Security

First component: the management cluster on Kubernetes.

Architecture 2.0 is taking shape — time to build. First component: a Kubernetes management cluster. But before any logic or services, there’s one question that comes first: security.

Breaking down what was wrong with the old architecture and how I redesigned it: from a tree to two independent clusters, zero trust, one domain per cluster, and Docker-based onboarding.

Last autumn I lost my VPN. A story about the patterns that kill services, the arms race between regulators and protocols — and why all of it is ultimately about people.

People often ask about the security of our network and what guarantees we offer. Here’s an honest answer — no marketing promises, no fine print.

It’s been on the roadmap for a while — and it’s finally done. The most vulnerable segment of the network is now protected by automatic address rotation.