1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
From Heroku to Render at 2,800 RPS: What a Rails Migration's Latency Trade-Off Reveals Before You Self-Host
A 2,800-RPS Rails app makes the Heroku-to-Render decision concrete: routing, timeouts, queueing math, and incident fate, plus a checklist for stopping at Render or self-hosting instead.
Interview Kubernetes vs Production Kubernetes: What a Viral Essay Gets Right About Running Clusters on Owned Machines
A viral June 2026 essay argues Kubernetes interviews test what you can define, not what you can operate — mapped here onto owned hardware: PDBs, memory limits, DNS failure modes, and five scenario questions to hire by.
Januscape: A 16-Year-Old KVM Escape, the Two CVEs That Fix It, and the One Kernel Flag Your Fleet Should Audit
Januscape (CVE-2026-53359) is a 16-year-old KVM shadow-MMU bug giving guest root a host escape on Intel and AMD — closed by two CVEs and mitigated by one kernel flag. What it means for hypervisor-backed tenant isolation, and the fleet audit that verifies the fix.
Your Gateway's Next Feature Doesn't Need an Envoy Fork: What kgateway's Rust Dynamic Modules Actually Buy a Self-Hosted PaaS
kgateway's Rust dynamic modules run custom payload logic inside Envoy at native speed with no fork and no recompile. How the mechanism works, how it compares to Lua, Wasm, and ext_proc, and the three catches a self-hosted platform team should budget for.
Kubernetes v1.36 Route Sync Metric: Catch Your CCM Wasting API Calls on Hetzner
Kubernetes v1.36 adds a route sync counter to the Cloud Controller Manager. Here is what it measures, how to A/B test watch-based reconciliation with it, and which Prometheus alerts to wire on Hetzner.
Kubernetes v1.37 Takes Workload-Aware Scheduling to Beta: Bin-Packing Batch Jobs on Bare Metal Without a Managed Autoscaler
Kubernetes v1.37 graduates gang scheduling and the Workload/PodGroup APIs to Beta. A worked before/after on a fixed 4-node pool shows what atomic placement buys a bare-metal fleet with no autoscaler, plus the exact feature gates and API versions needed to opt in.
My Server Started Mining Monero: What a 606-Point Cryptojacking Postmortem Teaches About Hardening Self-Hosted PaaS Nodes
A Hetzner box mined Monero for ten days before anyone noticed — here is the kill chain link by link, and the node-hardening checklist (key-only SSH, egress policy, resource alerts) a self-hosted PaaS should ship by default.
Pinterest Runs 66,000 MCP Tool Calls a Month: What Its Registry-and-Approval Blueprint Means for a Deploy-Tools MCP Server
Pinterest's production MCP fleet handles 66,000 tool calls a month behind a central registry and human approval gates. Here is the blueprint, and how it maps onto deploy, rollback, and logs tools for a self-hosted PaaS.
Railpack Is Eating Zero-Config Builds: What Coolify v4.1's Bet Means for Your Self-Hosted Fleet
Coolify v4.1 shipped Railpack as a first-class build option, making it the second platform to bet on Nixpacks' successor. Why the zero-config build layer is consolidating, how Railpack's BuildKit-native pipeline beats Nix on image size and versioning, and what self-hosted fleets should do about it.