This guide explains Kubernetes service exposure options, the challenges they address, and provides a step‑by‑step tutorial for deploying an Ingress controller, creating Ingress resources, and configuring TLS to securely expose applications within a cluster.
This article walks beginners through the full process of preparing a Kubernetes environment and deploying both PHP (WordPress) and Java (Tomcat) web applications, covering image creation, namespace setup, secrets, deployments, services, ingress configuration, and host binding.
This article provides a comprehensive introduction to microservice architecture, covering service decomposition, registration and discovery methods, client‑driven load balancing, rate‑limiting and circuit‑breaking strategies, and the design of a self‑built application delivery platform for cloud‑native environments.
This article details how Tubi built the Tubi Data Runtime platform on JupyterHub using Kubernetes, covering authentication with Okta SSO, custom Docker images, shared EFS storage, multi‑service support, GPU enablement, node affinity, cluster autoscaling, and monitoring with Prometheus.
This article provides a comprehensive guide to Docker images, covering core concepts, image sources, essential commands for searching, pulling, tagging, inspecting, pruning, exporting, importing, and pushing images, along with practical examples and tips for effective container image management.
This article analyzes a recurring NotReady issue in Alibaba Cloud Kubernetes clusters, explaining how kubelet, NodeStatus, and the Pod Lifecycle Events Generator (PLEG) interact, why nodes become Ready for only three minutes after a kubelet restart, and how the underlying timeout mechanisms cause the problem.
This article explains how container technology, inspired by shipping containers, transforms software delivery with modular, lightweight virtualization, and how Alibaba Cloud’s container services—ACK, ASK, ACR, and ASM—provide agile, elastic, portable, and secure cloud‑native solutions for hybrid and multi‑cloud environments.
This article explains the Kubernetes update mechanism, why an API update can fail due to missing resourceVersion, how patch operations differ, and the internal logic of kubectl apply and edit, providing practical guidance for choosing between update and patch in cloud‑native deployments.
This article examines why MySQL is deployed on Kubernetes, outlines the technical challenges such as service routing, monitoring isolation, storage and high‑availability, highlights the benefits of cloud‑native networking and scheduling, and reviews popular MySQL operators and their implementation details.
This article provides a comprehensive technical overview of Tencent Cloud's TBase database, covering fundamental database classifications, TBase's cloud‑native architecture, distributed transaction mechanisms, storage and compute separation, security layers, backup strategies, and real‑world deployment cases.
This article explains how leveraging edge computing, CDN‑based SSR caching, and TESI tags can dramatically improve first‑screen performance, reduce server pressure, and enable efficient static rendering for massive, mostly static content while maintaining up‑to‑date data and robust fallback mechanisms.
The article recaps a SIG Cloud‑Provider‑Alibaba webinar, detailing Alibaba’s large‑scale cloud‑native deployment challenges and how the open‑source OpenKruise project introduces extended workloads like CloneSet, Advanced StatefulSet, SidecarSet, and more to improve deployment efficiency, stability, and flexibility on Kubernetes.
This article describes the design and implementation of a Serverless‑based one‑stop node service management platform, covering its full‑stack engineering architecture, frontend and backend project organization, logging, process monitoring, one‑click deployment, and a comparison of Serverless solutions, while sharing practical challenges and technical solutions.
The Istio 1.6 release introduces a fully migrated Istiod architecture, streamlined installation and upgrade processes, expanded observability features, native support for virtual‑machine workloads via WorkloadEntry, and several network enhancements including improved secret handling and experimental Service API support.
This guide explains how to set up Istio across multiple Kubernetes clusters using a multi‑control‑plane topology, covering CA secret creation, control‑plane installation, DNS configuration, sample application deployment, ServiceEntry and DestinationRule creation, and cross‑cluster traffic routing verification.
OpenKruise v0.5.0 introduces CloneSet maxSurge rollout and SidecarSet volume‑merge capabilities, addressing native Kubernetes limitations by allowing expand‑then‑shrink deployments, in‑place upgrades, and seamless sidecar injection without volume conflicts for large‑scale cloud‑native applications.
This tutorial walks you through setting up a complete Kubernetes development environment on CentOS, covering prerequisite installations, Docker CE setup, kubelet/kubeadm/kubectl configuration, master node initialization, network add‑ons, node joining, and common troubleshooting tips.
