https://www.sre.wang/Recent content on SRE工程实践Hugo -- gohugo.iozh-cnFri, 17 Jul 2026 09:20:09 +0800https://www.sre.wang/posts/linux-kernel-crash-kdump/Fri, 17 Jul 2026 09:20:09 +0800https://www.sre.wang/posts/linux-kernel-crash-kdump/从 kdump 原理到 crash 工具分析实战，手把手配置生产级内核崩溃捕获系统https://www.sre.wang/posts/monitoring-database-metrics/Fri, 17 Jul 2026 09:20:09 +0800https://www.sre.wang/posts/monitoring-database-metrics/MySQL 与 PostgreSQL 监控方案对比、Exporter 部署、核心指标解读、PromQL 告警规则与 Grafana 仪表盘https://www.sre.wang/posts/k8s-edge-computing-k3s/Thu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/posts/k8s-edge-computing-k3s/从 K3s 架构原理到生产级边缘集群部署，涵盖多节点集群搭建、离线安装、网络方案选型、边缘自治、监控告警与故障排查的完整实战指南https://www.sre.wang/posts/sre-incident-preparedness-drill/Thu, 16 Jul 2026 00:47:30 +0800https://www.sre.wang/posts/sre-incident-preparedness-drill/系统化构建故障预案体系，通过红蓝对抗、桌面推演、混沌注入三种演练模式，把运维团队的应急响应从被动救火升级为主动防御https://www.sre.wang/posts/monitoring-apm-tool-selection/Wed, 15 Jul 2026 02:09:45 +0800https://www.sre.wang/posts/monitoring-apm-tool-selection/对比主流开源与商业 APM 工具，覆盖选型维度、部署成本、技术架构与实战建议https://www.sre.wang/posts/linux-auditd-security-auditing/Wed, 15 Jul 2026 02:09:45 +0800https://www.sre.wang/posts/linux-auditd-security-auditing/从安装部署到规则编写、日志分析、性能调优，覆盖 auditd 在生产环境的完整实践https://www.sre.wang/posts/jenkins-freestyle-vs-pipeline/Tue, 14 Jul 2026 02:25:36 +0800https://www.sre.wang/posts/jenkins-freestyle-vs-pipeline/从创建到部署，用大白话拆解 Jenkins Freestyle 和 Pipeline 两种项目风格的配置流程、核心差异和选型策略https://www.sre.wang/posts/linux-network-packet-capture-analysis/Tue, 14 Jul 2026 00:39:00 +0800https://www.sre.wang/posts/linux-network-packet-capture-analysis/用 tcpdump 和 Wireshark 组合拳排查生产网络问题，覆盖过滤语法、抓包策略、协议解析和实战案例https://www.sre.wang/posts/auto-inspection-platform-go/Tue, 14 Jul 2026 00:39:00 +0800https://www.sre.wang/posts/auto-inspection-platform-go/用 Go 从零搭建生产级自动化巡检平台，覆盖插件化架构、并发执行、告警联动和报告生成的完整实现https://www.sre.wang/posts/linux-cpu-isolation-numa-tuning/Mon, 13 Jul 2026 03:22:07 +0800https://www.sre.wang/posts/linux-cpu-isolation-numa-tuning/从 isolcpus 到 cpuset、从 NUMA 亲和到中断绑核，生产级 CPU 隔离与调优全流程实战https://www.sre.wang/posts/sre-team-building-capability-model/Mon, 13 Jul 2026 03:22:07 +0800https://www.sre.wang/posts/sre-team-building-capability-model/从零搭建 SRE 团队：岗位设计、能力模型、梯队建设、考核指标与避坑实战https://www.sre.wang/posts/istio-service-mesh-getting-started/Sun, 12 Jul 2026 01:18:19 +0800https://www.sre.wang/posts/istio-service-mesh-getting-started/Service Mesh 到底解决什么问题？Istio 的 Sidecar 模式和 Ambient 模式怎么选？本文从架构原理到安装部署、流量管理、安全策略，带你从零跑通 Istio。https://www.sre.wang/posts/monitoring-data-governance/Sun, 12 Jul 2026 01:18:19 +0800https://www.sre.wang/posts/monitoring-data-governance/当监控指标从几百条膨胀到百万级，数据治理就成了绕不开的坎。本文从指标生命周期出发，系统拆解指标命名规范、高基数治理、采集策略分级、数据质量度量与废弃指标淘汰的工程实践。