1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives

Backstage's All-In Cost Hits $700K a Year for 100 Engineers: What Port's Days-to-Weeks Setup Trades Away for the Price
A self-hosted Backstage deployment runs $450K–$700K a year for 100 engineers while a Port subscription costs $30K–$80K and ships in days. Here is where each dollar goes, what the SaaS shortcut trades away, and which one fits your headcount.

Bare-IP TLS Is GA: Instant HTTPS for Preview URLs Without a DNS Round-Trip
Let's Encrypt's generally available 160-hour IP certificates let a preview environment serve valid HTTPS on a bare node IP with no DNS records. Here is the cert-manager plus Gateway API wiring, the renewal math, and when a subdomain still wins.

Better-PaaS and the 'Agent-First' PaaS Pitch: What a Single-VPS Deploy Tool Gets Right — and Where It Stops at the Second Machine
Better-PaaS puts scoped agent tokens and MCP deploy tools on a single VPS — genuinely good design. A verified inventory of what ships, the principle worth stealing, and the concrete second-machine line where single-box agent surfaces stop and multi-node control planes take over.

Cloud Native Buildpacks Win on CVE Day, Not Day One
A base-image CVE across 17 Dockerfile-based services costs three days of edits, rebuilds, and retests. With one shared buildpack builder, it is a single bump and a rebase — here is the itemized ledger.

Cilium 1.20: Default to Portable Policy, Go Cilium-Native Only Where It Earns It
Cilium 1.20 implements upstream ClusterNetworkPolicy and promotes MCS to stable. A decision table for writing tenant-isolation policy in portable Kubernetes APIs — and the four things that still need Cilium-native rules.

Codex Deploys End-to-End Without Leaving Chat: What That Means for Your Deploy API's Trust Boundary
OpenAI's Codex can now generate code, push to GitHub, create a Vercel project, attach a domain, and deploy — all inside one chat session. Here is the five-item trust-boundary checklist a deploy API must meet before an unattended agent should touch production.

Tailscale Co-Founder Says Devtools Must Be Open Source — Why Your PaaS Is Next
Crawshaw's August 2026 essay argues coding agents make personal forks nearly free to maintain — which turns platform source code into the customization surface. A five-surface table shows what agent-patchable infrastructure buys over closed-PaaS hooks, the strongest counter-argument, and where the line settles.

E2B and Daytona Both Charge $0.0504/vCPU-Hour. That's the Managed-Sandbox Anchor Price — Here's the Receipt
E2B and Daytona both price sandboxes at $0.0504/vCPU-hour — identical to four decimals despite different stacks. A bottom-up teardown traces the ~8x multiple over raw hardware to warm pools, orchestration, and margin, and sets the beat-this target for self-hosted fleets.

Dokku Is Still Here After a Decade of Panel Waves: What the Original Single-Box PaaS Says About Coolify's 58K Stars and the Second-Machine Moment
Dokku has shipped since 2013 while Coolify passed 58,000 stars and Dokploy hit 35K — all solving the same first machine. Where single-box tools plateau, and how to graduate to a declarative fleet without a replatform.