This guide provides a comprehensive overview of the kubectl command‑line tool, covering its syntax, core components, common commands, output formatting options, custom columns, server‑side printing, sorting, and practical examples for everyday Kubernetes cluster operations.
This article explains how RocketMQ’s network filter was merged into the CNCF Envoy project, details the message flow and stateful networking challenges within a service mesh, describes on‑demand CDS handling, and outlines future enhancements such as Pull support and broker‑side proxying.
Meituan’s Naming Service 2.0 replaces the ZooKeeper‑based 1.0 design with a four‑layer, AP‑oriented architecture that leverages a service‑mesh sidecar, sharded KV storage, and a control service layer, delivering eight‑fold throughput gains, sub‑second latency, zero‑downtime migration for most services, and new business capabilities such as traffic isolation, elastic scaling, and data‑driven SLA monitoring.
This article evaluates six popular container CI/CD pipelines—Heroku, Azure DevOps, GitLab CI/CD, AWS Elastic Beanstalk, Google Cloud Build, and Jenkins X—detailing their configurations, advantages, limitations, pricing, and personal assessments to help teams choose the most suitable solution for their workflow.
Explore the fundamentals of Envoy, the lightweight L7 proxy for modern SOA architectures, through a detailed walkthrough of its architecture, configuration structure, filter chain, and key components such as xDS, listeners, clusters, and runtime settings, illustrated with diagrams and practical examples.
This article details how Tongcheng‑eLong transitioned from Docker‑Host deployments to a Kubernetes‑based platform for hundreds of storage and compute services, covering network integration, IP management, service synchronization, storage strategies, operator development, monitoring, logging, and the challenges and future plans they encountered.
This article examines the challenges of large‑scale deep‑learning model training on Kubernetes, analyzes performance bottlenecks caused by Alluxio‑FUSE integration, and presents a series of configuration and system‑level optimizations that dramatically improve data‑access speed and overall training throughput.
This guide walks front‑end developers through the essential steps, tools, and best practices for using Midway FaaS to build serverless applications, highlighting four key pitfalls and how to avoid them while simplifying deployment across major cloud providers.
This guide walks front‑end developers through the major traps when adopting Alibaba’s Midway FaaS serverless framework—covering platform selection, CLI usage, code structure, local debugging, deployment configuration, and cost‑saving tips—so you can launch cloud‑native applications quickly without costly mistakes.
Through a business‑growth narrative, this article explains why Kubernetes emerged, how its core components work together, and why front‑end engineers should care about container orchestration, providing a concise, entry‑level overview of cloud‑native infrastructure.
This article explains the Open Application Model (OAM), its core concepts of Components, Application Configuration and Traits, and demonstrates a visual platform that lets users create, configure, version, and publish a multi‑component application (nginx, tomcat, redis) on Kubernetes with detailed screenshots and a GitHub demo repository.
This article provides a comprehensive overview of Kubernetes, explaining its core concepts, advantages, key features, typical use cases, and the new capabilities introduced in version 1.18, while also linking to related tutorials and practical deployment guides for building scalable, resilient cloud‑native applications.
This article explains the challenges of operating many Kubernetes clusters in private‑cloud environments and presents a declarative, operator‑driven Kube‑On‑Kube architecture that dramatically cuts deployment, upgrade, and user provisioning time while remaining cloud‑native and infrastructure‑agnostic.
This article provides a detailed overview of Istio’s architecture, explaining the roles and interactions of its data plane, control plane, and core components such as Envoy sidecar, Pilot, Mixer, Citadel, Galley, sidecar‑injector, and ingress gateway within a Kubernetes‑based service mesh.
This article analyzes the ten‑day, large‑scale construction of Huoshenshan and Leishenshan hospitals from a DevOps perspective, detailing the "small team‑big backend" organization, parallel value streams, modular building techniques, cloud‑native analogies, waterfall versus agile models, quality‑in‑built practices, and the operational challenges faced by the medical teams.
Kong’s Insomnia Designer adds a collaborative, spec‑first environment for designing REST and GraphQL APIs, integrates CI/CD, GitOps, and Kubernetes, and embeds Kong gateway policies directly into API specifications, boosting productivity for cloud‑native development.
