672 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
45-Day Let's Encrypt Certificates Are Here: The Renewal-Automation Bar Every Self-Hosted PaaS Now Has to Clear
Let's Encrypt's tlsserver profile dropped to 45-day certificates on May 13, 2026, and the default follows by 2028. A five-point audit of what a halved renewal window demands from a self-hosted PaaS's ACME pipeline: percentage-based margins, retry isolation, external expiry alerting, ARI, and 1-hour authorizations.
OpenAI's Presence Ships With Engineers, Not a Deploy Button: What the Gap Between Enterprise Agents and Git-Push Reveals
OpenAI launched Presence with engineer-led deployments instead of a self-service console. A decomposition of its six-stage process shows which half genuinely needs consultants — and which half is deploy-and-operate mechanics a git-push platform already made a one-command path.
70% of Platform Initiatives Fail Without a Golden Path: Inside Vol. 4 of the State of Platform Engineering Report
The 518-engineer State of Platform Engineering Report Vol. 4 finds ~70% of internal platforms fail without a golden path, adoption cliffs from 80% to under 20%, and nearly 30% of teams measure nothing — here are the four metrics that fix it and the build-vs-adopt call the data forces.
OpenID Certified at 30 MB: What Pocket ID and Tinyauth's Formal OIDC Conformance Actually Proves for Your PaaS Admin Login
Pocket ID and Tinyauth both passed the OpenID Foundation's conformance suite in 2026. What the certification actually tests, what it doesn't prove, and when a 30 MB IdP is enough to gate a self-hosted PaaS admin surface.
Your PaaS Bill Grew a New Line Item: Fly.io's Snapshot Charges, Cross-Region Transfer Fees, and What a Multi-Region Indie SaaS Actually Pays Now
Fly.io began billing volume snapshots on January 1, 2026 — a meter attached to a default. A line-by-line accounting of what a multi-region indie SaaS (web, worker, cross-region Postgres replica) now pays on Fly.io and Railway, the cross-region transfer rates most users never priced, and why self-hosted costs can't grow lines you didn't write.
Railway's Five Postmortems in Six Months: What an 8-Hour Blackout From a GCP Account Suspension Reveals About Renting Your Platform's Platform
Railway's May 2026 blackout was caused by Google suspending the account the whole platform runs on — a failure mode no SLA or multi-AZ diagram covers. A close read of five postmortems, the hidden dependency chain of renting a PaaS, and an honest tally of what self-hosting removes from the failure tree versus what it adds to your pager.
Spend Caps Are a Feature Hosted PaaS Has to Build — and Owned Hardware Gets for Free
Railway's July 2026 CLI usage limits let you cap spend by taking your own app offline. A fixed-price Hetzner box makes the same guarantee for free — but owned hardware still owes its tenants quotas. The full economics of bill anxiety, with the numbers.
Static Outbound IPs Are a Paid PaaS Add-On — and a Rounding Error on a Server You Own
Railway's July 2026 release put static outbound IPs behind its Pro plan — the same allowlist-friendly egress identity that costs €0.50/month on a Hetzner box. A platform-by-platform accounting of the egress tax on Railway, Render, Heroku, and Fly.io versus servers you own.
Sprites Speak MCP: When the Agent Sandbox Becomes a Tool the Agent Calls Itself
Fly.io's Sprites now expose their full lifecycle over MCP, so agents provision disposable machines from inside their own loop. Here is the six-tool sandbox contract — create, exec, checkpoint, restore, destroy, list — and the quotas, TTLs, and per-tenant budgets a self-hosted platform needs before the agent becomes the capacity planner.