Engineering
What is sovereign cloud?
Sovereign cloud explained as a category, not a feature. Data residency, operational sovereignty, and corporate sovereignty, and why procurement now asks.
Engineering
How We Built ZCP: Proxmox, Ceph, and CloudStack
A look inside ZCP's infrastructure stack. Why we chose open-source components, how they fit together, and what it means for reliability and performance.
Engineering
Two Lessons From Running OPNsense in Production
We ran OPNsense as a VM on network-defined storage and watched a single switch fault cascade into a cluster-wide outage. Two lessons we will not relearn: put your firewall on bare metal, and if you must virtualize it, keep the disk local.
Engineering
Full AWS Observability With Open Source Tools
CloudWatch gives you metrics. It does not give you actionable dashboards, historical trends, or alerts. We built a four-container open source stack that turns raw AWS data into full observability — no agents on app servers, no licensing costs, auto-discovery via AWS tags.
Engineering
Why We Moved From SigNoz to the Grafana Stack
We picked SigNoz for its OpenTelemetry-native approach. A few months in, we moved to Prometheus, Loki, Alertmanager, and Grafana, with Grafana Alloy as the single collection agent. Here is the honest breakdown.
Engineering
Running Your VPN Gateway Inside the Thing It Protects Is a Bad Idea
We ran our Tailscale subnet router as an LXC container on the same Proxmox host it was providing remote access to. It worked. Until Proxmox needed attention. Here is how we fixed it.