1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
Compliance Is the Moat: What Render's SOC 2, ISO 27001, and HIPAA Posture Really Costs to Rebuild on Hardware You Own
Render's SOC 2, ISO 27001, and HIPAA posture is the hardest part of Render to replace. A line-by-line accounting puts the first-year rebuild at $40,000–$85,000 — plus the one gap, the HIPAA BAA, that is a veto rather than a cost.
Detectify Turned Its Scanner Into an Agent Tool: What 'Call the Scanner Like a Test Runner' Means for Your Deploy Pipeline
Detectify's May 2026 MCP Server hands security findings to coding agents as structured tasks with validation scans. How the Find & Fix loop works, what a scan phase between build and promote looks like for a git-push PaaS, and what stays human.
Django Heroku Exit 2026: Appliku vs Railway vs Render Priced for a Real Stack
Heroku's sustaining-mode announcement turned every Django team's exit plan into a roadmap item. A worked price comparison of Appliku, Railway, and Render on a real web-plus-Postgres-plus-worker stack — plus the flat-Hetzner baseline and the Django migration checklist.
Your Sandbox Is an L2 Guest: What E2B's Nested Firecracker Really Costs vs Bare Metal
E2B's sandboxes run as L2 guests on rented GCP VMs. Fingerprint data, latency benchmarks, and a line-by-line bill recompute show where renting wins — and the roughly 300 sandbox-hour crossover where owned hardware takes over.
Egress Is the Bill: Where Fly.io's $0.02/GB, Railway's $0.05/GB, and the $0.04 APAC Rate Overtake Compute
A worked crossover sheet prices the same scale-tier stack on Fly.io, Railway, Render, and Hetzner: Render's egress passes compute at ~2.8 TB/month, Railway at ~6.5 TB, Fly.io at 10 TB in NA/EU but 5 TB in APAC — while the flat Hetzner box stays at $0.
External Secrets Operator vs Vault vs Infisical: the Secrets Backend a Self-Hosted PaaS Should Actually Wire In
ESO syncs secrets but stores none, Vault's BSL bars embedding it in a resold product, and Infisical gates governance behind per-identity billing — a two-table comparison of the sync layer and the store, and the pairing a self-hosted git-push PaaS should wire in.
Firecracker's First Escape CVEs: What CVE-2026-5747 and CVE-2026-1386 Mean for MicroVM Sandboxes
Firecracker's zero-escape-CVE record broke twice in 2026: an out-of-bounds write in the virtio-pci transport and a symlink overwrite in the jailer. What both bugs mean for teams running AI-agent sandboxes on microVMs, and the patching checklist that keeps the isolation story intact.
Fly.io's Fee Layers, Itemized: The Real Bill Behind the $2.02 Machine
A bottom-up rebuild of what a small Fly.io app really costs — $8.54 to $10.56, not $2.02 — once IPs, bandwidth, volumes, and certs are counted, plus the $5 flat number for the same footprint on owned hardware.
Fly.io's Four-Incident Day: What September 23's Networking Pileup Teaches About Depending on Someone Else's Mesh
On September 23, 2026, Fly.io suffered four incidents in twelve hours — DFW IPv6 failure, Upstash dark in Frankfurt, 6PN mesh errors, and a Sprites outage that spread regions overnight. Here is the timeline, an honest accounting of what tenants could do, and what changes when you own the mesh.