In-depth technical articles, high-load system architecture analyses, and practical digital transformation strategies shared directly by Sudo’s engineers and solutions architects.
An e-commerce website running Laravel Octane on a minion returns 502 because the kernel killed the site's FrankenPHP process after it ran out of RAM. One site running out of RAM is nothing unusual. Wh...
Once the operations pipelines for websites on Kubernetes are running smoothly in GitLab CI, the next question is usually not "which tool should we rewrite them in", but "how do operators run them safe...
A Website AI site on Linode's LKE cluster returns 503 on and off. There is no long outage, just pages that occasionally fail to open and then work again a moment later. kubectl shows that the site's o...
For twenty years, a Java class that "only holds data" came with about thirty lines of ceremony: private final fields, a constructor, getters, and then equals, hashCode and toString, written by hand or...
Sometimes the familiar certbot command on a balancer suddenly reports Connection Timeout for every domain. The cause is neither certbot nor nginx: international connectivity for the IP range that host...
For more than two decades, the standard answer to "why doesn't adding threads make Python faster?" has been the GIL, the global interpreter lock that lets only one thread run bytecode at a time. Since...
A common situation on Website AI: an administrator cannot complete an image upload in the editor. The JPEG file is only a few MB but has a very high resolution (about 30 megapixels). Sometimes it fail...
Coraza WAF blocks individual malicious requests, but a blocked IP can keep sending thousands more, and each one still costs the balancer CPU to analyze. Scraper bots are even harder: their requests ar...
A customer's mobile app could not update user profiles or delete transactions: every PUT and DELETE request received a 403. This is a textbook WAF false positive on a balancer running Coraza WAF. Whil...
The shared security snippet on the balancer (see standardizing Nginx security with a security snippet) does a good job of blocking sensitive paths such as .env, .git and wp-login. But it never looks a...
An unpleasant situation on Cloud VPS: Grafana shows several machines at "CPU close to 100%" at the same time, or losing monitoring data entirely, including the balancer, the database machine and the m...
A balancer usually serves many websites, and each site writes its access log and error log to its own files. When a site slows down, the first questions are always: which IP is sending the most reques...
All articles are displayed
