Valnexor
News and analysis from the world of production systems.
Managing Secrets Without Losing Sleep
July 3, 2026
There are exactly two ages of secrets management: 'we keep them in an encrypted file' and 'we were audited'. The distance between them is covered by rotation policies, access trails, and the gradual realisation that humans should read production credentials roughly never.
Short-lived credentials issued by workload identity beat long-lived static keys in every dimension except convenience. The bootstrap problem - how does the workload prove itself - is solved differently on every platform, but the shape is identical: an identity document signed by the platform, exchanged for a token with a TTL measured in minutes.
Data Residency Basics for Global Teams
May 24, 2026
Data residency questions arrive late in most projects, usually phrased as: can you just keep EU customer data in the EU? The honest answer is that 'just' is doing enormous work in that sentence, because residency is not a hosting decision but an architecture decision.…
The Hidden Cost of Chatty Microservices
July 7, 2026
Refactoring centralized code into independent microservices trades code complexity for network unpredictability. Workflows that previously triggered simple internal methods suddenly require coordinated remote requests, each introducing separate latency budgets, retry loops, and partition hazards.…
HTTP/3 and QUIC: What Changed for Operators
September 15, 2026
Relocating the transport layer to userspace and wrapping headers in encryption makes QUIC a privacy milestone that complicates packet capture analysis. Metrics like congestion parameters and stream flow control are no longer readable off raw wire captures without decrypting via session secrets.…
Practical Notes on Postgres Connection Pooling
July 20, 2026
Postgres connections are heavy - each backend carries megabytes of memory and a full process - so every scaled-out installation grows a pooler, and every pooler grows a dialect. Session pooling is nearly transparent; transaction pooling is fast and unforgiving, quietly breaking session features like…
More reading
- Zero-Downtime Deployments Without the Drama — Operations, April 20, 2026
- Email Deliverability: Authentication Beyond SPF — Email, May 1, 2026
- When to Choose a Queue Over a Request — Engineering, April 24, 2026
About us
Founded by former SREs and network engineers, our editorial desk focuses on the practical side of operating distributed services - less hype, more packet captures.