DevOps
Guides on CI/CD, GitOps, Kubernetes, infrastructure as code, observability, and running software reliably.
New and updatedAll 158 guides
- What Is CI/CD? CI/CD automates building, testing, and deploying code so changes reach production safely and often. Learn how it works and why AI-generated projects need it.
- What Is GitOps? GitOps makes a Git repository the single source of truth for infrastructure, with automated tools reconciling the real system to match it.
- What Is Platform Engineering? Platform engineering builds an internal developer platform that makes shipping software self-service, instead of every team assembling its own toolchain.
- What Is an Internal Developer Platform (IDP)? An internal developer platform is a self-service layer that packages infrastructure, deployment, and tooling for developers. Learn how it differs from PaaS.
- How to Set Up a CI/CD Pipeline With GitHub Actions A step-by-step GitHub Actions tutorial: build and test a Node.js app on every push and deploy on release. Includes a working workflow file.
- What Is Infrastructure as Code (IaC)? Infrastructure as code manages servers, networks, and databases through versioned config files instead of manual clicks. Learn the benefits and risks.
- Terraform vs Pulumi vs OpenTofu: Which Should You Use? Terraform, Pulumi, and OpenTofu all provision infrastructure as code. Compare their languages, state handling, and licensing to pick the right one.
- What Is Kubernetes and Why Does My App Need It? Kubernetes schedules and runs containerized apps across many machines, handling scaling and self-healing. Learn what it does and when you don't need it.
- How to Deploy Your First App to Kubernetes A step-by-step tutorial to deploy a containerized app to Kubernetes with a Deployment and Service, using minikube and kubectl.
- Docker vs Podman: What's the Difference? Docker and Podman both build and run containers, but Podman is daemonless and rootless by default. Compare their CLI, security model, and trade-offs.
- How to Write a Secure Dockerfile Write a secure Dockerfile: run as non-root, pin base images, use multi-stage builds, and never bake secrets in. A practical, copy-pasteable guide.
- What Is AIOps? AIOps applies machine learning to IT operations to reduce alert noise, detect anomalies, and speed up incident response. Learn what it does and its limits.
- What Is Self-Healing Infrastructure? Self-healing infrastructure automatically detects failures and restores the desired state without human action. Learn the patterns and the risks.
- What Is Observability (and How Is It Different From Monitoring)? Monitoring tells you when something known is wrong; observability lets you ask new questions about unknown failures. Learn the difference with examples.
- How to Set Up Basic Application Monitoring Set up basic app monitoring with Prometheus metrics, a health endpoint, and Grafana dashboards. A tool-agnostic tutorial with a concrete example.
- What Is SRE (Site Reliability Engineering)? Site reliability engineering applies software engineering to operations: SLOs, error budgets, and automation. Learn the core ideas and key practices.
- What Are SLA, SLO, and SLI? SLIs are the measurements, SLOs are your internal targets, and SLAs are contractual promises to customers. Learn the difference with a comparison table.
- What Is FinOps (Cloud Cost Management)? FinOps is a discipline that aligns cloud spending with business value through visibility, accountability, and optimization. Learn the core practices.
- How to Reduce Your Cloud Bill Without Breaking Production Cut cloud costs without downtime: right-size instances, delete orphaned resources, use committed discounts, and set budget alerts. Concrete steps.
- What Is a Blue-Green Deployment? A blue-green deployment runs two identical environments and swaps traffic between them, giving instant rollback. Learn how it works and its costs.
- What Is a Canary Deployment? A canary deployment rolls a new version out to a small slice of users first, watching for errors before expanding. Learn how it limits blast radius.
- Rolling vs Blue-Green vs Canary Deployments: Which Should You Pick? Compare rolling, blue-green, and canary deployment strategies: downtime, rollback speed, cost, and complexity — with a decision table.
- What Is a Service Mesh? A service mesh handles service-to-service traffic — mTLS, retries, observability — via sidecar proxies. Learn what it does and when it's overkill.
- How to Set Up GitOps With Argo CD A step-by-step tutorial to install Argo CD, connect it to a Git repo, and deploy an app declaratively — so Git becomes your source of truth.
- What Is Serverless Computing? Serverless runs your code on demand without managing servers, billing only for execution. Learn the model, cold starts, and when it fits.
