1512 posts tagged with "PaaS"
Platform-as-a-Service tooling, economics, and self-hosted alternatives
Three Stages of Self-Hosting: The Operational Checklist for Moving Beyond One Server
Use four operational signals—downtime ownership, restore drills, deploy concurrency, and node replacement—to decide when a one-server PaaS should grow into a fleet.
Kubernetes v1.36 Deprecated Service ExternalIPs: A Bare-Metal PaaS Migration Plan Before v1.40
Kubernetes v1.36 deprecated Service externalIPs ahead of planned kube-proxy disablement in v1.40. Use this migration plan to replace insecure tenant-selected addresses with MetalLB, Gateway API, controlled routing, and tested rollback.
Four npm Compromises in 77 Days: A Build-Sandbox Blueprint for Self-Hosted PaaS
Axios, node-ipc, Red Hat, and Mastra expose why lockfiles alone fail—and how isolated builds, denied egress, script policy, and SBOMs contain poisoned dependencies.
Back4App Ranked 10 Heroku Alternatives in February 2026 — Here's What the List Actually Costs Against a €4.49 Hetzner Box
Back4App's February 2026 ranking of 10 Heroku alternatives re-audited line by line — free-tier math, egress multipliers, and where a flat-rate €4.49 Hetzner CX22 with 20 TB included still beats every metered bill.
CAPH v1.1.7 and the 429 That Ate a Healthy Machine: Why a Rate-Limited FindServer Marked 31 HCloudMachines as Gone
CAPH v1.1.7 (June 17, 2026) fixed a rate-limit false negative that marked ready HCloudMachines as not existing — 31 machines across 8 clusters in one reported incident. What the three shipped fixes change, how a 429 can trigger an unnecessary replacement, and the operator checklist a CAPH fleet needs before the next Hetzner throttle.
The Informer Tax: What Every controller-runtime Watch Costs on a 4GB Hetzner Box
Every watched GVK is a full in-memory copy of every object. How much that costs on a cheap Hetzner control-plane node, why naive controllers OOM at 10k Secrets, and the five cache levers that cut it by 25-90%.
Docker's Rate-Limit Reversal: Why Six Months' Notice Is Your Registry Strategy
Docker cancelled per-pull charges and shelved storage billing in early 2025, keeping only the 100/200 per 6-hour pull limits and promising six months' notice before any future enforcement. What that guarantee covers, when a pull-through cache still pays, and three hardening steps that let a self-hosted fleet wait safely.
etcd's fsync Tax: Why Your Kubernetes Control Plane Needs Local NVMe, Not a Cloud Volume
Every etcd write pays an fsync — and the 10 ms p99 budget decides whether your control plane feels fast or flaky. A fio benchmark comparison of Hetzner local NVMe vs Ceph-backed Cloud Volumes, with PromQL alerts that catch a slow disk before the API server does.
Kubernetes 1.37 Will Brick Your Fleet on Upgrade Day: ipvs, Static Pods, and cgroup v1
Kubernetes 1.37 lands August 26 with three fleet-breaking changes hiding behind deprecation warnings — ipvs enters a removal clock, static Pods can no longer reference Secrets, and cgroup v1 nodes refuse to start without an override.