This article explains how Docker solves environment‑configuration challenges, compares containers with virtual machines on startup speed, resource usage, and isolation, outlines Docker’s key advantages such as easy deployment and low cost, and discusses its remaining drawbacks like isolation limits, performance under high concurrency, and storage considerations.
Dragonfly, an open‑source P2P image distribution system, was promoted to CNCF incubation after demonstrating scalable download, CDN‑assisted long‑distance transfer, bandwidth‑saving compression, and secure transmission, while the CNCF TOC outlined its promotion process and the project's growing industry adoption.
This article provides a comprehensive introduction to Istio, explaining what a service mesh is, its core components and functions, the challenges it addresses in microservice architectures, and practical steps for adopting Istio in production environments.
This article explains what a service mesh is, outlines the operational challenges of microservice architectures, and details how Istio’s data‑plane and control‑plane components provide traffic control, security, and observability to simplify cloud‑native deployments.
This article explains how to use infrastructure‑as‑code techniques on Kubernetes to automate the deployment and CI/CD pipelines of .NET Core microservices, detailing the role of k8s.yaml files, Jenkinsfiles, and related automation tools.
This article offers a pictorial introduction to Kubernetes, explaining what containers are, when to use orchestration, why Kubernetes stands out, and detailing its core architecture—including master components, pods, controllers, services, and ingress—providing a clear, beginner-friendly overview of container orchestration in cloud-native environments.
This article provides a comprehensive overview of Prometheus, covering its origins, architecture, step‑by‑step deployment, configuration, web UI usage, as well as its key advantages and limitations for cloud‑native monitoring and operations.
This article explains how to combine RocketMQ with Knative to create cloud‑native, event‑driven serverless applications, covering cloud‑native fundamentals, Knative architecture, RocketMQSource integration, a food‑delivery use case, deployment steps, command‑line examples, and additional scenarios.
This article details the evolution of an online development platform—from early WebIDE experiments and code‑server integration to a cloud‑native architecture with client, server, and container pool components—highlighting challenges in resource scheduling, high availability, startup speed, and plugin ecosystems, and sharing practical solutions and scenario deployments.
This article explains the principles, advantages, and drawbacks of blue‑green deployment, canary (gray) release, and A/B testing, compares their use cases, and provides step‑by‑step guidance for safely rolling out new versions in modern cloud‑native environments.
This article provides a comprehensive guide to Spring Cloud Gateway, covering its role as an API gateway, core features, underlying principles, step‑by‑step module creation, Maven dependency configuration, application annotations, YAML routing examples, and a runnable demo for building cloud‑native microservice architectures.
This article explains the principles behind Alibaba Cloud Kubernetes cluster node scaling, covering manual and automatic node addition, cluster expansion with ESS, and auto‑scaling using Cluster Autoscaler, along with troubleshooting steps and key components involved.
This roundup highlights recent cloud‑native developments, including the donation of Istio to an open‑source foundation, Kotlin gRPC becoming open source, dynamic watch‑cache sizing and authentication tweaks in Kubernetes, Knative 0.14 release details, xDS v3 planning, plus curated open‑source project and reading recommendations.
This article provides a comprehensive overview of Kubernetes, covering its definition, advantages, core features, typical use cases, architectural layout, essential control‑plane and node components, as well as common add‑on tools for monitoring and networking.
This article explains how the Open Application Model (OAM) abstracts away infrastructure details, enabling developers to define applications with concise YAML files and deploy them to AWS Fargate via the Amazon ECS for OAM project using just a few simple commands.
This article explains the Thanos architecture, compares Sidecar and Receiver deployment modes, walks through object‑storage configuration, and provides complete Kubernetes YAML examples for Prometheus, Thanos Sidecar, Query, Store Gateway, Ruler, Compact, and Receiver to build a large‑scale cloud‑native monitoring system.
This article explains how the CNCF‑incubated Argo suite enables native Kubernetes workflows, details performance‑enhancing contributions such as RBAC‑aware executors, parallel scanning, and status compression, and showcases a real‑world gene‑sequencing use case that achieves over a hundred‑fold speedup.
