https://www.sre.wang/en/posts/Recent content in Posts on SRE Engineering PracticeHugo -- gohugo.ioenFri, 17 Jul 2026 09:20:09 +0800https://www.sre.wang/en/posts/monitoring-database-metrics/Fri, 17 Jul 2026 09:20:09 +0800https://www.sre.wang/en/posts/monitoring-database-metrics/MySQL and PostgreSQL monitoring comparison, exporter deployment, core metrics interpretation, PromQL alert rules, and Grafana dashboardshttps://www.sre.wang/en/posts/linux-kernel-crash-kdump/Fri, 17 Jul 2026 09:20:09 +0800https://www.sre.wang/en/posts/linux-kernel-crash-kdump/From kdump internals to crash tool analysis — a hands-on guide to configuring a production-grade kernel crash capture systemhttps://www.sre.wang/en/posts/k8s-edge-computing-k3s/Thu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/en/posts/k8s-edge-computing-k3s/From K3s architecture principles to production-grade edge cluster deployment — covering multi-node setup, air-gapped installation, networking, edge autonomy, monitoring, and troubleshootinghttps://www.sre.wang/en/posts/sre-incident-preparedness-drill/Thu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/en/posts/sre-incident-preparedness-drill/Building a systematic incident preparedness framework through tabletop exercises, red-blue drills, and chaos injection — transforming passive firefighting into proactive defensehttps://www.sre.wang/en/posts/monitoring-apm-tool-selection/Wed, 15 Jul 2026 02:09:45 +0800https://www.sre.wang/en/posts/monitoring-apm-tool-selection/Comparing mainstream open-source and commercial APM tools, covering selection criteria, deployment costs, architecture, and practical recommendationshttps://www.sre.wang/en/posts/linux-auditd-security-auditing/Wed, 15 Jul 2026 02:09:45 +0800https://www.sre.wang/en/posts/linux-auditd-security-auditing/From installation and deployment to rule writing, log analysis, and performance tuning—covering the complete production practice of auditdhttps://www.sre.wang/en/posts/jenkins-freestyle-vs-pipeline/Tue, 14 Jul 2026 02:25:36 +0800https://www.sre.wang/en/posts/jenkins-freestyle-vs-pipeline/From project creation to deployment, a plain-English breakdown of Jenkins Freestyle and Pipeline project configuration, key differences, and selection strategyhttps://www.sre.wang/en/posts/auto-inspection-platform-go/Tue, 14 Jul 2026 00:39:00 +0800https://www.sre.wang/en/posts/auto-inspection-platform-go/Build a production-grade automated inspection platform in Go, covering plugin architecture, concurrent execution, alert integration, and report generationhttps://www.sre.wang/en/posts/linux-network-packet-capture-analysis/Tue, 14 Jul 2026 00:39:00 +0800https://www.sre.wang/en/posts/linux-network-packet-capture-analysis/Troubleshoot production network issues with the tcpdump and Wireshark combo, covering BPF filter syntax, capture strategies, protocol dissection, and real-world case studieshttps://www.sre.wang/en/posts/sre-team-building-capability-model/Mon, 13 Jul 2026 03:22:07 +0800https://www.sre.wang/en/posts/sre-team-building-capability-model/From scratch to a battle-ready SRE team: role design, capability model, talent pipeline, performance metrics, and practical pitfallshttps://www.sre.wang/en/posts/linux-cpu-isolation-numa-tuning/Mon, 13 Jul 2026 03:22:07 +0800https://www.sre.wang/en/posts/linux-cpu-isolation-numa-tuning/From isolcpus to cpuset, NUMA affinity to IRQ pinning — a complete production-grade CPU isolation and tuning workflowhttps://www.sre.wang/en/posts/istio-service-mesh-getting-started/Sun, 12 Jul 2026 01:18:19 +0800https://www.sre.wang/en/posts/istio-service-mesh-getting-started/What problem does Service Mesh actually solve? How to choose between Istio's Sidecar and Ambient modes? This article walks you through architecture principles, installation, traffic management, and security policies from zero to production.https://www.sre.wang/en/posts/monitoring-data-governance/Sun, 12 Jul 2026 01:18:19 +0800https://www.sre.wang/en/posts/monitoring-data-governance/When metrics balloon from hundreds to millions, data governance becomes unavoidable. This article breaks down the engineering practices of metric naming conventions, high-cardinality control, tiered collection strategies, data quality measurement, and deprecated metric retirement.https://www.sre.wang/en/posts/kubernetes-security-hardening/Sat, 04 Jul 2026 10:59:00 +0800https://www.sre.wang/en/posts/kubernetes-security-hardening/Practical guide on kubernetes security hardening for SRE operationshttps://www.sre.wang/en/posts/linux-namespace-cgroups-basics/Sun, 28 Jun 2026 16:34:00 +0800https://www.sre.wang/en/posts/linux-namespace-cgroups-basics/Practical guide on linux namespaces and cgroups for SRE