Self-Signed TLS Certificates for gRPC
The complete workflow for generating self-signed certificates for internal gRPC traffic with OpenSSL: root certificate, service certificates, the SAN extension, and verifying certificate contents.
Dinky
Dinky is an open-source platform for developing and managing Flink jobs, with online Flink SQL editing and debugging, whole-database synchronization, and data lineage analysis. Here are my notes on what it does and where it fits.
SonarQube
An introduction to the SonarQube code quality platform: how static analysis works, the key quality metrics, wiring up a Maven project, and using it as a Quality Gate in CI/CD pipelines.
The Canal Component
Canal is Alibaba's open-source component for incremental subscription and consumption based on MySQL Binlog. This post walks through how it works, how it compares to other common CDC tools, and what to watch out for in a highly available cluster deployment.
Polaris Mesh
PolarisMesh is Tencent's open-source one-stop cloud-native service governance platform, covering service registration and discovery, traffic management, fault tolerance, and configuration management. This post walks through its core features and compares its positioning against Nacos.
Alibaba Cloud ASK Clusters
Notes from evaluating Alibaba Cloud ASK (Serverless Kubernetes): what it is and how it works, its pros and cons versus self-hosted K8S, and the cost and vendor lock-in concerns to weigh when choosing it.
Principles of Architecture Design
System architecture design means trading off scalability, reliability, performance, security, maintainability, and more. This post walks through these common design principles and the mindset an architect should bring to them.