Rakuten Mobile leveraged Kubernetes, OpenNESS, and the open‑source Kube‑OVN data‑plane to replace virtual machines with containers in its NFV and RAN infrastructure, creating the first cloud‑native 5G network and outlining future enhancements for telecom‑grade performance and scalability.
This guide explains the concepts of apiserver clients, authentication methods, service accounts, RBAC authorization, admission control, and provides step‑by‑step instructions for installing and accessing the Kubernetes Dashboard 2.0.
The article examines the challenges of traditional SOA and microservice architectures in large enterprises, proposes a distributed multi‑center integration model that combines traditional services with microservices, emphasizes security, scalability, and data redundancy, and outlines the roles of capability centers, open platforms, and routing components within a cloud‑native environment.
Apache ShardingSphere, the open‑source distributed database middleware originally contributed by Dangdang and now backed by the Apache Software Foundation, has graduated to a top‑level Apache project, showcasing its evolution from a simple JDBC sharding driver to a comprehensive ecosystem with JDBC, Proxy, and Sidecar components, adopted by over 120 companies.
The article analyzes a recurring Kubernetes node NotReady problem where restarting kubelet only restores readiness for three minutes, explains the underlying PLEG timeout mechanism, investigates unresponsive Terway CNI plugin behavior, and presents a netlink‑timeout fix to prevent the issue.
This article introduces Spring Cloud Alibaba as a one‑stop microservice solution, compares it with traditional Spring Cloud, outlines its advantages, presents a detailed component selection for the PassJava project, and provides version compatibility, Maven dependency snippets, and final technology choices.
This article examines the evolution of Tencent's TSF Mesh Service Mesh platform, detailing its architecture, the technical hurdles faced when supporting heterogeneous environments, multi‑tenant isolation, DNS and Spring Cloud interoperability, and the solutions implemented to achieve robust, cloud‑native service governance.
This article explains the evolution from manual deployment to container orchestration, compares Docker Compose, Mesos, and Kubernetes, outlines DevOps principles, and provides a detailed overview of Kubernetes origins, features, architecture, and core components.
This article reviews the SIG Cloud‑Provider‑Alibaba webinar, explains Kubernetes container networking fundamentals, details Alibaba Cloud's high‑performance CNI implementation using Terway with exclusive and shared ENI modes, and shows how eBPF, AutoPath DNS and resource‑pooling improve scalability and latency.
The article explains Docker's new cross‑platform Compose specification, highlights its concise syntax and cloud‑native benefits over Kubernetes, showcases example configurations, and describes related open‑source projects and Lingque Cloud's contributions to the spec development.
This article explains the fundamentals and advantages of edge computing, examines how Kubernetes can be applied to edge scenarios, discusses the challenges involved, and reviews major open‑source Kubernetes‑based edge projects such as K3s, Microk8s, and KubeEdge.
In a live Q&A, OPPO cloud platform senior backend engineer shares practical insights on hybrid deployment of offline jobs on Kubernetes, custom high‑performance monitoring with a distributed TSDB, storage scalability via CSI, pod readiness detection, and deploying Ceph/HDFS within the container cluster.
This article provides a detailed analysis of Thanos' architecture, explaining each core component—Query, Sidecar, Store Gateway, Ruler, Compact, and the upcoming Receiver—how they enable global view, high availability, and long‑term storage for distributed Prometheus deployments, and discusses design trade‑offs and optimization strategies.
This article provides a comprehensive step‑by‑step guide for installing, configuring, and performance‑tuning the Rainbond (formerly CloudHelp) Kubernetes‑based platform, covering prerequisites, FAQ, installation commands, node addition, kernel and system parameter adjustments, and post‑installation verification.
This article introduces Portainer.io, a lightweight graphical interface for Docker that simplifies container monitoring, image handling, and stack creation, providing step‑by‑step installation commands, feature highlights, and practical usage tips for cloud‑native developers.
This article explains the evolution of container runtimes, the introduction of the Container Runtime Interface, and how Kubernetes RuntimeClass—introduced in v1.12 and expanded in later versions—enables multiple runtimes, custom scheduling, and pod overhead accounting, with practical YAML examples and multi‑runtime deployment scenarios.
