This article provides a comprehensive overview of TiDB, an open‑source distributed NewSQL database, covering its origins, architecture components, high‑availability design, HTAP capabilities, MySQL compatibility, differences from traditional SQL and NoSQL, and practical deployment scenarios.
This article explains the challenges of memory management in mixed Kubernetes workloads, introduces ByteDance's open‑source Katalyst Memory Advisor, details native allocation and reclamation mechanisms, outlines its architecture and plugins, and describes interference detection and multi‑level mitigation strategies to improve memory utilization and service quality.
This article examines XDP (eXpress Data Path), a Linux kernel eBPF‑based technology that pushes packet processing to the earliest point in the network interface, delivering ultra‑low latency, enhanced security, and flexible custom processing for high‑performance routing, DDoS mitigation, and cloud environments.
This article explains Memcached’s architecture, key characteristics, suitable and unsuitable scenarios, memory management and LRU mechanisms, version details, and provides a comprehensive guide to monitoring its performance and health using Prometheus and Alibaba Cloud ARMS dashboards.
This guide explains how to install the Weave GitOps UI and its CLI, configure HelmRelease and HelmRepository objects, access the dashboard, and then introduces Flamingo as a Flux subsystem for Argo CD, showing its installation, loopback reconciliation, and conversion of existing Flux applications.
This article explains the concept of load balancing, describes how Kubernetes Ingress controllers implement it, and provides step‑by‑step YAML examples for deploying Nginx Ingress, configuring basic routing, sticky sessions, custom load‑balancing algorithms, and external traffic policies to achieve flexible traffic distribution in a cloud‑native environment.
This article explains the role of container runtimes, classifies them into low‑level, high‑level, and sandbox types, and details the architectures and key components of popular runtimes such as containerd, CRI‑O, and Docker, highlighting their interactions with OCI specifications and system resources.
This article explains why beginner Docker images can exceed 1 GB, then walks through multi‑stage builds, static versus dynamic linking, language‑specific tricks, and the use of minimal base images like scratch to reduce image size by over 99 % while preserving functionality.
The 2023 China International Service Trade Fair showcased a digital transformation case where Bank of China’s Open Banking platform, built on cloud‑native micro‑services, unified governance, robust security, and AI integration, demonstrated extensive industry impact, extensive partner ecosystems, and award‑winning innovation.
This guide explains how to install and configure the open‑source Pyroscope continuous profiler on a Kubernetes cluster, integrate it with Python, .NET, and Go microservices, and visualize low‑overhead flame graphs to identify performance bottlenecks and reduce cloud costs.
This article explains how to integrate feign-reactor with Spring Boot 2.7, covering OpenFeign features, reactive client setup, code examples, timeout configuration, and programmatic usage to enhance microservice communication.
This article explains how to build robust, highly available cloud‑native applications on Alibaba Cloud Container Service for Kubernetes (ACK) by covering architecture principles, multi‑zone cluster design, Kubernetes HA features such as topology spread constraints and pod anti‑affinity, storage strategies, load‑balancing, virtual nodes, health probes, monitoring, and multi‑cluster deployment patterns.
Oracle's Java 21 release introduces virtual threads, record patterns, ordered collections and a preview FFM API, while Eclipse survey data shows rising Spring and Spring Boot usage and accelerating cloud‑native adoption among Java developers.
This article reviews eight popular Docker monitoring solutions, detailing their key features such as performance metrics, dashboards, alerting, capacity planning, log analysis, and ease of setup, helping you choose the right tool for container observability.
This guide explains what NFS is, how to create a Kubernetes pod that mounts an NFS share, expose the pod via a NodePort service, and verify the NFS logs using standard Linux commands.
This article explains how Alibaba Cloud's Serverless Application Engine (SAE) builds end‑to‑end stability by dividing fault handling into prevention, detection, localization and recovery, using a Kubernetes‑based diagnostic engine, runtime availability probes, a unified alert center, and a plug‑in architecture for root‑cause analysis.
This guide walks through preparing the hardware and software environment, cloning the Kubernetes source, checking out a specific tag, compiling the code, building release images with appropriate build parameters, extracting and loading the images, and updating static manifests for custom Kubernetes deployments.