operationshttps://www.sre.wang/en/posts/llm-assisted-troubleshooting/Sat, 13 Jun 2026 09:46:00 +0800https://www.sre.wang/en/posts/llm-assisted-troubleshooting/Practical guide on llm-assisted troubleshooting for SRE operationshttps://www.sre.wang/en/posts/aiops-anomaly-detection/Fri, 05 Jun 2026 13:51:00 +0800https://www.sre.wang/en/posts/aiops-anomaly-detection/Practical guide on aiops anomaly detection for SRE operationshttps://www.sre.wang/en/posts/vulnerability-scanning-cicd/Fri, 15 May 2026 14:38:00 +0800https://www.sre.wang/en/posts/vulnerability-scanning-cicd/Practical guide on vulnerability scanning in ci/cd for SRE operationshttps://www.sre.wang/en/posts/code-review-automation-tools/Fri, 03 Apr 2026 14:54:00 +0800https://www.sre.wang/en/posts/code-review-automation-tools/Practical guide on code review automation for SRE operationshttps://www.sre.wang/en/posts/git-workflow-team-collaboration/Sat, 17 Jan 2026 15:06:00 +0800https://www.sre.wang/en/posts/git-workflow-team-collaboration/Practical guide on git workflow and team collaboration for SRE operationshttps://www.sre.wang/en/posts/data-driven-sre-decisions/Fri, 02 Jan 2026 10:05:00 +0800https://www.sre.wang/en/posts/data-driven-sre-decisions/Practical guide on data-driven sre decisions for SRE operationshttps://www.sre.wang/en/posts/sre-finops-cost-management/Sat, 27 Dec 2025 21:21:00 +0800https://www.sre.wang/en/posts/sre-finops-cost-management/Practical guide on sre perspective on finops for SRE operationshttps://www.sre.wang/en/posts/platform-engineering-intro/Mon, 22 Dec 2025 11:13:00 +0800https://www.sre.wang/en/posts/platform-engineering-intro/Practical guide on platform engineering introduction for SRE operationshttps://www.sre.wang/en/posts/monitoring-as-code/Fri, 19 Dec 2025 14:17:00 +0800https://www.sre.wang/en/posts/monitoring-as-code/Practical guide on monitoring as code for SRE operationshttps://www.sre.wang/en/posts/sre-documentation-practice/Sun, 09 Nov 2025 20:27:00 +0800https://www.sre.wang/en/posts/sre-documentation-practice/Practical guide on sre documentation practice for SRE operationshttps://www.sre.wang/en/posts/cloud-native-security-practices/Sun, 26 Oct 2025 21:10:00 +0800https://www.sre.wang/en/posts/cloud-native-security-practices/Practical guide on cloud native security for SRE operationshttps://www.sre.wang/en/posts/aws-cloud-operation-basics/Tue, 21 Oct 2025 09:48:00 +0800https://www.sre.wang/en/posts/aws-cloud-operation-basics/Practical guide on aws operations basics for SRE operationshttps://www.sre.wang/en/posts/postgresql-ha-setup/Thu, 16 Oct 2025 21:55:00 +0800https://www.sre.wang/en/posts/postgresql-ha-setup/Practical guide on postgresql high availability for SRE operationshttps://www.sre.wang/en/posts/mysql-performance-optimization/Mon, 13 Oct 2025 18:17:00 +0800https://www.sre.wang/en/posts/mysql-performance-optimization/Practical guide on mysql performance optimization for SRE operationshttps://www.sre.wang/en/posts/redis-operation-maintenance/Mon, 15 Sep 2025 12:28:00 +0800https://www.sre.wang/en/posts/redis-operation-maintenance/Practical guide on redis operations for SRE operationshttps://www.sre.wang/en/posts/tls-ssl-certificate-management/Sun, 14 Sep 2025 17:26:00 +0800https://www.sre.wang/en/posts/tls-ssl-certificate-management/Practical guide on tls/ssl certificate management for SRE operationshttps://www.sre.wang/en/posts/nginx-performance-tuning/Fri, 12 Sep 2025 19:44:00 +0800https://www.sre.wang/en/posts/nginx-performance-tuning/Practical guide on nginx performance tuning for SRE operationshttps://www.sre.wang/en/posts/linux-strace-debugging/Thu, 11 Sep 2025 12:45:00 +0800https://www.sre.wang/en/posts/linux-strace-debugging/Practical guide on linux system call tracing for SRE operationshttps://www.sre.wang/en/posts/sre-multi-region-architecture/Fri, 29 Aug 2025 00:00:00 +0000https://www.sre.wang/en/posts/sre-multi-region-architecture/A systematic guide to multi-active architecture patterns, data consistency challenges, traffic switching strategies, disaster recovery RTO/RPO design, cross-region monitoring, and failover drillshttps://www.sre.wang/en/posts/sre-dev-collaboration-model/Tue, 24 Jun 2025 00:00:00 +0000https://www.sre.wang/en/posts/sre-dev-collaboration-model/Exploring collaboration models between SRE and development teams, root causes of conflicts, and engineering solutions including embedded models, platform engineering, and shared error budget governancehttps://www.sre.wang/en/posts/linux-ebpf-programming-guide/Tue, 01 Apr 2025 00:00:00 +0000https://www.sre.wang/en/posts/linux-ebpf-programming-guide/A systematic guide to eBPF programming, BCC vs libbpf+CO-RE comparison, BTF mechanism, program types, and end-to-end development