https://www.sre.wang/disclaimer/Sat, 11 Jul 2026 00:00:00 +0000https://www.sre.wang/disclaimer/SRE工程实践网站免责声明与使用条款https://www.sre.wang/privacy/Sat, 11 Jul 2026 00:00:00 +0000https://www.sre.wang/privacy/SRE工程实践网站隐私政策与Cookie说明https://www.sre.wang/about/Fri, 10 Jul 2026 00:00:00 +0000https://www.sre.wang/about/SRE工程实践 - 关于本站https://www.sre.wang/posts/kubernetes-security-hardening/Sat, 04 Jul 2026 10:59:00 +0800https://www.sre.wang/posts/kubernetes-security-hardening/Kubernetes 安全加固：RBAC、NetworkPolicy 与 Pod 安全策略的学习笔记与实践总结https://www.sre.wang/posts/linux-namespace-cgroups-basics/Sun, 28 Jun 2026 16:34:00 +0800https://www.sre.wang/posts/linux-namespace-cgroups-basics/Linux 命名空间与 cgroups：容器技术的底层基础的学习笔记与实践总结https://www.sre.wang/posts/llm-assisted-troubleshooting/Sat, 13 Jun 2026 09:46:00 +0800https://www.sre.wang/posts/llm-assisted-troubleshooting/大模型辅助故障排查：从日志分析到根因定位的学习笔记与实践总结https://www.sre.wang/posts/aiops-anomaly-detection/Fri, 05 Jun 2026 13:51:00 +0800https://www.sre.wang/posts/aiops-anomaly-detection/AIOps 异常检测：从静态阈值到智能告警的演进的学习笔记与实践总结https://www.sre.wang/posts/vulnerability-scanning-cicd/Fri, 15 May 2026 14:38:00 +0800https://www.sre.wang/posts/vulnerability-scanning-cicd/漏洞扫描集成 CI/CD：从依赖检查到镜像安全的学习笔记与实践总结https://www.sre.wang/posts/code-review-automation-tools/Fri, 03 Apr 2026 14:54:00 +0800https://www.sre.wang/posts/code-review-automation-tools/代码审查自动化：Lint、CI 与智能检查工具链的学习笔记与实践总结https://www.sre.wang/posts/git-workflow-team-collaboration/Sat, 17 Jan 2026 15:06:00 +0800https://www.sre.wang/posts/git-workflow-team-collaboration/Git 工作流与团队协作：分支策略与代码审查实践的学习笔记与实践总结https://www.sre.wang/posts/data-driven-sre-decisions/Fri, 02 Jan 2026 10:05:00 +0800https://www.sre.wang/posts/data-driven-sre-decisions/数据驱动的 SRE 决策：从指标到行动的实践路径的学习笔记与实践总结https://www.sre.wang/posts/sre-finops-cost-management/Sat, 27 Dec 2025 21:21:00 +0800https://www.sre.wang/posts/sre-finops-cost-management/SRE 视角的 FinOps：云成本可见性与优化策略的学习笔记与实践总结https://www.sre.wang/posts/platform-engineering-intro/Mon, 22 Dec 2025 11:13:00 +0800https://www.sre.wang/posts/platform-engineering-intro/平台工程入门：内部开发者平台的设计与落地的学习笔记与实践总结https://www.sre.wang/posts/monitoring-as-code/Fri, 19 Dec 2025 14:17:00 +0800https://www.sre.wang/posts/monitoring-as-code/监控即代码：用 Terraform 和 YAML 管理告警规则的学习笔记与实践总结https://www.sre.wang/posts/sre-documentation-practice/Sun, 09 Nov 2025 20:27:00 +0800https://www.sre.wang/posts/sre-documentation-practice/SRE 文档化实践：Runbook、架构图与知识库建设的学习笔记与实践总结https://www.sre.wang/posts/cloud-native-security-practices/Sun, 26 Oct 2025 21:10:00 +0800https://www.sre.wang/posts/cloud-native-security-practices/云原生安全实践：容器安全、镜像扫描与运行时防护的学习笔记与实践总结https://www.sre.wang/posts/aws-cloud-operation-basics/Tue, 21 Oct 2025 09:48:00 +0800https://www.sre.wang/posts/aws-cloud-operation-basics/AWS 运维基础：EC2、S3 与 IAM 权限管理入门的学习笔记与实践总结https://www.sre.wang/posts/postgresql-ha-setup/Thu, 16 Oct 2025 21:55:00 +0800https://www.sre.wang/posts/postgresql-ha-setup/PostgreSQL 高可用架构：Patroni 与 etcd 集群部署的学习笔记与实践总结https://www.sre.wang/posts/mysql-performance-optimization/Mon, 13 Oct 2025 18:17:00 +0800https://www.sre.wang/posts/mysql-performance-optimization/MySQL 性能优化：慢查询分析与索引调优实践的学习笔记与实践总结https://www.sre.wang/posts/redis-operation-maintenance/Mon, 15 Sep 2025 12:28:00 +0800https://www.sre.wang/posts/redis-operation-maintenance/Redis 运维实践：持久化、高可用与性能监控的学习笔记与实践总结https://www.sre.wang/posts/tls-ssl-certificate-management/Sun, 14 Sep 2025 17:26:00 +0800https://www.sre.wang/posts/tls-ssl-certificate-management/TLS/SSL 