- How to Deploy Your First Serverless Function on AWS Lambda A step-by-step tutorial to deploy a Python function on AWS Lambda with an HTTP trigger, test it, and read its logs — no servers to manage.
- What Is Chaos Engineering? Chaos engineering deliberately injects failures into a running system to find weaknesses before they cause outages. Learn the principles and how to start.
- What Is DevSecOps? DevSecOps builds security into every stage of the software pipeline instead of bolting it on at the end. Learn the principles and where to start.
- How to Add Security Scanning to Your CI/CD Pipeline Add secret, dependency, and SAST scanning to a GitHub Actions pipeline. A practical tutorial with working workflow YAML.
- What Is a Feature Flag? Feature flags let you ship dark and enable later. But there are 4 types — release, experiment, ops kill-switches, and permission gates — and mixing them up creates tech debt.
- What Is WebAssembly (WASM) and Why DevOps Teams Are Adopting It WebAssembly is a fast, portable, sandboxed binary format that runs beyond the browser. Learn why it's moving into server-side and edge workloads.
- How to Set Up Automated Database Backups Set up automated, tested database backups with a scheduled job, off-site storage, and a restore drill. Concrete commands for PostgreSQL.
- Multi-Cloud vs Hybrid Cloud: What's the Difference? Multi-cloud spans multiple public cloud providers; hybrid cloud mixes public cloud with on-premises. Learn the difference and the trade-offs.
- Why Did My AI-Generated Terraform Config Almost Delete Production? AI-generated Terraform can look correct while lacking prevent_destroy, state safety, and plan review. Learn the specific mistakes and how to guard them.
- Feature Flags vs Feature Toggles: What's the Difference? Feature flag and feature toggle are often used interchangeably, but flags are for release management and toggles are for runtime behavior. Learn the distinction, the four types, and how to use them without creating tech debt.
- What Is ICP Filing (and Why Do China's Cloud Hosts Require It)? ICP Filing (ICP备案) is a mandatory government registration for any website or app hosted on mainland China servers. What it costs (nothing), how long it takes (~20 business days), and what happens if you skip it (your site gets blocked).
- Alibaba Cloud vs Tencent Cloud: The Asian Hyperscalers Compared The two clouds that dominate Asia are nearly invisible in Western coverage. Alibaba Cloud (#1 in China, ~33-39% share) vs Tencent Cloud (~10-15%). Real 2026 pricing, regions, real-name verification, and the ICP filing catch.
- Contabo Review: The Cheapest Cloud VPS on the Internet — Worth the Risk? Contabo sells 8 vCPU, 24GB RAM for ~€14/month — half of what Hetzner charges. But shared CPU, capped port speeds, and a polarizing support reputation. Full review with real 2026 pricing, risks, and who should use it.
- k3s for Vibecoders: Kubernetes on One Cheap Server, Without the Cloud Bill k3s is real Kubernetes in a single binary that runs on a $6 VPS. Learn what it bundles, how to deploy your AI-built app to it, and when a managed cluster is still the better call.
- Ultra-Budget Cloud Providers Compared: Contabo, UpCloud, Kamatera, IONOS Hetzner and DigitalOcean are too expensive? The next tier down: Contabo (most hardware per dollar), UpCloud (zero-cost egress), Kamatera (build-your-own), IONOS ($2 promos). Real 2026 pricing, billing traps, and who each one is for.
- Budget Cloud and PaaS Compared: Hetzner, DigitalOcean, Railway, Fly.io, Render, Vercel, Netlify Don't pay hyperscaler prices for a side project. Compare every budget VPS and PaaS: Hetzner (cheapest), Railway (easiest), Fly.io (global), Render (reliable), Vercel (Next.js), DigitalOcean (balanced), Netlify (static). Real August 2026 pricing, hidden costs, and when each one wins.
- Kubernetes for AI Builders: Run What Your Assistant Generates Without Wrecking Production Your AI writes Kubernetes manifests it doesn't understand. Learn the objects, the failure modes, the cost traps, and the security gaps — with every linked guide.
