Viewing profile — toredash

Cross zone latency has noticeable effect: https://news.ycombinator.com/item?id=45512351

I would really see this compared to what AWS is offering via RDS

Managed a fairly large matomo site in the past. Using queue plugin ( https://plugins.matomo.org/QueuedTracking ) with Redis Cluster really improves the situation. We actually built…

Is there any DNS based software to do block/allow? Kinda lika what's present in CiliumNetworkPolicies in Kubernetes networking?

I often find myself trying to tell people that KISS is a good thing. If something is somewhat complex it will be really complex after a few years and a few rotations of personnel.

If the image repositories were AZ bound resources, that would make the CI build process more efficient. Or, if the resources that CI build is utilizing within the image (after the …

> If you have the setup on 3 AZs how would you route traffic only to the AZ where your RDS resides? So specifically for RDS, AWS will provide two endpoint for the client applicatio…

> And I don't understand how a tool like this fits into formal risk analysis and where it presents an optimum solution for those risks. Seems it does not fit your risk analysis?

> Most people should start with a single-zone setup and just accept that there's a risk associated with zone failure. If you have a single-zone setup, you have a node group in that…

Are you thinking about already-cached container images on the host level ? Not sure how AZP fits in here? Since you mentioned it, what I've done before when it comes to improving C…

AWS publish their own metrics for cross-AZ and internal-AZ latency: https://eu-central-1.console.aws.amazon.com/nip/ (Network Manager > Infrastructure Performance) > In general the…

That was the origin for this solution. A client app had to issue millions of small SQL queries where the first query had to complete before the second query could be made. Millions…

I would LOVE to pitch something else I'm working on that is solving this problem in EKS, cross zone data transfer. It's a plugin that enables traffic re-direction for any service t…

I was surprised to. Of course it makes sense when you look at it hard enough, two seperate DCs won't have the same latency than internal DC communication. It might have the same ph…

The nice thing about this solution, its not limited to RDS. I used RDS as an example as many are familiar with it and are known to the fact that it will change AZ during maintenanc…

> Kyverno requirement makes it limited. You don't have to use Kyverno. You could use a standard mutating webhook, but you would have to generate your own certificate and mutate on …

As it stands now, it doesn't. Unless you modify the Kyverno Policy to be of a background scanning. I would create a similar policy where Kyverno at intervals would check the Deploy…

Totally agree! This service is published more as a concept to be built on top of, than a complete solution. You wouldn't even need IAM rights to read RDS information, you need subn…

Agree, Kubernetes isn't for everyone. This solution came from an specific issue with a client which had ad hoc performance problems when a Pod was placed in the "in-correct" AZ. So…

Yes I get that. But are we talking HA for this lookup service that I've made? If yes, that's a simple update of the manifest to have 3 replicas with ab affinity setting to spread t…

I'm not sure I follow. Are you talking about the AZP service, or ... ?

If the AZP deployment fails, yes your correct there is no hints anywhere. If the lookup to AZP fails for whatever reason, it would be noted in the Kyverno logs. And based on if you…

Hi HN, I wanted to share something I've worked a bit to solve regarding Kubernetes: its scheduler has no awareness of the network topology for external services that workloads comm…