证书管理：从申请到自动续期的运维实践的学习笔记与实践总结https://www.sre.wang/posts/nginx-performance-tuning/Fri, 12 Sep 2025 19:44:00 +0800https://www.sre.wang/posts/nginx-performance-tuning/Nginx 性能调优：从配置到内核参数的完整实践的学习笔记与实践总结https://www.sre.wang/posts/linux-strace-debugging/Thu, 11 Sep 2025 12:45:00 +0800https://www.sre.wang/posts/linux-strace-debugging/Linux 系统调用追踪：strace 与 ltrace 调试实战的学习笔记与实践总结https://www.sre.wang/posts/sre-multi-region-architecture/Fri, 29 Aug 2025 00:00:00 +0000https://www.sre.wang/posts/sre-multi-region-architecture/详细梳理多活架构模式、数据一致性挑战、流量切换策略、容灾 RTO/RPO 设计、跨地域监控与故障切换演练https://www.sre.wang/posts/sre-dev-collaboration-model/Tue, 24 Jun 2025 00:00:00 +0000https://www.sre.wang/posts/sre-dev-collaboration-model/探讨 SRE 与开发团队协作的多种模式、冲突根源与工程化解决方案，涵盖嵌入模型、平台工程、错误预算共治等实战内容https://www.sre.wang/posts/linux-ebpf-programming-guide/Tue, 01 Apr 2025 00:00:00 +0000https://www.sre.wang/posts/linux-ebpf-programming-guide/详细梳理 eBPF 编程模型、BCC 与 libbpf+CO-RE 对比、BTF 机制、程序类型与实战开发流程https://www.sre.wang/posts/sre-change-management-canary-release/Tue, 11 Feb 2025 00:00:00 +0000https://www.sre.wang/posts/sre-change-management-canary-release/深入探讨 SRE 视角下的变更管理，涵盖金丝雀发布、蓝绿部署、快速回滚机制及 Argo Rollouts 实战配置https://www.sre.wang/posts/blackbox-exporter-uptime/Tue, 04 Feb 2025 00:00:00 +0000https://www.sre.wang/posts/blackbox-exporter-uptime/讲解 Blackbox Exporter 配置、HTTP/TCP/ICMP/DNS 探测、SSL 证书到期监控、多地域拨测、与 Prometheus 集成及可用性 SLO 度量https://www.sre.wang/posts/helm-chart-writing-guide/Thu, 16 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/helm-chart-writing-guide/从 Helm Chart 目录结构到模板语法、values 层级覆盖、命名模板与钩子，再到 Harbor 私有仓库部署与 CI/CD 集成，实战编写完整的 Web 应用 Helm Charthttps://www.sre.wang/posts/linux-iptables-nftables/Fri, 10 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/linux-iptables-nftables/深入理解 Netfilter 框架、iptables 五链四表、nftables 优势、规则编写、NAT/端口转发、连接追踪及性能优化实战https://www.sre.wang/posts/sre-reliability-engineering-practice/Thu, 09 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/sre-reliability-engineering-practice/详细梳理 SRE 可靠性工程的落地实践，涵盖可靠性层级模型、MTTR/MTBF 优化、混沌工程、自愈系统设计与可靠性度量https://www.sre.wang/posts/kubernetes-cluster-upgrade-strategy/Fri, 03 Jan 2025 00:00:00 +0000https://www.sre.wang/posts/kubernetes-cluster-upgrade-strategy/详细梳理 Kubernetes 集群升级的完整流程、版本兼容性管理、蓝绿/金丝雀升级策略、回滚机制与生产实践https://www.sre.wang/posts/prometheus-blackbox-exporter-script/Thu, 19 Dec 2024 00:00:00 +0000https://www.sre.wang/posts/prometheus-blackbox-exporter-script/批量服务拨测、SSL 证书到期检查、配置漂移检测、告警规则验证与自动化报表生成，一套基于 Prometheus 生态的自动化巡检工具集https://www.sre.wang/posts/sre-chaos-engineering/Tue, 17 Dec 2024 00:00:00 +0000https://www.sre.wang/posts/sre-chaos-engineering/详细梳理混沌工程原理、实验设计方法、爆炸半径控制、Kubernetes 混沌实验（Chaos Mesh）与从演练到常态的实践路径https://www.sre.wang/posts/sre-service-dependency-failure-domain/Mon, 16 Dec 2024 00:00:00 +0000https://www.sre.wang/posts/sre-service-dependency-failure-domain/系统化构建服务依赖地图，识别故障域边界，控制故障爆炸半径的 SRE 工程实践https://www.sre.wang/posts/sre-postmortem-culture/Tue, 26 Nov 2024 00:00:00 +0000https://www.sre.wang/posts/sre-postmortem-culture/详细梳理 SRE Postmortem 文化的落地实践，涵盖 blameless 原则、根因分析方法、复盘模板、改进项跟踪与组织文化突破