Understanding Linux Memory Management
Today I spent some time digging into how the Linux kernel manages memory pages. The OOM killer behavior with vm.overcommit_memory is particularly interesting when running containers...
Today I spent some time digging into how the Linux kernel manages memory pages. The OOM killer behavior with vm.overcommit_memory is particularly interesting when running containers...
If your pods can't resolve external domains, check CoreDNS logs first. Nine times out of ten it's a misconfigured upstream resolver or a missing NetworkPolicy.
Ran into a slow query today that EXPLAIN ANALYZE showed was doing a sequential scan on a 2M-row table. Adding a partial index with WHERE status = 'active' brought it down from 1.2s to 3ms.
WireGuard is surprisingly simple compared to OpenVPN. The key exchange is elegant — just wg genkey and wg pubkey. Here are my notes on getting it running with proper iptables rules...