28 posts with tag kubernetes
AWS vs. GCP vs. Azure vs. OVHcloud: Managed Log Archiving for 7+ Years
Compare managed log archiving on AWS, GCP, Azure, and OVHcloud: 7-year cost at 100 GB/day, storage tiers, Athena, and BigQuery. Part 1 of 6.
Elasticsearch vs. OpenSearch vs. Loki vs. Quickwit vs. ClickHouse: Kubernetes Operations, Backup & DR
Setup, ingest, backup & DR, observability, and alerting for Elasticsearch, OpenSearch, Loki, Quickwit, ClickHouse 7-year log archives. Part 2 of 5.
Elasticsearch vs. OpenSearch vs. Loki vs. Quickwit vs. ClickHouse: Security & Compliance
Encryption, RBAC, and WORM compliance for log archives: Elasticsearch, OpenSearch, Loki, Quickwit, ClickHouse. S3 Object Lock, audit logging. Part 3 of 5.
ClickHouse Use Case: Vector, Istio, nginx, Java on OVH MKS
Vector → ClickHouse on OVH MKS: Envoy/Istio, nginx, Java, Go and Kubernetes logs with hot-to-cold S3 tiering. Monthly awffull reports via SQL export. Part 5 of 5.
Elasticsearch vs. OpenSearch vs. Loki vs. Quickwit vs. ClickHouse: UX, Dashboards & Alerts
UI layers, log search UX, cold-tier query behaviour, dashboard building, sharing, multi-team isolation, and alert management. Part 4 of 5.
Elasticsearch vs. OpenSearch vs. Loki vs. Quickwit vs. ClickHouse: Long-Term Log Archiving for 7+ Years
Five-way log archiving comparison: Elasticsearch, OpenSearch, Loki, Quickwit, ClickHouse — tiering, compression, query languages, SaaS options. Part 1 of 5.
Istio vs. Linkerd: Service Mesh on Kubernetes
Comparing Istio 1.29 (sidecar mode) and Linkerd 2.19: data plane, mTLS, egress, resource overhead, observability, and when to use each.
Istio vs. Envoy Gateway: Gateway API on Kubernetes
Comparing Istio and Envoy Gateway as Gateway API implementations: mTLS, egress, Cilium, managed cloud specifics (AKS, GKE, OVH MKS), and real client IP.
Envoy Gateway v1.7: Global Rate Limiting with a Custom ratelimit Service
How to wire envoyproxy/ratelimit as a self-hosted service into Envoy Gateway v1.7 using EnvoyPatchPolicy — three xDS patches, namespace-admin self-service, and the pitfalls to avoid.
haproxy-spoe-rs: Deployment
Deploying the haproxy-spoe-rs SPOA agent in production — container image, podman-compose, Kubernetes, HAProxy configuration, health checking, logging, and systemd.