Blog

# From the ZCP team

Product announcements, engineering posts, tutorials, and stories from a Canadian-owned cloud platform.

## More posts

![Tailscale subnet router migrated from LXC container on Proxmox to a dedicated physical ops node](https://zcp.zsoftly.ca/images/blog/2026/ops-02-subnet-router-migration.webp)

Engineering

March 3, 2026

### [Running Your VPN Gateway Inside the Thing It Protects Is a Bad Idea](https://zcp.zsoftly.ca/blog/ops-02-subnet-router-migration)

We ran our Tailscale subnet router as an LXC container on the same Proxmox host it was providing remote access to. It worked. Until Proxmox needed attention. Here is how we fixed it.

Staff at ZSoftly

6 min read

![Production-ready private cloud infrastructure with Apache CloudStack - complete data sovereignty and regulatory compliance for enterprises](https://zcp.zsoftly.ca/images/blog/2026/cloudstack-architecture.webp)

Engineering

January 29, 2026

### [Building Private Cloud Infrastructure with Apache CloudStack - Architecture and Design Decisions](https://zcp.zsoftly.ca/blog/private-cloud-architecture-cloudstack)

Why private cloud matters for Canadian businesses, how CloudStack provides enterprise IaaS capabilities, and the key architectural decisions for deploying production-ready private cloud infrastructure.

Staff at ZSoftly

18 min read

![EKS node consolidation showing separation by operational pattern from 8 nodes to 3 platform nodes plus dynamic workload nodes](https://zcp.zsoftly.ca/images/blog/2026/node-consolidation-v2.webp)

Engineering

January 22, 2026

### [How We Cut EKS Costs 62% by Rethinking Node Architecture](https://zcp.zsoftly.ca/blog/eks-node-consolidation-platform-nodepool-karpenter)

Our sandbox cluster ran 8 EC2 instances 24/7 costing $260/month. Most were idle overnight. By separating platform services from time-based workloads and recognizing CI/CD managers as 24/7 services, we consolidated to 3 nodes saving $160/month while improving reliability.

Staff at ZSoftly

13 min read

![Architecture diagram showing 4 applications connecting to a shared PostgreSQL cluster with PgBouncer connection pooling](https://zcp.zsoftly.ca/images/blog/2026/pg-consolidation-after.webp)

Engineering

January 18, 2026

### [How We Consolidated 4 PostgreSQL Clusters into 1 with CloudNativePG](https://zcp.zsoftly.ca/blog/postgresql-consolidation-cloudnativepg-kubernetes)

We ran 4 separate PostgreSQL clusters for 91MB of data. Each cluster had its own PodDisruptionBudget blocking node drains. This guide shows how we consolidated them into a single HA cluster with PgBouncer connection pooling using CloudNativePG and ArgoCD.

Staff at ZSoftly

8 min read

![ArgoCD CLI authentication flow for EKS Auto Mode using tokens](https://zcp.zsoftly.ca/images/blog/2026/argocd-eks-auto-mode-login.webp)

Tutorials

January 1, 2026

### [ArgoCD CLI Login Fails on EKS Auto Mode? Here Is the Fix](https://zcp.zsoftly.ca/blog/argocd-eks-auto-mode-cli-login-fix)

Standard ArgoCD login commands fail on EKS Auto Mode because AWS manages ArgoCD differently. This guide shows you the correct authentication method using tokens and environment variables.

Staff at ZSoftly

3 min read

![A representation of cloud security](https://zcp.zsoftly.ca/images/blog/2025/cloud-security-compliance-automation.webp)

Company

December 2, 2025

### [Cloud Security Compliance Automation Costs in Canada](https://zcp.zsoftly.ca/blog/cloud-security-compliance-automation-costs-canada)

Learn how Canadian businesses can use cloud security compliance automation for SOC 2, HIPAA, and ISO to cut risk, reduce audit pain, and control long-term costs.

Staff at ZSoftly

12 min read