Zentharis
Practical engineering writing for people who keep systems alive.
Managing Secrets Without Losing Sleep
June 20, 2026
Organizations typically transition between two distinct security phases: managing static secrets in encrypted archives and preparing for formal compliance audits. Navigating that gulf requires automated key cycling, immutable audit records, and acknowledging that human operators must not access live production credentials.
Ephemeral tokens granted through workload identities vastly outperform persistent secrets across all operational criteria besides upfront convenience. While initial identity attestation varies by cloud environment, the core architecture remains constant: platform-signed assertions exchanged for credentials valid for a few short minutes.
Data Residency Basics for Global Teams
September 8, 2026
Discussions around territorial data storage tend to emerge as an afterthought, often dismissed as a basic configuration toggle to store European records locally. In reality, meeting territorial constraints is an exhaustive architectural undertaking rather than a superficial server provisioning choic…
Zero-Downtime Deployments Without the Drama
June 7, 2026
The folklore version of zero-downtime deployment involves blue-green environments and instant cutovers. The operational version is mostly about boring details: health checks that test real work, connection draining that actually finishes, and database migrations that respect the running version.…
Structuring DNS for Reliability
June 15, 2026
DNS reliability failures are uniquely embarrassing because the failure mode is global: when your zones stop answering, every health check goes green at the infrastructure layer while the entire product vanishes. The classic mitigation is boring - a secondary provider with independent plumbing.…
Cache Invalidation Patterns That Survive Traffic
July 8, 2026
Everyone quotes the two hard things joke; fewer people ship caches engineered against stampede. The pattern that matters most is request collapsing: when a hot key expires, exactly one worker rebuilds while everyone else serves slightly stale data, which turns a cache miss from a database incident i…
More reading
- What Good Observability Actually Looks Like — Operations, May 27, 2026
- HTTP/3 and QUIC: What Changed for Operators — Networking, July 24, 2026
- Understanding TLS 1.3 Session Resumption — Security, April 29, 2026
About us
Founded by former SREs and network engineers, our editorial desk focuses on the practical side of operating distributed services - less hype, more packet captures.