The TVP Technical Closed‑door Conference gathered 44 experts across eight sessions to examine post‑pandemic technology trends—including blockchain as institutional infrastructure, cloud‑native databases and serverless computing, industrial internet transformation, data‑driven online education, federated learning for privacy‑preserving AI, and the shift toward resource‑focused technical entrepreneurship.
This article analyzes how the rapid, modular construction methods used for the Huoshenshan and Leishenshan hospitals can be mapped to software development, illustrating parallels in requirement decomposition, architecture selection, containerization, and cloud‑native microservice design for efficient DevOps delivery.
This article demystifies cloud‑native infrastructure by clarifying common misconceptions, defining its core principles—API‑controlled, software‑managed resources aimed at running applications with minimal human intervention—and outlining its benefits, implementation steps, and the mindset shift required for modern operations.
This article explains the concept of secure containers, their definition based on the OCI specification, and how projects like Kata Containers and gVisor implement isolation layers to provide VM‑level security with container‑level performance in cloud‑native environments.
This article explains what Istio is, outlines the major updates in version 1.5—including the unified istiod control plane, WebAssembly extensibility, simplified installation, and improved observability—describes core control‑plane components, and provides step‑by‑step instructions for preparing a Kubernetes cluster and installing Istio.
This article explains how to design and implement a cloud‑native, large‑scale distributed monitoring system using Prometheus, covering its limitations, service‑level sharding, centralized storage, federation, and high‑availability strategies to overcome scaling challenges in Kubernetes environments.
Kubernetes 1.18, released on March 26 2020, introduces 38 enhancements—including beta and alpha features—such as the Topology Manager, ServerSideApply v2, IngressClass with pathType, kubectl alpha debug, Windows CSI support, and a dozen enhancements that have graduated to stable, reshaping cluster performance and usability.
The article reviews the rapid rise of Serverless as the next evolution of cloud computing, citing Gartner forecasts, real‑world case studies, best‑practice recommendations, and perspectives from global experts on its benefits, challenges, and future impact on development and operations.
This article explains OceanBase's public‑cloud deployment, its unique architecture without a central controller, horizontal scaling via partition groups, LSM‑Tree storage design, advanced SQL engine features, ACID‑plus‑Availability guarantees, and real‑world performance records, illustrating why it suits high‑availability financial workloads.
This article explains Envoy's hot‑restart capability, various dynamic configuration options—including static, SDS/EDS, CDS, RDS, and LDS—and the initialization and drain processes that enable seamless updates and graceful connection handling in cloud‑native deployments.
The case study details how a major state‑owned real estate company, with nearly 40 years of experience, built a three‑stage cloud‑native middle‑platform strategy—business, data, and technology platforms—using microservices, containers, and Tencent Cloud TSF to achieve integrated operations, data‑driven decision making, and agile infrastructure across its nationwide projects.
This article details NetEase's game monitoring system that supports billions of users worldwide, covering global monitoring challenges, a layered observability architecture, massive time‑series processing, visualisation and alerting mechanisms, and intelligent AI‑driven anomaly detection practices.
This article introduces Istio as an open platform for connecting, securing, controlling, and observing services, explains the fundamentals of service mesh, outlines Istio’s architecture and components, and provides practical steps for adopting Istio in a Kubernetes environment.
The article explains Envoy's circuit‑breaking mechanisms, global rate‑limiting integration, and TLS support, detailing configuration options, limits, and example YAML snippets for deploying secure and resilient service‑mesh proxies.
This article explains the origins and design of Kubernetes' Container Runtime Interface (CRI), how it abstracts container runtimes, details its lifecycle and streaming operations, reviews major implementations like CRI‑containerd and CRI‑O, and introduces essential debugging tools.
This article explains the classic definition of patterns, introduces architecture patterns, and reviews five common software architecture styles—layered, microservices, microkernel, event‑driven, and cloud‑native—detailing their principles, advantages, drawbacks, and typical use cases, helping developers choose the right structure for complex systems.
This article explains why Kubernetes has become the de‑facto standard, outlines simple methods to get a usable cluster such as Katacoda, Minikube or cloud services, and proposes a focused learning path that starts with core concepts and real‑world deployment scenarios for developers.