- AWS, GCP, and Azure for Vibecoders: The Services You Actually Need Your AI generates Terraform for AWS, Dockerfiles for Cloud Run, and ARM templates for Azure. Learn which 20 services matter, what they actually do, and the common AI-generated mistakes for each cloud. Side-by-side service maps for all three hyperscalers.
- How to Launch Free Infrastructure on AWS, GCP, or Azure Run a web app on AWS, GCP, Azure, Oracle, or Cloudflare for $0: free tiers, lean stacks, and real monthly costs from $0 to $300+.
- Background Jobs and Scheduled Tasks: The Part of Your App Nobody Monitors Cron jobs fail silently, queues lose messages, and retries duplicate work. Learn scheduling, queues, dead letters, backoff, idempotency, and monitoring — with linked guides.
- How to Choose a Cloud Provider for Your AI-Generated App Your AI writes the app. The cloud runs it. Compare every major provider — Big 3, PaaS, and budget VPS — by cost, complexity, and use case. Decision guide for vibecoders deploying AI-generated apps.
- How to Deploy Your First App on AWS for Free Deploy a web app on AWS for $0: Free plan account, budget alert, S3 + CloudFront frontend, Lambda + DynamoDB backend, all inside always-free limits.
- How to Deploy Your First App on Azure for Free Deploy a web app on Azure for $0: the free account's $200 credit, Azure Functions, Static Web Apps, Cosmos DB, and always-free limits that keep it free.
- How to Deploy Your First App on Cloudflare for Free Deploy an app on Cloudflare for $0: Workers (100K req/day), Pages static hosting, D1 database, R2 storage — with zero egress fees and no credit card.
- How to Deploy Your First App on Google Cloud for Free Deploy a web app on Google Cloud for $0: Cloud Run with scale-to-zero, Firestore for data, and the always-free tier limits that keep the bill at zero.
- How to Deploy Your First App on Oracle Cloud for Free Deploy an app on Oracle Cloud for $0: Ampere A1 ARM VM (2 OCPU/12 GB), 200 GB block storage, Autonomous DB, and the idle-reclamation trap.
- Deploying AI-Generated Apps to Production: A Vibecoder's Checklist Your AI wrote the app. Now here's every step between 'it works on my machine' and 'it's running in production.' Deployment, monitoring, secrets, databases, and the checklist your AI didn't include.
- DevOps for AI Builders: What You Need to Know When Your AI Writes the Infra Your AI coding assistant writes CI/CD pipelines, Dockerfiles, and Terraform. Here's every DevOps concept you need to understand so it doesn't burn production down. 60+ linked guides.
- What Is a Reverse Proxy? A reverse proxy is a server that sits in front of your app and forwards requests to it. Learn what it does, why you need one, and how to add one.
- How to Add HTTPS to a Static Site Add HTTPS to any static site with Let's Encrypt and certbot, or skip it entirely by using a managed host. Steps for both paths.
- What Is a CDN and Do You Need One? A CDN caches your site on servers near your visitors, making it load faster worldwide. When it matters, when it's overkill, and what it costs.
- How to Set Up Cloudflare for a Small Project Point a domain at Cloudflare in 15 minutes: change nameservers, proxy your DNS records, and get free CDN, TLS, and DDoS protection.
- What Is a Cron Job (and Why Do They Fail Silently)? A cron job runs a command on a schedule. They are everywhere and fail silently — learn how they work and why you can't trust them to tell you when they break.
- Why Do Cron Jobs Fail Silently (and How to Fix It)? Your cron job ran, output nothing, and did nothing. Here's why every cron job fails silently by default — and exactly how to fix it with logging, exit codes, managed schedulers, and external monitoring.
- How to Monitor Your Cron Jobs Stop losing jobs to silent failures: add a heartbeat check to every cron job so you get alerted the moment it misses a run.
- What Is a Dead Letter Queue? A dead letter queue (DLQ) collects messages that a queue repeatedly fails to process. Learn why you need one and what to do with its contents.
- How to Build a Background Job Queue Move slow work out of request handlers: a background job queue with a worker, retries, and a dead letter path. Redis + Python example.
- What Is Exponential Backoff? Exponential backoff is a retry strategy that waits progressively longer between attempts. Learn why it beats retrying instantly and how to use it.
- How to Add Retry Logic to API Calls Add retries to flaky API calls the right way: which errors to retry, exponential backoff with jitter, and how to test that it works.
