HNHacker News
TopNewBestAskShowJobs

gbrayut

579 karma · joined May 17, 2011

Current: Google Cloud Customer Engineer, Formerly: SRE at Reddit, Edge Platform at WalmartLabs, SRE at Stack Overflow

Mastodon https://hachyderm.io/@GBrayUT Threads https://www.threads.net/@GBrayUT

[ my public key: https://keybase.io/gbrayut; my proof: https://keybase.io/gbrayut/sigs/gjXWe_M0-pf2NttqXdOE_0cjYyuN9inOSy9Ev1DRLIc ]

submissionscomments
gbrayut··on Mass phishing emails pretending to be Y Combinator right now
Worth reporting the phishing domain(s) so they can potentially be red-banned https://safebrowsing.google.com/safebrowsing/report_phish/
gbrayut··on A Two-Stroke Engine Made from Scratch Using Basic Hardware Store Parts
I follow like 80% of the channels listed in this thread so far, so here are some more that I enjoy

https://youtube.com/@cuttingedgeengineering

https://youtube.com/@snowballengineering

https://youtube.com/@noengineerhere (but probably too much comedy for your taste)

https://youtube.com/@matthiaswandel

https://youtube.com/@agingwheels

https://youtube.com/@breakingtaps

https://youtube.com/@saveitforparts

gbrayut··on SAPwned: SAP AI vulnerabilities expose customers' cloud environments and privat
There are a lot of other ways to bypass the Istio sidecar proxy, which is not designed to be a general egress boundary/firewall. See https://blog.howardjohn.info/posts/bypass-egress/
gbrayut··on Ask HN: What have you built with ESPHome, ESP8266 or similar hardware
I connected an ESP8266 via serial protocol to the extra programming pins on a QMK based keypad (https://www.crowdsupply.com/anavi-technology/anavi-macro-pad...) so that it can have layers that directly trigger actions via Home Assistant API.

Also use the Bee Motion ESP32-S3 (https://www.crowdsupply.com/smart-bee-designs/bee-motion-s3) for their PIR motion sensing and running other sensors around the house.

And I have an old Wemos D1 mini connected to my Arduino based smart garage door that helps automate things like lock/unlocking the front door or triggering other presence based actions.

gbrayut··on Ask HN: What other news feeds do you read besides Hacker News?
I highly recommend the https://dailytechnewsshow.com/ podcast by Tom Merritt which usually runs 30 minutes episodes, or their 5 minute Daily Tech Headlines version.
gbrayut··on Linode Managed Databases
https://aiven.io/postgresql
gbrayut··on Gloo GraphQL Beta: Envoy Based GraphQL Server in Gloo Edge
Also more details in a solocon video (28 minutes) https://www.youtube.com/watch?v=jefxqvCWU6E&list=PLBOtlFtGzn...
gbrayut··on AWS Support able to access any S3 object due to permission change
Curious on your thoughts about the "Sovereign Cloud" features discussed at https://cloud.google.com/blog/products/identity-security/new...

Would having a 3rd party host the services in the EU meet your requirements? Or having data residency restrictions with strict key management, EU based support, and access transparency/approvals?

IMO Google is also taking this seriously, but I am genuinely curious if any off the above would meet your requirements.

gbrayut··on Strange domain names that developers bought
Many TLDs don't count (letter dash letter) as a premium/reserved domain like they do for other dictionary words or 2-3 character domains. Looks like v-s.space is claimed but for example z-s was just $9.99 a year

I used that trick when .dev was launched and snagged a-z.dev for all my future domain name needs

gbrayut··on A New Architecture for Plaid Link: Server-Driven UI with Directed Graphs
Curious how this compares with something like Apache Airflow?

https://airflow.apache.org/docs/apache-airflow/stable/concep...

gbrayut··on Advice on self-directed IRAs and SAFEs
Strata was the custodian for LendingClub IRA accounts, but sounds like they have had some sort of falling out recently. Got an email this month about switching to https://www.altoira.com/ and then another from Strata trying to get me to stay. Now Stratas charging $100 fee for any accounts that didn't renew earlier this year.

I've only ever used their site when moving money in or out of the IRA but it's a pretty terrible UI and they don't seem to be very responsive. I've had a withdraw pending for over 4 weeks now trying to move money to another custodian.

You are probably better off finding a different approach.

gbrayut··on Rockstar thanks GTA Online player who fixed load times, official update coming
Reminds me of a Windows installer I working on many years ago, that seemed to take a long time using CPU but otherwise not doing any real work. Turned out the SDK we were using tried to update the progress bar every kilobyte or something like that, and our near-gigabyte sized packages filled the message loop with a bunch of pointless updates (30.001% -> 30.002% but both displayed as 30%).

