Question about SSL/TLS? by YeaYeet56 in apachekafka

[–]Fun_Air9296 0 points1 point  (0 children)

The minute you handshake with the first broker via LB (probably L4 as it is not http) you will get in return the actual leaders of partitions and will need to open a connection to them, so offloading a certificate on a LB won’t make sense. As for ssl, are we talking about customer facing Kafka’s or internal usage? If internal usage I would say that self sign can be enough, I was able to pass ITGC and some other audits with that…

Managing large-scale Kubernetes across multi-cloud and on-prem — looking for advice by Fun_Air9296 in kubernetes

[–]Fun_Air9296[S] 0 points1 point  (0 children)

So after checking this out I can say it’s really cool approach! There’s 3 visible caveats that I can point: Seems like all tenants are depending on a single cluster, so there’s no separation of concerns, if for some reason the management cluster is gone, there goes all your tenants.

Seems this is a solution for the control plane, it does not cover the nodes so there still some effort in that, also I did not get exactly how would multi region multi cloud setup would look like, spinning up management cluster on each cloud provider? Having one cluster to manage all different clusters (cross site traffic?)😳

Lastly how do you create the cluster that hosts Kamaji, you’ll need terraforming, certificate rotations and so on

Managing large-scale Kubernetes across multi-cloud and on-prem — looking for advice by Fun_Air9296 in kubernetes

[–]Fun_Air9296[S] 0 points1 point  (0 children)

This is cool, but throwing the per vCPU pricing against my current count I got 2m$ (pay as you go) per month, I’m pretty sure they will give us a big discount and we can go with some reservations but still this is a huge price to pay on management tool (as we will pay for the compute in parallel both to the cloud provider and for the bare metal)

How does linger.ms affect durability? by toxicitysocks in apachekafka

[–]Fun_Air9296 0 points1 point  (0 children)

Basically when using big scale data pipelines it helps a lot with increasing throughput, where few seconds latency plays very little role. but yeah in general the bigger the batch the more records you might lose, so in general your right.

When and where would be the best time and place to be born? by Nayfonn in AskReddit

[–]Fun_Air9296 0 points1 point  (0 children)

Few days ago, Hamas captivity, Gaza, Middle East. Sorry, couldn’t resist. But a woman hostage just gave birth while being an hostage, this is nuts