- What Is a Health Check? A health check is an endpoint that reports whether your app is alive and ready. Learn the difference between liveness and readiness and why both matter.
- How to Add Health Checks to Your App Add liveness and readiness endpoints to a Python, Node, or Go app and wire them to your platform so failures trigger restarts and routing.
- What Is Graceful Shutdown? Graceful shutdown lets an app finish in-flight work before exiting instead of dropping requests mid-flight. Learn how it works and why deploys need it.
- Why Does My App Ignore SIGTERM (and How Do I Fix It)? If your containerized app hangs on shutdown, it's ignoring SIGTERM. Learn to catch the signal, drain requests, and exit within the grace period.
- What Is a Connection Pool? A connection pool reuses database connections instead of opening one per request. Learn why your app hits 'too many connections' and how pooling fixes it.
- What Is Uptime Monitoring? Uptime monitoring checks from outside whether your site is reachable and alerts you when it isn't. Learn how it works and what it can't tell you.
- How to Get Alerted When Your Site Goes Down Set up down-alerts for your site in 10 minutes: an uptime check, the right alert channel, and a test that the alert actually fires.
- Dead Letter Queue vs Retry: When to Use Each (and When to Use Both) Your message failed. Should you retry it or send it to a dead letter queue? Here's the decision framework, the patterns, and why you usually need both.
- What Is a Webhook? A webhook is an HTTP callback your app receives when something happens elsewhere. Learn how they work, why they fail, and how to handle them safely.
- Why Is Your Docker Image So Large (and How Do You Shrink It)? A 1.5 GB Docker image is usually build cruft, not your app. Learn the four causes and the fixes that routinely cut images by 80%.
- What Is the Circuit Breaker Pattern? A circuit breaker stops your app from hammering a failing dependency. Learn the three states, why backends fall over, and when to add one.
- Why Do My Containers Keep Getting Killed (OOMKilled)? OOMKilled means your container hit its memory limit and the kernel killed it. Learn why it happens, how to find the leak, and how to set limits safely.
- What Are Serverless Cold Starts (and Do They Matter for You)? A cold start is the delay when a serverless function spins up for the first time. Learn why they happen, how long they take, and when they matter.
- What Is Log Rotation (and Why Do Your Logs Keep Disappearing)? Log rotation archives and deletes old logs so disk never fills up. Learn how it works, why your logs vanish, and how log management services fit in.
- Don't Let Your Domain Expire: Monitoring Domain and Certificate Renewals Expired domains and certificates take sites down silently. Set up expiry alerts so you renew before the outage, not after.
- Why Should Servers Always Use UTC? Servers should store and log time in UTC so logs, timestamps, and schedules agree across machines and time zones. Learn why and how to switch.
- What Is Zero-Downtime Deployment? Zero-downtime deployment ships new versions without interrupting users. Learn the strategies — rolling, blue-green, canary — and which fits a small app.
- How to Roll Back a Bad Deploy A rollback plan turns a bad deploy from an outage into a 60-second fix. Learn the two kinds of rollback and how to rehearse them before you need them.
- How to Debug a Crash-Looping Container A container that restarts every few seconds is crash-looping. Learn the systematic way to find why: check status, logs, entrypoint, and startup errors.
- What Is a Container Registry (and How Do Rate Limits Work)? A container registry stores and serves your Docker images. Learn how registries work, why pulls fail with rate limits, and how to avoid them.
- How to Fix 'Too Many Connections' in Postgres 'Too many connections' means your app exhausted Postgres's connection limit. Learn the real causes, the quick fixes, and the permanent ones.
- Kubernetes vs k3s: Which Should You Run for an AI-Built App? Kubernetes and k3s run the same manifests. The difference is packaging, operations, and cost. A decision guide for small apps and solo builders.
- What Is k3s (and When Should You Use It)? k3s is certified Kubernetes in a single binary: same API, bundled ingress and storage, and small enough to run on one cheap server. What it is and when to use it.
- Kubernetes vs Docker Compose: When Should You Graduate? Docker Compose runs containers on one machine; Kubernetes runs them across many. A practical comparison of when each is enough, and the concrete signs you have outgrown Compose.
