// Blog
Engineering insights, infrastructure deep-dives, and product updates.
How to give a Kubernetes cluster spread across Hetzner, AWS and bare metal one private network with WireGuard: a full mesh, kubelet bound to the tunnel, what to monitor, and the firewall default that silently drops pod traffic.
2026-04-02 · 9 min read · Serhii Mazurok
One platform repository per organisation, in your own git org, holding the apps and the whole stack. Repository structure, promotion, secrets and rollback - the way Segla builds it for every tenant.
2026-03-30 · 10 min read · Serhii Mazurok
How big your Kubernetes control plane should be, from a 3-node lab to the 5000-node limit: CPU, RAM and disk per node, etcd disk latency and quota, apiserver and scheduler tuning, with the numbers and the fio command.
2026-03-23 · 10 min read · Serhii Mazurok
Rolling updates, readiness probes, PodDisruptionBudgets, and graceful shutdown - everything you need to deploy without dropping a single request.
2026-03-16 · 8 min read · Serhii Mazurok