[ Blog ]

Notes from the terminal.

Deep dives on DevOps, Kubernetes, cloud infra, and the things I automate so nobody has to wake up at 3 AM.

July 26, 2026·10 min read

NAT, Demystified: From Your Home Router to Docker and Kubernetes

One idea — rewriting addresses in flight — quietly powers your home Wi-Fi, every Docker container, and the pod network in Kubernetes. This is NAT from first principles up to kube-proxy.

#networking#nat#docker#kubernetes#devops

July 25, 2026·11 min read

How CSI Drivers Actually Work in Kubernetes

A ground-up deep dive into the Container Storage Interface — the gRPC contract, the controller/node split, the full provision-attach-mount lifecycle, and how it all maps onto Azure Disk in a real cluster.

#kubernetes#storage#devops#azure

July 19, 2026·18 min read

CRI-O: The Container Runtime Built for Kubernetes — A Complete History and Technical Deep Dive

From the CRI specification to dockershim removal to production default — the complete story of CRI-O, its architecture, its relationship to OCI and runc, how it differs from containerd, and why it matters.

#cri-o#kubernetes#cri#oci#containers#devops#history

July 13, 2026·16 min read

Security Contexts in Kubernetes: From Process Isolation to Defense in Depth

An exhaustive examination of security contexts — every field explained, how they interact with Linux kernel security mechanisms, their place in the broader Kubernetes security stack, and patterns for production hardening.

#kubernetes#security#security-context#devops#linux#hardening

June 3, 2026·14 min read

Liveness, Readiness, and Startup Probes: The Complete Guide

How Kubernetes knows if a container is actually working — the history of probes, how each handler type works under the hood, the timing mechanics every operator should know, and production patterns for reliability.

#kubernetes#probes#liveness#readiness#devops#observability

May 11, 2026·11 min read

Why Istio? kube-proxy Handles Routing — Or Does It?

A detailed examination of what kube-proxy actually does versus what a service mesh adds, the architectural differences, and a decision framework for when each makes sense.

#kubernetes#istio#kube-proxy#service-mesh#networking#devops

May 9, 2026·19 min read

Networking in Kubernetes: From the Four Axioms to Production Traffic

A complete walk through the Kubernetes networking model — the design principles from 2014, how CNI plugins implement them, the mechanics of kube-proxy, DNS, policy, and the evolution to Gateway API.

#kubernetes#networking#devops#cni#kube-proxy

Sauraj/>
DevOps Engineer

ksauraj1@gmail.com [ Download Resume ]

GitHub LinkedIn Telegram Twitter Instagram GitLab YouTube Website