- Kubernetes YAML Explained: Deployments, Services, and What Your AI Writes Kubernetes manifests are four fields deep and highly repetitive. Learn the parts of a Deployment and Service that matter, and how to read the YAML your AI generates.
- What Is a Kubernetes Ingress (and Why Is My App Unreachable)? An Ingress routes external HTTP traffic to Services by hostname and path, and usually terminates TLS. What it is, how a request reaches your app, and why it 404s.
- Liveness vs Readiness vs Startup Probes in Kubernetes Probes tell Kubernetes whether a container is alive, ready for traffic, or still starting. Get them wrong and you get 502s, restart loops, or both.
- Kubernetes Requests vs Limits: Why Your Pod Gets OOMKilled Resource requests tell the scheduler what to reserve; limits tell the runtime when to throttle or kill. Setting them wrong causes OOMKills, throttling, and eviction.
- Why Is My Kubernetes Bill So High (and How Do I Cut It)? Most Kubernetes cost comes from control planes, idle nodes, and per-service load balancers rather than compute. Learn the line items and how to cut them.
- How to Deploy an App to a Cheap VPS With k3s Install k3s on a single VPS, deploy a containerized app with a Deployment and Service, expose it with an Ingress, and add automatic HTTPS with cert-manager.
- What Is Helm (and Should You Use It for Your App)? Helm packages Kubernetes manifests into reusable charts with configurable values. What charts, values, and releases are, and when the added layer is worth it.
- Kubernetes Deployment vs StatefulSet: Which Does Your Service Need? Deployments treat pods as interchangeable; StatefulSets give each pod a stable identity and its own storage. Choosing wrong for a database loses data.
- Kubernetes Autoscaling Explained: HPA vs VPA vs Cluster Autoscaler Kubernetes has three autoscalers that answer three different questions. Learn which one scales replicas, which resizes pods, which adds nodes, and when autoscaling is the wrong fix.
- How to Set Up Horizontal Pod Autoscaling (HPA) in Kubernetes Install the metrics server, set resource requests, create an HPA, and load test it until it actually scales — plus the tuning that stops it flapping and the checks that catch a silent failure.
- How to Upgrade a Kubernetes Cluster Without Downtime Upgrade a control plane and its nodes in the right order, one minor version at a time, with PodDisruptionBudgets and a tested rollback. Covers managed clusters and k3s.
- How to Run PostgreSQL on k3s (With Backups That Actually Restore) Run Postgres on a single-node k3s cluster with a StatefulSet, a PersistentVolumeClaim, and a scheduled off-node backup you have restored at least once.
- How to Set Up GitOps on a Single-Node k3s Cluster Point Argo CD at a Git repository and let it drive a single-node k3s cluster: automatic sync, drift correction, and rollbacks that are git reverts instead of kubectl commands.
- Why Does My Build Pass Locally but Fail in CI? The nine differences between your laptop and a CI runner that break builds: lockfiles, runtimes, case sensitivity, environment, caching, and hidden state.
- Why Is My Website Suddenly Slow? A diagnostic order for sudden slowness: is it the network, the application, the database, or a resource that ran out — and how to tell in minutes.
- Cloudflare 525 and 526: How to Fix an SSL Handshake Failure 525 means Cloudflare could not complete a TLS handshake with your origin; 526 means the origin's certificate was rejected. How to tell them apart and fix each.
- Why Does My Container Keep Restarting Every 30 Seconds? A restart loop has three usual causes: the process exits, a health check fails, or the runtime kills it. Read the exit code to tell them apart.
- Why Does My Database Connection Time Out? Connection timeouts come from four places: the pool is exhausted, the database's connection limit is reached, the network blocks the path, or the server is too busy to accept.
- What Is a 504 Gateway Timeout (and How Do You Fix It)? A 504 means a proxy waited for an upstream server that did not answer in time. The fix is usually to make the slow operation faster, not to raise the timeout.
- ICP Filing vs ICP License: What's the Difference? An ICP filing registers a website with China's telecom authority; an ICP license is a commercial permit for revenue-generating services. Different paperwork, different eligibility.
- Do You Need an ICP Filing for an App, API, or Mini Program? The filing follows the server, not the interface. An API, a mobile app backend, and a mini program all trigger the same requirement when they run on mainland infrastructure.
