1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Let's Encrypt Did the Math for You: What ARI Renewal Exemptions Actually Buy a Self-Hosted PaaS at Tenant Scale
Let's Encrypt caps per-subdomain certificates at 50 per domain a week, but renewals coordinated through ARI are exempt from every rate limit. We work out the onboarding and renewal math for a self-hosted PaaS and what enabling ARI in cert-manager takes.
MCP Went Stateless: What Killing the Session Means for an Endpoint That Deploys Apps From Chat
MCP's 2026-07-28 spec removes protocol-level sessions and the Mcp-Session-Id header entirely. The before/after deployment table — sticky ALB plus session store versus plain round-robin — plus the five things stateless does not fix and what a deploy-from-chat endpoint must change to survive agent load.
Michelin Deleted Its Second CNI: What 70-Plus Clusters With Zero Network Visibility Teach a Self-Hosted PaaS About Day One
Michelin ran 70-plus Kubernetes clusters on two CNIs with no network visibility, then consolidated onto Cilium in two months with zero outages. What the blindness cost, how the migration worked, and a five-item checklist for getting the CNI decision right on day one.
Northflank Killed Its microVM Init Container: What One Deleted Startup Step Reveals About PaaS Isolation Overhead
Northflank quietly removed the default init container from its microVM secure runtime. A concrete look at what that per-pod isolation scaffolding cost, and why a fleet that owns its machines pays for isolation once per node pool instead of on every pod start.
OpenTofu Is the Majority Terraform Engine on One Major Platform: What the 63% Tipping Point Means for Your Fleet's IaC Layer
OpenTofu now runs 63% of workloads on a major IaC platform and powers 72% of new workspaces. We scope the numbers honestly, compare where the fork leads and lags Terraform, cite Fidelity's 50,000-state-file migration, and set the default for a Cluster-API fleet's provisioning layer.
Every Pull Request Gets Its Own URL: The Real Recipe and Cost Math for Preview Environments on Self-Hosted Kubernetes
A concrete recipe for per-PR preview URLs on machines you own — namespace-per-PR lifecycle, one wildcard certificate, three database options with honest prices, and the scheduling math at 5, 20, and 50 open pull requests.
Railway Patches Your Postgres CVEs and Ships MySQL and Redis HA: What That Managed-Data Moat Really Costs a Self-Hoster
Railway's August 2026 data-layer bundle — automatic Postgres CVE patching, MySQL and Redis HA, and CLI Postgres management — itemized line by line: what each job costs to replicate on owned hardware, what a typical app pays on the meter versus a flat Hetzner box, and why bex treats managed databases as a non-goal.
Render's $25 Flat Team Plan vs Railway's $20 Seats vs Fly.io's $0.02 Egress: Pricing the Same 5-Person Workload in 2026
We price one 5-person team workload — web service, Postgres, five preview envs, 500 GB egress — on Railway, Render, and Fly.io using July 2026 third-party benchmarks, then run the same workload as owned Hetzner capacity to show when the benchmark winner or the exit is the right call.
Render Will Pay You Up to $10K to Leave Railway: What Migration Credits Actually Cover
Render offers up to $10,000 in migration credits plus a migrate-from-Railway guide. A worked burn-down shows the credits buy years of compute but zero hours of engineering — plus the flat-hardware math that outlasts any credit.