Nightingale, Didi’s open‑source enterprise monitoring platform, builds on Open‑Falcon but adds a hierarchical object tree, in‑memory indexing, Gorilla‑compressed time‑series storage, a hybrid push‑pull alert engine, built‑in log monitoring, and a unified monapi module, delivering scalable, cloud‑native observability for both container and bare‑metal workloads.
This article explains Envoy’s service discovery mechanisms—including static, strict DNS, logical DNS, original‑destination, and Service Discovery Service—detailing how they work, their consistency models, and how health‑checking influences routing decisions in production environments.
The article summarizes insights from Tencent’s TVP closed‑door tech forum, explaining what cloud native means, its evolution, benefits such as platformization and automation, challenges in adoption, Kubernetes’s growing role in serverless, edge computing, and service mesh, and how developers and enterprises can navigate the shift.
At Tencent Cloud’s closed‑door TVP meeting, experts traced cloud‑native’s evolution from monolithic to PB‑scale distributed platforms, highlighted its ecosystem of infrastructure, service‑mesh and Kubernetes‑driven scheduling, noted widespread Fortune‑100 and Tencent adoption, and stressed that successful implementation hinges more on organizational and developer mindset shifts than on technology maturity.
This article explains Envoy's core terminology, thread model, listener architecture, network (L3/L4) filters, HTTP connection manager, and routing configuration, providing a concise technical overview of how the service proxy operates within cloud‑native environments.
The article reviews a Tencent Cloud TVP closed‑door forum where experts compared MySQL 8.0, PostgreSQL, Redis and the cloud‑native CynosDB, highlighting each product’s technical strengths, ecosystem support, and the broader industry trend toward cloud‑native, multi‑database solutions as the future of data management.
This article provides a comprehensive introduction to Spring Cloud, explaining how it builds on Spring Boot to simplify distributed system development with components for service discovery, configuration management, messaging, monitoring, security, and compares its approach to Dubbo's RPC framework.
The article examines the energy sector’s digitalization challenges and presents CNPC’s “Dream Cloud” platform—detailing its cloud‑native architecture, container‑based PaaS, DevOps workflow, and service‑oriented framework—and shows how these technologies enable unified data sharing, agile application delivery, and measurable operational improvements across upstream oil and gas operations.
This article details Fliggy's year‑long journey of designing, building, and iterating a unified Serverless (FaaS) platform that unified front‑end and back‑end workflows, reduced operational overhead, and now powers over a dozen business scenarios with millions of daily function calls.
Zhihu's Moneta service stores over a trillion rows of user‑read posts and, facing massive write throughput and strict sub‑90 ms query latency requirements, migrated to the open‑source HTAP database TiDB, achieving horizontal scalability, high availability, and dramatically improved performance.
This article shares six practical techniques—including explicit image tagging, using Alpine base images, consolidating cleanup commands, leveraging Docker layer caching, avoiding process managers, and optimizing Java memory settings—to improve the efficiency, speed, and reliability of applications deployed on the Kubernetes‑based Xiaomi Application Engine.
This article explains the origin of the term Kubernetes, clarifies what containers are and why they’re popular, outlines when to adopt Kubernetes, and details its architecture, core components, pods, and key controllers such as ReplicaSet, Deployment, Service, and Ingress.
This article recounts how a pandemic‑era live‑streaming service rapidly expanded from ten‑thousand to one‑million concurrent viewers within three days by analyzing the pre‑deployment assessment, container‑based scaling, monitoring, emergency response plans, and post‑launch optimizations.
This article provides a comprehensive, illustrated introduction to Kubernetes, covering its definition, key advantages, practical scenarios such as logging, DevOps, and microservices, core features, architecture, and essential master and node components for beginners.
This guide explains branch development strategies, naming conventions, Dockerfile creation, image building and publishing, as well as automated Harbor image cleanup using Jenkins pipelines, providing a comprehensive workflow for managing container images in a cloud‑native environment.
This article details UCloud's engineering of API and SDK management—including unified modeling, code generation, automated testing, and CI/CD pipelines—to dramatically improve the stability, reliability, and release efficiency of its public cloud services.
The article presents the launch of Kube-OVN 1.0 GA, shares findings from a 158‑respondent survey on container network usage, outlines current network solutions and future feature demands, and provides a detailed Q&A from the online webinar for practitioners interested in Kubernetes cloud‑native networking.
