited. Objects up to 5 TB in Size. S3 objects can range in size from a minimum of 0 bytes to a maximum of 5 TB. S3 Buckets. Store files in buckets (similar to folders). Tired Storage. Offers a range of storage classes designed for different use cases. Lifecycle Management. Defines automatically transition objects to a cheaper tier or delete objects that are no longer required after a set of period of time. Versioning. All versions of an object are stored and can be retrived, including deleted objects. Once enabled, versioning cannot be disabled - only suspended. Supports MFA, so you need to procced with 2-factor in order to delete an object. If you enabled public access to versioned objects, old versions will not be accessible. Working with S3 Buckets Universal Namespace. All AWS accounts share the S3 namespace. Each S3 bucket name is globally unique. ...

January 16, 2024 · 9 min

SAA-C03:: Introduction to Cloud Computing and AWS

Virtualization The technology that lies at the core of all cloud operations is virtualization. Virtualization lets you divide the hardware resources of a single physical server into smaller units. That physical server could therefore host multiple virtual machines (VMs) running their own complete operating systems, each with its own memory, storage, and network access. a virtual machine host Cloud Computing Major cloud providers like AWS have enormous server farms where hundreds of thousands of servers and disk drives are maintained along with the network cabling necessary to connect them. A well-built virtualized environment could provide a virtual server using storage, memory, compute cycles, and network bandwidth collected from the most efficient mix of available sources it can find. A cloud computing platform offers on-demand, self-service access to pooled compute resources where your usage is metered and billed according to the volume you consume. Cloud computing systems allow for precise billing models, sometimes involving fractions of a penny for an hour of consumption. ...

January 3, 2024 · 14 min

Traefik behind AWS ELB. X-Forwarded-For header

Traefik v1.7 is running within a Docker Swarm, functioning as a global service. Consequently, an instance of Traefik is deployed for each host within our Docker Swarm cluster. It is important to note that the Swarm’s routing mesh is not employed in this setup. Instead, the port mode is configured as “host,” allowing the port to be attached to the host’s network. traefik: image: ${REGISTRY}/traefik:1.6 build: ./traefik volumes: - /var/run/docker.sock:/var/run/docker.sock networks: - traefik environment: - AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} - AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} - AWS_REGION=${AWS_REGION} - AWS_HOSTED_ZONE_ID=${AWS_HOSTED_ZONE_ID} ports: - target: 80 published: 80 protocol: tcp mode: host - target: 443 published: 443 mode: host protocol: tcp - target: 8080 published: 8080 mode: host protocol: tcp deploy: mode: global restart_policy: condition: on-failure Docker Swarm deployed to AWS and lives behind internal/external load balancers (Classic type). ...

October 17, 2020 · 3 min