- Does a Foreign Company Need a Chinese Entity for an ICP Filing? Filing requires a mainland-registered legal person or a Chinese citizen. Hong Kong companies do not qualify. This is the constraint that decides whether mainland hosting is available to you.
- How to Renew an ICP Filing (and What Happens If It Lapses) ICP filings do not renew like a certificate. They stay valid while the domain, entity, and hosting provider stay aligned, and are re-verified periodically. Here is how to keep one alive.
- Does Hosting Behind a CDN in China Require an ICP Filing? A mainland CDN edge node serves content from inside China, so it needs a filing for the accelerated domain. An overseas CDN with edges near the mainland does not.
- Hosting in Hong Kong vs Mainland China: What Actually Changes Mainland hosting buys you low latency and a compliance regime; Hong Kong gives you global connectivity and no filing. The trade-off is sharper than the latency numbers suggest.
- How to Serve Users in China Without an ICP Filing You can serve mainland users from Hong Kong, Singapore, or a global edge network with no filing. Here is how to set it up and what to measure.
- Which APAC Cloud Region Should You Deploy To? Hong Kong, Singapore, Tokyo, Seoul, Mumbai, Sydney: how to choose an APAC region by latency, connectivity, compliance, and cost rather than by map distance.
- What Is a 502 Bad Gateway (and How Do You Fix It)? A 502 means your proxy could not get a valid response from the app behind it. Learn the real causes, how to diagnose them, and how to fix each one.
- What Is a Message Queue (and When Do You Actually Need One)? A message queue decouples work from the request that created it. Learn what one is, when you need it, and how RabbitMQ, SQS, and Kafka differ.
- Why Is My Kubernetes Pod Stuck Pending? A Pending pod has not been scheduled onto a node. Learn the causes — resources, taints, selectors, volumes — and how to diagnose each with describe.
- ImagePullBackOff: What It Means and How to Fix It ImagePullBackOff means Kubernetes cannot download your container image. Learn the causes — bad tag, auth, rate limit, network — and how to diagnose each.
- What Is DNS? DNS is the internet's phone book, turning names into IP addresses. Learn how a lookup works, the record types you need, and why changes take time.
- How to Point a Domain at Your Server Point a domain at a VPS, PaaS, or CDN with A, CNAME, and nameserver records. Exact steps, TTL strategy, and how to verify it worked.
- Why Is My Cloud Bill So High (and How Do I Find the Leak)? Unexpected cloud bills are almost always one of a handful of causes. Learn which, how to find yours in the billing console, and how to stop it recurring.
- Connection Pool Exhausted: What It Is and How to Fix It Pool exhaustion means connections are held rather than missing. Learn why raising the limit makes it worse, how to find the leak, and the four real causes.
- What Is Structured Logging? Structured logging emits machine-readable key-value events instead of free text. Learn why it matters, how to adopt it, and what AI logs get wrong.
- What Are the Stages of a CI/CD Pipeline? A CI/CD pipeline runs source, build, test, package, deploy, and verify. Here is what each stage outputs and which ones a small project can skip.
- Continuous Integration vs Continuous Delivery: What's the Difference? CI proves every commit integrates and passes tests. Continuous delivery keeps it releasable. Different practices, different failure modes.
- Continuous Delivery vs Continuous Deployment: Which Do You Need? Delivery leaves the production push to a person; deployment ships every passing build. The difference is who owns release risk.
- Do You Need CI/CD for a Solo Project? A solo developer gets less from coordination and more from memory. The smallest pipeline worth maintaining, and what to skip.
- Build vs Deploy vs Release: What's the Difference? Building produces an artifact, deploying runs it, releasing exposes it. Separating the three is what makes rollback and canaries possible.
- What Is a Build Artifact (and Why Does Yours Keep Breaking)? A build artifact is the immutable output of a build, identified by a digest. Passing it between stages stops environments from diverging.
- What Is a CI Runner (and When Do You Need Your Own)? The runner executes pipeline jobs. Hosted runners are ephemeral and easy; self-hosted ones are cheaper at scale and a credential risk if done wrong.
- How to Speed Up CI Builds (Without Skipping Tests) Slow pipelines get bypassed. Cut time with dependency caching, parallel jobs, test splitting, and smaller images - not by disabling checks.