This article explains the four Kubernetes port types—Port, NodePort, TargetPort, and ContainerPort—their distinct roles in service exposure, internal pod communication, and how they are configured using YAML manifests.
REDck, a cloud‑native real‑time data warehouse built on open‑source ClickHouse, overcomes the original MPP architecture’s scaling and maintenance limits by separating compute and storage, introducing unified metadata, multi‑level caching, bucket‑based sharding, and distributed transaction support, delivering petabyte‑scale, 99.9% availability and ten‑fold cost and performance gains for Xiaohongshu’s diverse workloads.
This article outlines the architecture and functions of container runtimes, detailing low‑level, high‑level, and sandbox types, and compares major implementations such as runC, containerd, CRI‑O, and Docker, highlighting their components, image handling, networking, storage, and integration with Kubernetes.
This article describes how Ant Group's funds technology team adopted a Serverless‑based architecture to overcome the inefficiencies of a monolithic SOFA application, redesigning their system into lightweight modules and a shared base to accelerate scenario‑driven innovation, reduce deployment time, and enhance developer productivity.
This article explains the fundamentals of Kubernetes user namespaces, their support evolution from v1.25 to v1.28, security benefits, runtime requirements, a high‑severity CVE demonstration, and upcoming integration with Pod Security Standards, providing practical guidance for cloud‑native deployments.
The article examines how enterprises can assess and migrate thousands of legacy applications to the cloud, comparing refactoring versus containerization, and highlights the use of automated software‑intelligence tools to create a migration roadmap and meet tight deadlines.
Docker version 24.0.6 introduces numerous bug fixes and feature enhancements—including fixes to containerd storage backend commands, overlayfs snapshotter issues, network isolation rules, and Windows service registration—alongside packaging updates such as upgrading Go to 1.20.7, containerd to v1.7.3, and Compose to v2.21.0.
This announcement outlines a conference talk that explores how leading securities firms design and operate high‑fidelity, cloud‑native simulation environments to support testing, performance validation, and continuous delivery in modern financial IT architectures.
This article provides an in‑depth analysis of the Kubernetes scheduler's queue subsystem, detailing the internal data structures, heap implementation, priority queue logic, and the lifecycle methods that add, activate, update, and remove Pods from active, backoff, and unschedulable queues.
This comprehensive Kubernetes course covers core concepts, architecture, Kubeadm deployment, cluster management, containerized application deployment, CI/CD integration, advanced features like auto-scaling and Ingress, and provides extensive module listings, resources, and recommended readings for cloud‑native practitioners.
This guide shows how to use ACK Fluid to mount third‑party storage via host‑path directories as Kubernetes PVs, enabling standard CSI integration, data isolation, and high‑performance, low‑cost access with step‑by‑step commands, YAML manifests, and performance validation.
Curve is a high‑performance, easy‑to‑operate, cloud‑native open‑source distributed storage system (CNCF Sandbox) that provides block and file storage for OpenStack, Kubernetes, and PolarFS, featuring Raft‑based consistency, hybrid storage, high availability, and an ongoing roadmap for AI and other workloads.
Learn how to efficiently monitor multiple Kubernetes pods by installing and using two lightweight, real‑time log aggregation tools—Kubetail and Stern—including installation steps for Homebrew, Linux, and Zsh, command‑line options, color output, and practical usage examples.
This article explains Kubernetes resource management, covering compute and non‑compute resources, key mechanisms such as quotas and autoscalers, monitoring tools, and optimization strategies to improve cluster efficiency, scalability, and cost effectiveness.
This article details how Vivo's container platform faced exploding metric volumes, component overload, data gaps, and storage spikes, and explains the step‑by‑step architectural redesign, metric governance, performance tuning, cAdvisor redeployment, and VictoriaMetrics upgrade that restored high‑availability, low‑latency monitoring across a large Kubernetes fleet.
This article details Huolala's comprehensive container‑security program, covering Kubernetes component basics, a real‑world unauthorized‑access incident, a lifecycle‑based security framework, the Microsoft threat matrix, and the design of a home‑grown HIDS architecture to protect cloud‑native workloads.
This article examines how infrastructure management has shifted toward treating infrastructure as code, the growing responsibilities of developers in deploying and maintaining cloud‑native platforms such as Kubernetes, the challenges they face, and the supporting role of platform/DevOps teams and tools like Terraform and ArgoCD.
