Learn.
Cloud concepts, explained.
Storage, Kubernetes, network and operations concepts in plain terms: what each one is, how it works and how enum runs it.
Storage
What is S3 versioning?
S3 versioning keeps every version of an object in a bucket, so overwrites and deletes can be undone by restoring an earlier version.
Read the articleWhat is S3 Object Lock?
S3 Object Lock stores object versions as write-once-read-many (WORM), so a locked version cannot be overwritten or deleted until its retention period ends or its legal hold is removed.
Read the articleWhat is erasure coding?
Erasure coding protects stored data by splitting it into data and parity fragments on different servers, so it can be rebuilt after some fragments are lost.
Read the articleWhat is S3-compatible storage?
S3-compatible storage is object storage that accepts the S3 API, so existing S3 tools, SDKs and backup software work after you change the endpoint and keys.
Read the articleKubernetes
What is a CNI plugin?
A CNI plugin connects Kubernetes pods to the network: it creates each pod's interface, assigns its IP address and often enforces network policies.
Read the articleWhat is a Kubernetes cluster upgrade?
A Kubernetes cluster upgrade moves the control plane and then the worker nodes to a newer Kubernetes version, one minor release at a time.
Read the articleWhat is a node pool?
A node pool is a group of Kubernetes worker nodes with the same machine type and settings, managed as one unit for sizing, upgrades and workload placement.
Read the articleWhat is the Kubernetes control plane?
The Kubernetes control plane manages a cluster's state through the API server, etcd, the scheduler and the controller managers. Worker nodes run pods; the control plane decides what runs where.
Read the articleWhat is managed Kubernetes?
Managed Kubernetes is Kubernetes where a provider runs the control plane, etcd and upgrades, while you deploy and run your own workloads on the worker nodes.
Read the articleNetwork
What is a CAA record?
A CAA record is a DNS record that names which certificate authorities may issue TLS certificates for a domain, so other authorities refuse to issue.
Read the articleWhat is DNSSEC?
DNSSEC adds digital signatures to DNS records, so resolvers can check that an answer came from the zone owner and was not changed on the way.
Read the articleWhat is a DNS zone file?
A DNS zone file is a plain text file that lists every record of a DNS zone, in a standard format nameservers load and providers import and export.
Read the articleOperations
What is vendor lock-in?
Vendor lock-in is the cost and effort that keeps you on one cloud provider, built up through proprietary APIs, provider-specific identity and the price of moving data out.
Read the articleWhat are egress fees?
Egress fees are per-gigabyte charges for data leaving a cloud provider's network, usually to the internet, while data coming in is typically free.
Read the articleWhat is a cloud exit?
A cloud exit is the planned move of workloads and data off a cloud provider, onto another platform or your own servers, without losing data or service.
Read the article