- What Is Trunk-Based Development? Trunk-based development means short-lived branches and daily merges into one shared branch. It reduces integration risk and suits AI-agent teams.
- What Are the DORA Metrics (and How Do You Measure Them)? The four DORA metrics measure delivery speed and stability: deployment frequency, lead time, change failure rate, and time to restore.
- 502 vs 503 vs 504: What's the Difference? 502 is a bad upstream response, 503 means the service cannot serve now, and 504 is a proxy timeout. Each points somewhere different.
- What Is an SSL/TLS Handshake (and Why Does It Fail)? TLS agrees on a version and cipher, verifies the certificate, and derives keys. Most failures are a name, a chain, or a protocol mismatch.
- DNS Propagation: Why Your Domain Still Points Elsewhere DNS changes apply immediately on the authoritative server. What looks like propagation is resolvers serving cached answers until the TTL expires.
- How to Get an ICP License in China (Step by Step) An ICP license is applied for through a licensed hosting provider in your entity's province. The sequence, documents, and where applications stall.
- China ICP License Requirements: What You Need Before You Apply Requirements split into entity, domain, hosting, content, and identity checks. One inconsistent item is the usual reason an application is returned.
- Types of ICP License: Filing, Commercial, and EDI Compared Filing is the non-commercial record; the commercial ICP license permits charging; EDI covers transactions. Choosing the wrong track is costly.
- What Does ICP Filing Cost? The filing itself has no official fee. The real cost is mainland hosting, the entity, translations, and agent fees for a commercial license.
- How Long Does ICP Filing Take? Plan about a month from a complete submission. Entity setup, domain verification, and correction loops take longer than the provincial review.
- ICP Filing Documents: The Checklist Entity, domain, hosting, identity, and content documents must agree. Here is the checklist reviewers compare, and what causes rejection.
- What Is PSB Filing (公安备案)? PSB filing is the public security registration that follows ICP filing, completed on the national platform within a window after go-live.
- How to Check an ICP Filing Number ICP numbers follow a fixed format and are verified on the MIIT portal. How to read one, check it, and spot a copied or expired record.
- What Happens If You Operate in China Without ICP Filing? Mainland hosting without a filing is blocked at the access layer, and a business faces rectification orders and penalties. The domain can also suffer.
- Does Cloudflare Work in China? Cloudflare's global network has no mainland PoPs, so traffic is served from nearby regions. Its China Network is an enterprise product tied to ICP filing.
- How to Run a Coding Agent in CI Run it on pull requests with a read-only token, no secrets, a time budget, and a diff it can only propose — never push.
- How to Deploy an AI Agent to Production Treat the agent as a service: a declared scope, an async queue, idempotent steps, a kill switch, budgets, and an audit trail.
- How to Give an Agent Staging Access Without Production Separate account, separate credentials, separate network, and synthetic data. Staging access should be one hop away from production, not one flag.
- How to Monitor an AI Agent in Production Monitor outcomes and actions, not just errors: completion rate, cost per run, tool failures, latency, and interventions per hundred runs.
- How to Pause, Resume, and Cancel an Agent Run Pause needs a checkpoint, resume needs idempotent steps, and cancel needs a defined boundary. Design all three before the run starts.
- What Is an Agent Runtime? An agent runtime is the service that runs the loop: it schedules steps, enforces tool policy, stores state, and records what happened.
- What Is Agent Isolation (and Why Containers Aren't Enough)? Isolation bounds what a run can reach: files, network, credentials, and the host. A container without those controls is mostly packaging.
- How to Set a Spend Limit for a Coding Agent Limit at three levels: per run, per day, and per account. A limit that is checked after the fact is a report, not a control.
- What Is Rate Limiting for AI Coding Tools? AI coding tools rate-limit on requests, tokens, and concurrency, usually in rolling windows. Hitting a limit is a capacity signal, not a bug.
- How to Rotate Credentials an Agent Can Reach Inventory what the agent can read, issue short-lived credentials, rotate on a schedule and after any suspicion, and verify the old one is dead.
- How to Write a Runbook for an AI Agent A runbook for an agent covers stop, revoke, drain, resume, and verify — written for someone who did not build it and is reading at 2am.