workflowhttps://www.sre.wang/en/posts/sre-change-management-canary-release/Tue, 11 Feb 2025 00:00:00 +0000https://www.sre.wang/en/posts/sre-change-management-canary-release/An in-depth exploration of change management from an SRE perspective, covering canary release, blue-green deployment, fast rollback mechanisms, and Argo Rollouts practical configurationhttps://www.sre.wang/en/posts/blackbox-exporter-uptime/Tue, 04 Feb 2025 00:00:00 +0000https://www.sre.wang/en/posts/blackbox-exporter-uptime/A guide to Blackbox Exporter configuration, HTTP/TCP/ICMP/DNS probing, SSL certificate expiry monitoring, multi-region probing, Prometheus integration, and availability SLO measurementhttps://www.sre.wang/en/posts/helm-chart-writing-guide/Thu, 16 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/helm-chart-writing-guide/From Helm Chart directory structure to template syntax, values layer override, named templates and hooks, through Harbor private repository deployment and CI/CD integration—a hands-on guide to writing a complete web application Helm Charthttps://www.sre.wang/en/posts/linux-iptables-nftables/Fri, 10 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/linux-iptables-nftables/An in-depth guide to the Netfilter framework, iptables five chains and four tables, nftables advantages, rule writing, NAT/port forwarding, connection tracking, and performance optimizationhttps://www.sre.wang/en/posts/sre-reliability-engineering-practice/Thu, 09 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/sre-reliability-engineering-practice/A systematic guide to SRE reliability engineering practices, covering the reliability maturity model, MTTR/MTBF optimization, chaos engineering, self-healing system design, and reliability measurementhttps://www.sre.wang/en/posts/kubernetes-cluster-upgrade-strategy/Fri, 03 Jan 2025 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-cluster-upgrade-strategy/A systematic guide to Kubernetes cluster upgrade workflows, version compatibility management, blue-green/canary strategies, rollback mechanisms, and production best practiceshttps://www.sre.wang/en/posts/prometheus-blackbox-exporter-script/Thu, 19 Dec 2024 00:00:00 +0000https://www.sre.wang/en/posts/prometheus-blackbox-exporter-script/Batch service probing, SSL certificate expiry checking, configuration drift detection, alerting rule validation, and automated report generation — a complete inspection toolkit built on the Prometheus ecosystemhttps://www.sre.wang/en/posts/sre-chaos-engineering/Tue, 17 Dec 2024 00:00:00 +0000https://www.sre.wang/en/posts/sre-chaos-engineering/A systematic guide to chaos engineering principles, experiment design, blast radius control, Kubernetes chaos experiments with Chaos Mesh, and the path from drills to normalized practicehttps://www.sre.wang/en/posts/sre-service-dependency-failure-domain/Mon, 16 Dec 2024 00:00:00 +0000https://www.sre.wang/en/posts/sre-service-dependency-failure-domain/A systematic SRE approach to building service dependency maps, identifying failure domain boundaries, and controlling blast radiushttps://www.sre.wang/en/posts/sre-postmortem-culture/Tue, 26 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/sre-postmortem-culture/A systematic guide to SRE Postmortem culture in practice, covering the blameless principle, root cause analysis methods, postmortem templates, action item tracking, and overcoming organizational culture barriershttps://www.sre.wang/en/posts/kubernetes-cost-optimization/Fri, 22 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-cost-optimization/A systematic Kubernetes cost optimization methodology covering resource configuration governance, autoscaling strategies, Spot instance utilization, and FinOps culture buildinghttps://www.sre.wang/en/posts/kubernetes-multi-cluster-management/Wed, 20 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/kubernetes-multi-cluster-management/From multi-cluster architecture patterns and KubeFed/Cluster API/Karmada/OCM comparison to cross-cluster service discovery, unified CI/CD, config sync, and disaster recovery failover—a complete practical guidehttps://www.sre.wang/en/posts/thanos-deployment-practice/Tue, 19 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/thanos-deployment-practice/In-depth analysis of Thanos architecture design and production deployment practices, covering Sidecar, Query, Store, Compactor, Ruler and other core component configurationshttps://www.sre.wang/en/posts/linux-bpf-bcc-tools/Wed, 13 Nov 2024 00:00:00 +0000https://www.sre.wang/en/posts/linux-bpf-bcc-tools/From eBPF technology principles to bcc toolset practice, covering biolatency, execsnoop, tcplife, opensnoop and other core tools, with custom BPF trace script examples