This article examines WebAssembly’s evolution from a browser‑based binary format to a potential universal runtime, discusses its performance advantages, current limitations, and the impact of initiatives like WASI and Cloud‑Native integration, while questioning whether it will truly become the future of computing.
This article provides a detailed introduction to Spring Cloud, covering its purpose, key features, the architecture of its core components such as Eureka, Feign, Ribbon, Hystrix, Zuul, and Gateway, and explains why Gateway is increasingly replacing Zuul in modern microservice deployments.
This guide explains what sidecars are in Kubernetes, why they matter, the challenges they introduce, and how the new sidecar KEP in Kubernetes 1.28—introducing an Always RestartPolicy for init containers—formalizes sidecars as first‑class API objects, reshaping service‑mesh implementations and operational practices.
This article explains how Knative implements request‑based autoscaling with KPA, details the scale‑to‑zero mechanism, shows how to handle burst traffic using stable and panic windows, and demonstrates advanced extensions such as resource pools, precise MPA scaling, and predictive AHPA configurations with concrete YAML examples.
This guide explains Traefik’s core concepts—EntryPoints, Routers, Middlewares, and Services—showing how to configure static and dynamic settings, apply routing rules, use built‑in middlewares, implement weighted load balancing, health checks, and failover, and deploy Traefik with Docker or Kubernetes.
This guide walks you through installing hard‑to‑set‑up Stable Diffusion plugins and deploying a fully functional Stable Diffusion WebUI on Alibaba Cloud Function Compute, covering resource preparation, step‑by‑step deployment, model management, and cost considerations.
This guide walks you through registering for Alibaba Cloud, enabling Serverless Application Engine (SAE), configuring continuous deployment from a source repository, and launching a simple click‑to‑play game, all within about five minutes of setup.
This guide introduces two lightweight Kubernetes log‑tailing tools, Kubetail and Stern, explains their installation on various platforms, demonstrates common usage patterns and command‑line options, and provides practical examples for aggregating and filtering logs across multiple pods and containers.
Baidu's search vertical offline computing system evolved through four stages—from a fragmented pre‑2018 processing setup to a unified business framework, then serverless functions, and finally a data‑intelligent architecture with multi‑layer abstraction, graph and multi‑language engines, achieving 5‑10× efficiency gains and dramatically reducing failures.
This article examines the trade‑offs of using fewer large worker nodes versus many smaller ones in a Kubernetes cluster, covering capacity, resource reservations, scaling behavior, image pulling, API load, node limits, storage constraints, and practical recommendations.
This article traces the evolution of Tencent's payment platform from its early PC‑centric design through three mobile payment phases, detailing architectural generations, availability measures, multi‑active strategies, and cloud‑native innovations that enable massive, reliable transaction processing.
This article explores how Tencent integrates big data with cloud‑native technologies, detailing the evolution, opportunities, challenges, the peak‑range (FengLuan) architecture, engine and scheduling layers, mixed‑workload strategies, runtime optimizations, and future directions for large‑scale data platforms.
This article explains the background of cloud‑native microservices, introduces the open‑source SkyWalking observability platform and its core components (Agent, OAP server, storage, UI), and demonstrates how to extend SkyWalking with custom plugins and tune its performance to minimize monitoring overhead.
TiDB is an open‑source NewSQL database that combines horizontal scalability, strong ACID guarantees, MySQL compatibility, and cloud‑native design to support both OLTP and OLAP workloads, offering high availability and real‑time HTAP capabilities for large‑scale applications.
Kubernetes 1.28 adds two alpha features—Pod Replacement Policy and per‑index backoff limits—that let batch jobs replace terminating pods more intelligently and cap retries for each indexed pod, reducing resource waste and improving reliability for machine‑learning workloads.
This article explains how the Ray distributed computing engine simplifies the design, deployment, and operation of complex cloud‑native distributed systems—illustrated through an AutoML service example—by detailing system complexity, Ray’s core concepts, resource customization, runtime environments, monitoring, and ecosystem integrations.
This article explains Kubernetes labels and label selectors, their purpose, usage scenarios, and provides step‑by‑step kubectl commands and YAML examples for creating, viewing, updating, and deleting labels to manage resources effectively in a Kubernetes cluster.
