Skip to main content
Dora Noda

Dora Noda

Software Engineer

Dora Noda is a Software Engineer writing about Web3 infrastructure, blockchain networks, and self-hosting.

3404 posts · View all authors

WebMCP Lets a Web Page Register Its Own AI Tools. Does a Deploy Dashboard Need One?
·Dora Noda·9 min

WebMCP Lets a Web Page Register Its Own AI Tools. Does a Deploy Dashboard Need One?

Chrome's new WebMCP API lets a web page register its own AI-callable tools, but a deploy dashboard already has a REST/GraphQL API and an MCP server. Here's the actual capability delta, and why it's not worth building yet.

Model Context Protocol
AI agents
self-hosting
PaaS
+1
Zerops Says Its Pricing Is 'Just Hardware.' The Real Bill Runs 2.6x Raw Hetzner
·Dora Noda·8 min

Zerops Says Its Pricing Is 'Just Hardware.' The Real Bill Runs 2.6x Raw Hetzner

Zerops prices itself as pure hardware, no plans, no seat fees. Here's what the actual 2026 rate card charges for a real three-service app, and why the bill still runs 2.6x the cost of the identical specs on raw Hetzner hardware.

self-hosting
PaaS
cost-optimization
infrastructure
A2A Turns One and Hits v1.0: What a Standard Agent-to-Agent Handshake Actually Buys a Deploy-From-Chat Pipeline
·Dora Noda·8 min

A2A Turns One and Hits v1.0: What a Standard Agent-to-Agent Handshake Actually Buys a Deploy-From-Chat Pipeline

A2A hit v1.0 and 150+ organizations in its first year under the Linux Foundation. Here's a worked example of what its signed Agent Cards and task-approval states actually change for a deploy pipeline where one agent requests a rollback and another approves it — and whether a self-hosted PaaS's MCP server needs to speak it yet.

Model Context Protocol
AI agents
self-hosting
PaaS
+1
Your Agent's Shell and Your Tenant's Container Cannot Share a Blast Radius
·Dora Noda·8 min

Your Agent's Shell and Your Tenant's Container Cannot Share a Blast Radius

A concrete node-pool, network-policy, and runtime-class architecture for keeping an AI agent's shell isolated from the tenant container it's deploying and operating.

security
infrastructure
self-hosting
AI
+1
AgentBox Puts a Bare Hetzner VM on the Same Feature Table as E2B and Daytona
·Dora Noda·9 min

AgentBox Puts a Bare Hetzner VM on the Same Feature Table as E2B and Daytona

AgentBox, a 247-star MIT CLI, already lists a bare Hetzner box next to E2B and Daytona on its provider table. A teardown of its checkpoint and credential-isolation mechanisms — and what a Cluster-API fleet should borrow versus build on kubernetes-sigs/agent-sandbox instead.

self-hosting
PaaS
AI
infrastructure
+1
Anubis Crosses 20,000 Stars: What Self-Hosting Your Own AI-Scraper Defense Actually Costs
·Dora Noda·9 min

Anubis Crosses 20,000 Stars: What Self-Hosting Your Own AI-Scraper Defense Actually Costs

Anubis's proof-of-work challenge crossed 20,000 GitHub stars fighting AI scrapers — here's what it actually costs in compute versus what its JavaScript requirement costs real visitors, and whether a self-hosted PaaS should bundle it.

security
cybersecurity
PaaS
self-hosting
+1
Beam's Beta9 Is the Only Self-Hostable E2B Alternative Left Standing
·Dora Noda·8 min

Beam's Beta9 Is the Only Self-Hostable E2B Alternative Left Standing

E2B and Daytona's sandbox pricing landed on the exact same number in 2026. Then Daytona announced it's going closed-source. A concrete look at what's left of the self-hostable AI-agent sandbox category, and why Beam's open-source Beta9 engine is the one still standing.

self-hosting
infrastructure
engineering
AI
Cilium's eBPF Egress Gateway: The Stable Outbound IP Without the $0.135/GB NAT Tax
·Dora Noda·9 min

Cilium's eBPF Egress Gateway: The Stable Outbound IP Without the $0.135/GB NAT Tax

AWS charges $0.135/GB for a stable outbound IP through a NAT gateway. Cilium's eBPF-based Egress Gateway does the same job as a Kubernetes CRD, and on an owned Hetzner fleet it costs nothing beyond the node you already run.

infrastructure
self-hosting
PaaS
cost-optimization
+1
Cilium Tetragon Hits Production Maturity: What Kernel-Level eBPF Enforcement Adds to a Self-Hosted PaaS's Sandbox
·Dora Noda·8 min

Cilium Tetragon Hits Production Maturity: What Kernel-Level eBPF Enforcement Adds to a Self-Hosted PaaS's Sandbox

Tetragon 1.4 cleared the rough edges on policy authoring in February 2026. Here's what its in-kernel enforcement actually adds on top of a gVisor/Kata sandbox boundary — with a real TracingPolicy that kills an escape attempt before it lands.

self-hosting
PaaS
security
infrastructure
Showing 1522–1530 of 3404 posts