Papershelf (3)

I learn by continuously researching system internals, analyzing core architectural papers, and debugging production edge cases across cloud and bare-metal environments.

This page serves as my living research shelf – documenting key takeaways, benchmarks, and deep-dives from my daily DevOps and infrastructure engineering work.

Research work

Independent experiments, deep dives, and hands-on explorations that I’ve done myself.

Kubernetes Storage Architecture & CSI Internals – Deep investigation into StorageClasses, PVC mounting strategies, and S3-backed persistent storage (`mountpoint-s3-csi` and JuiceFS) for enterprise datasets.
Docker Layer Caching & Multi-Stage Optimization – Analysis of Docker caching mechanisms, package dependency trimming, and multi-stage builds achieving a 75% build time reduction and 35% smaller footprint.
Gateway API (`nginx-gateway-fabric`) vs Istio VirtualServices – Research note in progress: a comparative architectural breakdown of Kubernetes Gateway API (`HTTPRoute`) and Istio routing, including cross-namespace routing and TLS termination.

Papers I read

I regularly read papers and long-form posts using AI-assisted workflows (Gemini, LLM tools, etc.). This is where I track what I’ve gone through and what I found interesting.

•
Zero-Trust Workload Authentication: EKS Pod Identity & IRSA – Research note in progress: native Amazon EKS Pod Identity versus OIDC/IRSA, with AWS Secrets Manager and HashiCorp Vault.
•
High-Throughput Log Pipeline Optimization (EFK/ELK) – Research note in progress: reducing log ingestion through Filebeat namespace filtering, multiline aggregation, and retention tuning.
•
Cilium eBPF Networking & Security Context Constraints – Research note in progress: unprivileged container socket restrictions (`EPERM`), Cilium eBPF networking, and OpenShift Security Context Constraints.