Writing

A vendor-neutral, five-level model for judging how ready your network is to serve AI inference at scale, scored across six dimensions.

Design BGP and anycast routing for multi-region AI inference, tying route health to inference SLOs, regional GPU capacity, and predictable failover.

Compare sidecar meshes, ambient meshes, and eBPF-native data planes across performance, identity, L7 policy, and Kubernetes operational complexity.

An enterprise Zero Trust reference architecture connecting workload identity, policy decisions, access enforcement, and network microsegmentation.

Use eBPF for kernel-level observability and runtime security, with Cilium, Tetragon, bpftrace examples, and the trade-offs against sidecars and host agents.

Plan an enterprise IPv6 migration with a dual-stack core, IPv6-only GPU and Kubernetes networks, NAT64/DNS64, and a phased operational rollout.

Create a certificate authority with a 4096-bit RSA key, SHA-512 signatures, PKCS #11 smart card key storage, and a subordinate CA.

Run PostgreSQL in Docker on macOS, with container setup notes and the original follow-up collection of PostgreSQL commands and examples.

An Xorg monitor configuration that fixed 2560 by 1440 display resolution on my ElementaryOS installation.

A Go helper for sending HTML and plain-text email over SMTP, with a complete function and usage example.

Build mod_wsgi for Python 3.6 and run Django 2.2.6 behind Apache 2.4.6 on CentOS 7, with configuration notes from my setup.

Pass environment variables to Nagios through systemd using Environment or EnvironmentFile instead of relying on the old sysconfig setup.

Wishing everybody a wonderful time on this special day in American history. Happy Fourth of July! God bless America!

Troubleshoot an IMAP STARTTLS failure in Open-Xchange App Suite 7.10.1 by setting explicit SSL protocol and cipher configuration values.

A short field note on exporting GnuPG secret-key material with Paperkey for a printable backup.

A macOS field note on resetting a YubiKey OpenPGP application to factory defaults with gpg-connect-agent.

My setup notes for using a YubiKey as an OpenPGP smart card to store GPG signing and encryption keys.

Wishing Happy Halloween to everyone!

Install and activate the MK Livestatus API for Icinga2, configure its socket, and check that the service is available.

Import a server IP address from a local file into Icinga2 Director when the monitoring system cannot reach the DNS server.

An archived 2017 listing of programming and systems books from my bookshelf, including Python and Ansible titles.

A July 2016 update on adding SSL to the website and publishing RPM packages in my personal repository.

The June 2016 introduction to my English-language blog, following my earlier Russian-language website.