Skip to main content

Practical DevOps, Cloud, AI & Linux engineering guides

Featured Article

GitLab's New Rate Limits: What to Fix Before Oct 19

GitLab is capping unauthenticated API calls at 60 an hour starting October 19, and the preview windows land before most teams will have noticed.

KU
Kiril UrbonasAI Engineer
|Oct 4, 2026
GitLab's New Rate Limits: What to Fix Before Oct 19

Most read

  1. 01
  2. 02
  3. 03
  4. 04
  5. 05

Topics

Latest Articles

View All →
Wrong SLI metrics mean green dashboards while users churn. The discipline of picking signals that move with what users actually feel, and the ones that look reliable but lie.
••4 months ago

SLI Design — Picking Metrics That Actually Correlate With User Experience

Wrong SLI metrics mean green dashboards while users churn. The discipline of picking signals that move with what users actually feel, and the ones that look reliable but lie.

KU
Kiril Urbonas·3 min read·23
Read article
OIDC federation between AWS, GCP, and CI providers let us delete every long-lived cloud credential we had. The setup, the gotchas, and the trust-relationship discipline.
••4 months ago

Cross-Cloud Identity Federation — Patterns That Replaced Our Long-Lived Keys

OIDC federation between AWS, GCP, and CI providers let us delete every long-lived cloud credential we had. The setup, the gotchas, and the trust-relationship discipline.

KU
Kiril Urbonas·2 min read·11
Read article
Pure vector search misses exact-keyword queries. Pure BM25 misses semantic ones. Combining them with reciprocal rank fusion is the simplest large win in RAG retrieval.
••4 months ago

Hybrid Search — Combining BM25 and Embeddings for Better RAG

Pure vector search misses exact-keyword queries. Pure BM25 misses semantic ones. Combining them with reciprocal rank fusion is the simplest large win in RAG retrieval.

KU
Kiril Urbonas·3 min read·56
Read article
You always have known vulnerabilities. The question is how you triage, patch, and respond. The discipline we run after a few real incidents and a lot of routine work.
••4 months ago

Handling Vulnerabilities in Production — What We Actually Do

You always have known vulnerabilities. The question is how you triage, patch, and respond. The discipline we run after a few real incidents and a lot of routine work.

KU
Kiril Urbonas·3 min read·25
Read article
Three terms that get mixed up constantly. The actual differences, where each one sits in the request path, when you reach for which, and where the same tool plays all three roles.
••4 months ago

Proxy vs Reverse Proxy vs Load Balancer — What's Actually Different

Three terms that get mixed up constantly. The actual differences, where each one sits in the request path, when you reach for which, and where the same tool plays all three roles.

KU
Kiril Urbonas·3 min read·25
Read article
Backups are easy. Restores are hard. The quarterly drill we run, what's failed during it, and the discipline that makes "we have backups" actually mean something.
••4 months ago

Database Backups — Testing Restores, Not Just Taking Them

Backups are easy. Restores are hard. The quarterly drill we run, what's failed during it, and the discipline that makes "we have backups" actually mean something.

KU
Kiril Urbonas·3 min read·26
Read article
Helm gives you a lot of rope. The patterns we used that backfired, the ones we replaced them with, and what to skip if you're starting today.
••4 months ago

Helm Chart Anti-Patterns We've Stopped Using

Helm gives you a lot of rope. The patterns we used that backfired, the ones we replaced them with, and what to skip if you're starting today.

KU
Kiril Urbonas·3 min read·58
Read article
There are two hard problems in computer science." We've worked on the cache-invalidation one for a while. The patterns that hold up at scale and the ones that look clean and aren't.
••5 months ago

CDN Cache Invalidation — Strategies That Don't Break in Production

There are two hard problems in computer science." We've worked on the cache-invalidation one for a while. The patterns that hold up at scale and the ones that look clean and aren't.

KU
Kiril Urbonas·3 min read·19
Read article
Embedding indexes degrade silently. The signals that catch drift, how often to re-embed, and the operational patterns we built after one quiet quality regression.
••5 months ago

Embeddings Drift Detection — When "Similar Enough" Stops Being Similar

Embedding indexes degrade silently. The signals that catch drift, how often to re-embed, and the operational patterns we built after one quiet quality regression.

KU
Kiril Urbonas·3 min read·19
Read article
We run three different job queue systems across our services. The patterns that work across all of them, the differences that matter, and the operational gotchas.
••5 months ago

Job Queues — Sidekiq, Celery, BullMQ Patterns That Hold Up

We run three different job queue systems across our services. The patterns that work across all of them, the differences that matter, and the operational gotchas.

KU
Kiril Urbonas·3 min read·134
Read article
We migrated most scheduled jobs from cron to systemd timers. The wins, the gotchas, and the cases we kept on cron anyway.
••5 months ago

systemd Timers vs Cron — What We Learned Switching

We migrated most scheduled jobs from cron to systemd timers. The wins, the gotchas, and the cases we kept on cron anyway.

KU
Kiril Urbonas·3 min read·57
Read article
We use Step Functions for batch processing, document ingestion, and a few agentic workflows. The patterns that work, the limits we hit, and where we'd reach for something else.
••5 months ago

AWS Step Functions for Workflow Orchestration

We use Step Functions for batch processing, document ingestion, and a few agentic workflows. The patterns that work, the limits we hit, and where we'd reach for something else.

KU
Kiril Urbonas·3 min read·25
Read article
Page 31 of 47 · 559 posts