Alek's Blog - guide

Digital Sovereignty: The Complete Guide

aleks — Thu, 09 Jul 2026 00:00:00 +0000

This is the index and reading guide for a six-part series built around one idea: “sovereign cloud” is a marketing label until it’s tested against something specific. Part 1 sets out five concrete questions to test it against instead of taking the label at face value; Parts 2 through 6 are the deep-dives that answer each one in turn — grounded, wherever possible, in research or systems already published elsewhere on this blog rather than written fresh for the series.

The Kubernetes & OpenShift Best Practices Guide (2026 Edition)

aleks — Wed, 01 Jul 2026 00:00:00 +0000

This is the index and reading guide for a seven-part series on running Kubernetes and OpenShift in production, written from the vantage point of 2026 and eight years of hands-on cluster design, Day-2 operations, and production debugging. Each part stands on its own; together they cover a workload’s whole life on the platform — from the image it ships in to the audit trail it leaves behind.

(D)DoS and Application Security: The Complete Guide

aleks — Fri, 19 Jun 2026 00:00:00 +0000

This is the index and reading guide for a three-part series on denial-of-service and application security. The first two parts cover availability attacks — a service being made unreachable or unusable — at levels most people don’t associate with the term “DDoS”: the business level (losing the people who run the service), the social level (manipulating the humans behind it), the informational level (reputational disruption), and finally the technical level most readers expect (network floods, BGP hijacking, Layer 7 exhaustion). The third part is a deliberate step sideways, into application-layer attacks — SQL Injection, Log4Shell, the OWASP Top 10 — that threaten confidentiality and integrity instead of availability.

LLM Inference on OVH MKS: The Complete Guide

aleks — Tue, 02 Jun 2026 00:00:00 +0000

This is the index and reading guide for a six-part series on self-hosting LLM inference on a GPU-enabled Kubernetes node pool, using OVH Managed Kubernetes Service (MKS) as the concrete platform throughout. The series runs end to end: the decision of whether to self-host at all, provisioning the GPU infrastructure, serving a model behind an OpenAI-compatible API, wiring up observability and autoscaling, connecting real client tools, and finally putting a multi-user gateway in front of the whole thing.

SigNoz on OVH MKS: The Complete Guide

aleks — Sat, 16 May 2026 00:00:00 +0000

This is the index and reading guide for a three-part series that turns storage-engine theory into a fully reproducible, sovereign observability stack: SigNoz</a> Community Edition on OVH Managed Kubernetes Service (MKS), with metrics, distributed traces, and logs all stored in a single ClickHouse cluster and cold-tiered to OVH Object Storage Infrequent Access. It is an alternative to hyperscaler-locked observability SaaS, built as a working example repository rather than a slide deck — clone it, fill in credentials, run Terraform and Ansible. Unlike a stack that bolts together Prometheus, Jaeger or Tempo, and Loki or Elasticsearch as three separately-operated databases, SigNoz stores metrics, traces, and logs together in ClickHouse from the start — one retention policy, one S3 tiering config, one SQL interface, instead of three.

AWS vs. GCP vs. Azure vs. OVHcloud: The Complete Guide to Managed Log Archiving

aleks — Thu, 14 May 2026 00:00:00 +0000

This is the index and reading guide for a six-part series comparing managed log archiving on AWS, GCP, Azure, and OVHcloud for retention periods of seven years or more. It is written for teams that have to choose between a hyperscaler’s managed log service and a self-hosted alternative on OVH, and who need the comparison grounded in real prices, real API behaviour, and real operational constraints rather than marketing copy. Each part stands on its own; together they walk the full lifecycle of a long-term log archive — from what it costs, through how it is built and secured, to how it is run and audited years after the first log lands.

Elasticsearch vs. OpenSearch vs. Loki vs. Quickwit vs. ClickHouse: The Complete Guide

aleks — Thu, 14 May 2026 00:00:00 +0000

This is the index and reading guide for a five-part series comparing Elasticsearch, OpenSearch, Grafana Loki, Quickwit, and ClickHouse as backends for long-term log archiving — retention measured in years, not days. It is for anyone choosing or operating a log-storage backend: the comparison is empirically grounded across storage tiering, operations, security, and day-to-day usability, and closes with a full working ClickHouse pipeline running on OVH Managed Kubernetes Service (MKS).