Once the vendor fixed the issue it shaved a few minutes off the install time that had previously just been a UI glitch (processing the large backlog of progress bar update messages).

gbrayut··on Bazel Removed from Kubernetes
https://twitter.com/BenTheElder/status/1366478663571529728

"This should not be taken terribly deeply as a judgement of bazel. Our other build (make) is full of issues, it's just impractical for us to continue to maintain both & for our usage & as voiced by our contributors we opted to stick to the build we've been releasing with for ages"

gbrayut··on Migrating a 40TB SQL Server Database
Case in point, one of my favorite system architecture/design blog posts:

Providence: Failure Is Always An Option

https://jasonpunyon.com/blog/2015/02/12/providence-failure-i...

Which has one of my favorite quotes about scope creep:

Kevin and I have essentially become allergic to big projects. We attempt to practice “What can get done by Friday?” driven development. Keeping things small precludes a whole class of errors like “We need a new datastore”, ‘cause that ain’t gettin’ done by Friday. It’s hard to sink a week on something you weren’t supposed to be working on when all you have is a week.

gbrayut··on How to track costs in multi-tenant Amazon EKS clusters
Is there any way to setup a sharding solution for Prometheus? Like instances per AZ or that only scrape a certain set of nodes? On our larger clusters we had issues even with the optimized Prometheus instance in kubecost, and it's starting to look like metrics collection/processing may be a big driving force on our cluster scaling designs.
gbrayut··on SSH hacks – a little sanity for remote workers
One of my most used commands is Ctrl+d for closing the input stream and causing a remote or local shell session to exit

https://unix.stackexchange.com/q/110240/8692

gbrayut··on GoWFH: Find and list verified Work From Home and Remote jobs from top companies
Nice. Another option for tech remote jobs is https://stackoverflow.com/jobs/remote
gbrayut··on Kubernetes 1.18
Kubernetes Deconstructed video https://vimeo.com/245778144/4d1d597c5e
gbrayut··on Disney+ hit by technical glitches on launch day
apparently not at launch https://twitter.com/rothgar/status/1194150447604355072
gbrayut··on Reddit was down for over two hours
some details at https://www.youtube.com/watch?v=z7TIzCAEo0M
gbrayut··on Cloudflare outage caused by bad software deploy
Probably something mundane like ^[\s\u200c]+|[\s\u200c]+$

That's the one that took down Stack Overflow a few years ago https://stackstatus.net/post/147710624694/outage-postmortem-...

gbrayut··on Google Cloud Networking Incident Postmortem
Anyone know of other public resources like the one from PagerDuty? The SRE book and workbook at https://landing.google.com/sre/books/ have some details, but curious if there are others people would recommend.
gbrayut··on Show HN: PagerBeauty – PagerDuty on-call dashboard widget
My last job used https://github.com/opserver/Opserver which had a pagerduty tab. Nice being able to see who was the on call and have instructions for when/how to page out.

It also has a "take on call for the next hour" button, which (for logged in users that matched a pagerduty user) would create an override for the next hour. Really handy when you are starting a change window and don't want to risk waking up the on call.

gbrayut··on Skipper – An HTTP router and reverse proxy for service composition
Neat! We use a similar Go based proxy for our tier 1 ingress and routing at Walmart Labs (global eCommerce), with Lua/Go plugins for edge/serverless style backends. It is a custom/proprietary codebase but the tech stack has served us very well. Great to see open source projects with similar use cases. I may have to play with this for use in some personal/hobby projects.
gbrayut··on Is there hope for IPv6?
Just use home.arpa from https://tools.ietf.org/html/rfc8375 with a custom DNS server or host file. Or one of the many dynamic DNS systems.
gbrayut··on Envoy Proxy at Reddit
There are some interesting stats/details listed at https://www.reddit.com/r/sysadmin/comments/9x577m/were_reddi... and https://redditblog.com/2018/12/04/reddit-year-in-review-2018...
gbrayut··on Envoy Proxy at Reddit
I look forward to hearing more about your plans for ingress and how the various pieces fit together (CDN, L4/L7 LBs, TLS termination, Geo/policy DNS balancing). Especially regarding the performance and new features available using Envoy. I've use HAProxy before and it was great for simple routing/reverse proxy but not so great at complex/dynamic configuration or cert management.
gbrayut··on Envoy Proxy at Reddit
Awesome blog post! I very much enjoy hearing how large web properties implement these technologies and any issues they experience along the way.

Are you using envoy at all in your main http ingress path? You mentioned haproxy and AWS ELBs, but it wasn't clear if envoy is also being considered for public ingress traffic.

Keep up the great work!

gbrayut··on Hashicorp Vault v1.0
Agreed... Neat project, but a hard dependency on AWS is an issue for us.
gbrayut··on Analyzing the Walmart site performance
How can you know it is an improvement if you don't measure it?
Page 1 of 3Next →