This guide shows beginners how to simplify Kubernetes YAML creation by leveraging kubectl's help, dry‑run, and explain commands, providing step‑by‑step examples, code snippets, and practical tips to boost efficiency and confidence when deploying applications.
This article explains the concept of Function-as-a-Service (FaaS), its rise and suitable scenarios, then details Ant Group's serverless architecture, performance‑tuning techniques, security isolation mechanisms, developer experience, and future outlook integrating AI to create a new programming paradigm.
This article explains the fundamentals of Kubernetes Pods, covering their definition, creation methods, container count, networking model, storage options, and provides essential kubectl commands for managing Pods and deployments.
The vivo Internet Container Team built a scalable, high‑availability container monitoring platform by deploying dual‑replica Prometheus clusters with a custom HA adapter, remoteWrite to VictoriaMetrics, and a Kafka forwarder, while cutting metric cardinality, tuning cAdvisor, and upgrading VictoriaMetrics to eliminate data loss and storage spikes, achieving stable, efficient monitoring.
Aeraki Mesh 1.4.0 (codename Heshun) released on August 13, 2023 adds Istio 1.18.x compatibility, removes Envoy Dubbo/Thrift filters, introduces extensive changelog updates, lists contributors from major tech firms, and provides reference links to the official site and GitHub repository.
Apache Doris 2.0.0, released on August 11, 2023, introduces a new Cascades‑based optimizer, inverted index, point‑query acceleration, pipeline execution engine, multi‑tenant resource isolation, cloud‑native compute nodes, and extensive performance gains of up to ten‑fold in benchmark queries and dozens of times in real‑world workloads.
This article explains the basics of YAML syntax, demonstrates how to generate Kubernetes resource files such as an Nginx deployment using kubectl without applying them, and compares the differences between kubectl create and kubectl apply for interview preparation.
This guide walks through setting up a simulated Kubernetes cluster with Cilium, configuring BGP using FRR on a router node and Bird on worker nodes, and enabling Cilium's built‑in BGP speaker to achieve cross‑node pod communication and LoadBalancer IP advertisement.
This guide explains Kubernetes namespaces, their purpose for multi‑tenant resource isolation, describes the four default namespaces, and provides step‑by‑step commands to list, create, format, and delete namespaces using kubectl.
This guide explains how to design a Kubernetes‑based architecture for a large‑scale online store, covering component containerization, auto‑scaling mechanisms, high‑availability deployment, continuous delivery, and monitoring integration to handle traffic spikes reliably.
This article explains what a Kubernetes Service is, why it is needed, how to create one with a Deployment, and details the internal workings of Service controllers, Endpoints, and kube-proxy using iptables and ipvs modes.
The 2022‑2023 CNBPA survey of 399 central and state‑owned enterprises reveals that despite tightened IT budgets, cloud‑native technologies—especially integrated full‑stack platforms, dual‑stack IT architectures, and platform engineering—remain top investment priorities driving digital transformation across multiple industry sectors.
This article provides a comprehensive guide to Kubernetes Gateway API, covering its evolution from Ingress, core concepts, resource types, configuration examples, role‑based design, cross‑namespace routing, and practical steps for installation, deployment, and management using Istio and other controllers.
The article investigates why Kubernetes pods can access a CLB on port 80 but receive connection‑refused errors on port 443, explains the role of the dummy kube‑ipvs0 interface and IPVS rules, and presents annotation‑based and traffic‑policy solutions for both internal and external access.
The article explains how vectors represent data in high‑dimensional space, describes the embedding process, outlines the evolution and challenges of vector search, compares exact and approximate algorithms such as IVF, product quantization and HNSW, and details Baidu’s cloud‑native engineering solutions for scalable, filtered vector retrieval.
Systems Theory, originating in the 1940s, provides a holistic framework for understanding and designing complex software architectures, emphasizing component interaction, feedback, and adaptability, with practical examples ranging from microservices and Kubernetes to chaos engineering, illustrating its impact on scalability, resilience, and modular design.
This guide explains how to evaluate and tune Serverless function settings—balancing cost, performance, and workload complexity—using built‑in estimation tools, CPU/IO benchmark results, Little's Law‑based performance probing, and Alibaba Cloud's PTS testing workflow.
