Alek's Blog
Architecture diagram: SigNoz observability stack deployed on OVH Managed Kubernetes Service

SigNoz on OVH MKS: The Complete Guide

A reading guide to the 3-part SigNoz on OVH MKS series: sovereign observability with Terraform, Ansible, Istio Ambient Mode, and ClickHouse S3 cold tiering.

SigNoz on OVH MKS: The Complete Guide
Architecture diagram: managed log archiving services compared across AWS, GCP, Azure, and OVHcloud

AWS vs. GCP vs. Azure vs. OVHcloud: The Complete Guide to Managed Log Archiving

The index for a 6-part comparison of managed log archiving on AWS, GCP, Azure, and OVHcloud — 7-year cost, operations, security, and production runbooks.

AWS vs. GCP vs. Azure vs. OVHcloud: The Complete Guide to Managed Log Archiving
Diagram: storage tiering strategy for long-term log archiving across Elasticsearch, OpenSearch, Loki, Quickwit, and ClickHouse

Elasticsearch vs. OpenSearch vs. Loki vs. Quickwit vs. ClickHouse: The Complete Guide

A field guide to Elasticsearch, OpenSearch, Loki, Quickwit, ClickHouse for 7+ year log archiving: storage, operations, security, UX, and a full OVH MKS build.

Elasticsearch vs. OpenSearch vs. Loki vs. Quickwit vs. ClickHouse: The Complete Guide
Diagram: sidecar traffic flow in a Linkerd service mesh

Istio vs. Linkerd: Service Mesh on Kubernetes

Comparing Istio 1.29 (sidecar mode) and Linkerd 2.19: data plane, mTLS, egress, resource overhead, observability, and when to use each.

Istio vs. Linkerd: Service Mesh on Kubernetes
Diagram: NFS to object storage sync flow using rclone and systemd

NFS to Object Store Sync with rclone and systemd

Learn how to sync an NFS share to Azure Blob Storage or S3 with rclone. Production hardening, monitoring, and benchmark strategy for large file trees.

NFS to Object Store Sync with rclone and systemd
Architecture diagram: vigil-log-relay collecting Kubernetes pod logs without a DaemonSet

vigil-log-relay: Kubernetes Log Collection Without a DaemonSet

vigil-log-relay streams logs from Kubernetes pods, HTTP endpoints, or Unix sockets and forwards them as ndjson to any TCP-capable log collector. No DaemonSet, no node-level access, no filesystem mounts — just a single binary with a namespace-scoped ServiceAccount.

vigil-log-relay: Kubernetes Log Collection Without a DaemonSet