Manbang Group shares its practical experiences and insights on real-time computing, multi‑cloud platform architecture, data warehousing with Flink and Holo, real‑time decision and feature platforms, and future plans for scaling these systems to support logistics and recommendation algorithms.
This article explains how Dubbo3’s new observability starter provides visual cluster metrics, full‑link tracing, multi‑dimensional monitoring, Prometheus/Grafana integration, and log management, offering practical steps and configurations for building a robust cloud‑native microservice observability platform.
The 2023 online summit held on August 5‑6 showcases a series of technical talks by industry experts on modern big‑data storage architectures such as Paimon, JuiceFS, Databend, and CloudFS, highlighting cloud‑native design, storage‑compute separation, and practical implementation experiences.
The article describes an eBPF‑based, language‑agnostic traffic recording framework that hooks low‑level socket operations and thread identifiers to capture complete request‑response flows across Java, PHP, and Go services without modifying application code, dramatically lowering implementation and maintenance costs for cloud‑native traffic replay.
This article explains Docker and container technology, contrasting it with virtual machines, describing how containers provide lightweight, fast-starting, isolated environments, outlining Docker's core concepts, commands, and underlying Linux kernel features such as namespaces and cgroups, and summarizing their benefits for developers and operations.
This tutorial walks through installing the etcd client, creating an Nginx deployment for verification, backing up the etcd data store, validating the backup, and restoring the backup to a Kubernetes cluster while handling component shutdown and restart procedures.
This article explains how service mesh complements Kubernetes by providing advanced traffic management, observability, and security for microservices, discusses common distributed‑system fallacies and service‑governance challenges, compares Istio with FloMesh, and explores future trends such as Wasm sidecars, ambient mesh, and eBPF.
To overcome native HPA limits and business‑specific constraints in a fully containerized, cloud‑native Kubernetes environment, we implemented a dual‑threshold water‑level and scheduled scaling engine, hybrid‑cloud ClusterAutoScale, mixed‑deployment resource prioritization, and comprehensive Prometheus‑based observability, achieving higher utilization, lower costs, and a roadmap toward deeper optimization and AIOps.
Gaode migrated its core navigation, traffic, and financial services to OceanBase, leveraging Paxos‑based multi‑replica consistency, LSM‑Tree storage, and distributed transactions, selecting multi‑point write for massive sync workloads and central‑write for latency‑critical queries, achieving sub‑millisecond latency, significant storage savings, and a roadmap toward broader cost‑effective, serverless deployment.
This guide walks you through claiming a free SAE trial, creating a Serverless application, configuring public access, and submitting your deployment for the 4th Cloud Native Programming Challenge, providing practical steps and essential links for a successful migration to Alibaba Cloud's Serverless Application Engine.
This article shares practical kubectl tips—including printing API calls, filtering and deleting pods, counting pod distribution, and using kubectl proxy—to help experienced Kubernetes users work more efficiently and troubleshoot clusters with powerful command‑line shortcuts.
This guide explains the common challenges enterprises face when adopting cloud‑native release strategies and provides a step‑by‑step solution using Alibaba Cloud MSE and ZadigX to create, configure, and manage full‑link gray deployments on Kubernetes clusters, including code examples and workflow automation.
This article presents a collection of practical kubectl techniques—including API debugging, status‑based pod filtering, node‑specific listings, pod distribution counting, and proxy usage—to help Kubernetes users streamline cluster management and avoid writing custom client code.
This guide explains how to set up Alibaba Cloud Observability Prometheus edition to monitor ClickHouse, covering ClickHouse fundamentals, metric collection, dashboard templates, alert rules, troubleshooting steps, and deployment options for both ACK and ECS environments.
This article explains how Docker containers provide a lightweight, fast‑starting alternative to virtual machines, detailing their origins, technical differences, core concepts, basic commands, and underlying Linux mechanisms that enable consistent, efficient application deployment across environments.
This article details Baidu Zhidao’s migration from an aging, monolithic PaaS platform to a cloud‑native environment, explaining the business drivers, the selection of Pandora and Zhiyun platforms, the step‑by‑step traffic‑shifting and gateway redesign, and the measurable gains in stability, scalability, and cost after achieving 100% cloud traffic.
Datree is an open-source CLI that validates Kubernetes YAML files against customizable policies, allowing users to detect syntax errors, version mismatches, and resource limits without connecting to a live cluster, and it provides a dashboard for managing and editing rules.
This article explains the relationship between Docker and Kubernetes, clarifies why Docker knowledge isn’t mandatory for K8s beginners, and outlines the essential Docker skills needed to effectively work with Kubernetes clusters.
Seata 1.7.0, positioned as a stability‑focused release, dramatically improves robustness, adds native‑image support, expands Docker images, resolves numerous bugs across JDK, Spring, and database integrations, enhances security, and provides detailed upgrade and deployment guides for enterprise‑grade distributed transactions.
Tengine‑Ingress is Alibaba’s cloud‑native Ingress gateway built on the high‑performance Tengine‑Proxy, replacing the legacy Unified Access with dynamic, loss‑less configuration, per‑domain gray‑rollout, dual‑certificate TLS, real‑time observability, and checksum validation, achieving up to 20 % lower latency, CPU and memory usage while scaling to thousands of pods, and paving the way for a universal API gateway supporting TCP, UDP, gRPC, QUIC/HTTP3 and advanced TLS.
This article explains the evolution from traditional SQL to NewSQL, outlines the shortcomings of classic relational databases and NoSQL, and details TiDB’s architecture, core features, high‑availability design, and practical use cases as a cloud‑native, MySQL‑compatible HTAP solution.
This guide walks through the background, implementation, usage examples, and step‑by‑step open‑source contribution process for adding Redis cache expiration and memory‑limit chaos experiments to the ChaosBlade platform, including code snippets, Git workflow, and testing procedures.
This article examines the trade‑offs between running Kubernetes on bare metal versus virtual machines, covering performance differences, orchestration complexity, hardware visibility, capacity planning, network impact, and when each approach makes sense for modern cloud‑native workloads.
Shopee’s unified Image Service consolidates upload, processing, and delivery into a single platform that overcomes legacy fragmentation and heterogeneous networks through resumable SDKs, adaptive ID schemes, link‑level and HTTP/3 transport optimizations, dynamic CDN scheduling, and device‑aware resizing, boosting upload success to 99.67 %, halving latency, cutting storage by 25 % and bandwidth by 56 % while markedly improving app performance.
AlterShield is an open‑source, end‑to‑end change‑control platform that systematizes change perception, risk analysis, and defense across distributed cloud‑native environments, enabling SRE teams to mitigate stability risks through standardized protocols, incremental rollout, and automated observability checks.
The article introduces Dubbo's upgraded Triple protocol—a HTTP‑based, gRPC‑compatible RPC protocol that supports both HTTP/1 and HTTP/2, streaming, and easy front‑end access, explains its design goals versus gRPC, showcases usage examples, and details multi‑language implementations and production adoption.
The article explains how Dubbo 3’s upgraded Triple protocol, fully compatible with gRPC and runnable over HTTP/1 and HTTP/2, simplifies client and server integration, reduces development and operational costs, and offers multi‑language support, making it a practical choice for cloud‑native microservice architectures.
This guide explains what KubeLinter is, why it’s useful for cloud‑native security, how to install it via Go, Homebrew or source, and provides step‑by‑step instructions for linting Kubernetes and Helm manifests, customizing checks, and interpreting results.
Meiqia, a global intelligent cloud‑customer‑service provider, replaced a tangled multi‑middleware routing stack with a unified Higress gateway, achieving hot‑reloadable routing, WebSocket stability, multi‑cloud deployment, and a clear control‑plane/data‑plane separation that dramatically reduced costs and operational complexity.
The article details how Qunar's Noah environment platform evolved through three stages—automatic environment definition, cost‑effective build optimization, and developer‑centric efficiency improvements—to automate test environment provisioning, reduce resource consumption, and achieve high build success rates across thousands of micro‑service applications.
This article curates the most valuable Spring I/O 2023 video sessions—covering the latest Java version adaptations, Spring Framework and Boot innovations, cloud‑native deployments, security, observability, and architectural best practices—providing concise Chinese summaries so developers can quickly identify which talks merit deeper viewing.
This guide explains how the cloud‑native Higress gateway can lower the expense of using AI large models by centralising API keys, applying rate‑limiting, request filtering, and usage monitoring, and demonstrates a complete OpenAI integration using a WASM plugin with code samples and configuration details.
