Services

Resources

Company

Our Work

Blog

Schedule a Meet

How To

Back to Tags

Blogs

Illustration of a laptop and browser windows on a deep crimson background crossed with red circuit-like lines

Read Blog

How to fix the eMudhra CA compromise on macOS

Saurabh Hirani

Principal SRE @One2N

Spandan Ghosh

Content @One2N

How to fix the eMudhra CA compromise on a Mac: clean the CA bundles curl reads, update Node, Python, Go and Java, and prove each fix with a probe.

October 22, 2026 | 12 min read

Illustration on a navy background of a terminal running exec 3<>/dev/tcp/host/443, cabled into a network socket, next to a dashed folder labelled /dev/tcp that does not exist

Read Blog

How to test TCP connectivity without curl using bash /dev/tcp

Saurabh Hirani

Principal SRE @One2N

No curl, wget or nc on a locked-down box? Use bash /dev/tcp to check if a port is open and read HTTP endpoints, and learn why it fails in zsh.

October 1, 2026 | 7 min read

Read Blog

Why your EKS Auto Mode NodeClass keeps reverting to default

Ananya Dasgupta

SRE @One2N

EKS Auto Mode reverted our default NodeClass after Argo CD synced secondary CIDR pod subnets. Why Auto Mode owns that object and what to change instead.

September 21, 2026 | 6 min read

Read Blog

OpenSearch Workload Management (WLM) for heavy search queries

Srivatsa RV

SRE @One2N

OpenSearch Workload Management puts heavy report queries and product search in separate workload groups with CPU, memory, timeout and shard limits.

September 10, 2026 | 6 min read

Read Blog

How to evaluate AI SRE agents for production?

Hemant Kumar

Staff SRE @One2N

How we evaluate AI SRE agents before they touch a production incident, applied to an OpenSRE v0.1 PoC and scored on how fast it helps isolate a fault.

August 11, 2026 | 12 min read

Read Blog

Conway's Law as a lever to fix legacy architectures

Chinmay Naik

CEO @One2N

Conway's law says architecture mirrors team communication. A shared policy database showed it; the Reverse Conway Maneuver helps refactor legacy systems.

July 8, 2026 | 6 min read

Read Blog

Hardening Kubernetes security with Istio ambient mode on flat networks

Harshwardhan Mehrotra

SRE @One2N

Spandan Ghosh

Content @One2N

Istio Ambient mode on a flat EKS Hybrid network: how we rebuilt workload isolation with mTLS, SPIFFE identity, egress control and NetworkPolicies.

June 1, 2026 | 7 min read

Read Blog

Git was not built for multiple AI agents. Worktrees fix that.

Srivatsa RV

SRE @One2N

Spandan Ghosh

Content @One2N

Git worktrees for agentic development: give each AI coding agent its own folder and branch on one repo, so parallel chats stop fighting over one checkout.

May 26, 2026 | 6 min read

Read Blog

Multi-tenant SFTP: how we built a zero-ops setup on AWS Transfer Family

Kshitish Deshpande

Software Engineer @One2N

Spandan Ghosh

Content @One2N

How One2N built a zero-ops multi-tenant SFTP system for a fintech client using AWS Transfer Family: one endpoint, isolated buckets, no manual server ops.

April 20, 2026 | 6 min read

Read Blog

My new laptop broke Slack. That's how I ended up on Bluefin.

Harsh Mishra

SRE

Spandan Ghosh

Content @One2N

A kernel patch broke Slack on my Dell XPS. Here's how that led me to Bluefin, immutable Linux, bootc, and OCI images and why it solved my problem for good.

April 1, 2026 | 7 min read

Read Blog

The gotchas of OTel Collector processors in Kubernetes

Sanket Rajgiri

SRE @One2N

Spandan Ghosh

Content @One2N

OTel Collector processor gotchas in Kubernetes: batching to stop 429s, crashes in spikes, noise filters, k8s enrichment, sampling and two-tier collectors.

January 26, 2026 | 6 min read

Read Blog

How queueing theory makes systems reliable

Srivatsa RV

SRE @One2N

Queueing theory for SREs: the M/M/1 model shows why 70% utilisation feels calm and 90% collapses under spikes, and why headroom is insurance, not waste.

December 17, 2025 | 2 min read

Read Blog

How to read SRE graphs without lying to yourself

One2N

Team

How to read SRE graphs honestly: averages that hide pain, sampling windows that erase spikes, log scales and heatmaps, plus a checklist for incidents.

December 10, 2025 | 3 min read

Read Blog

Error budget calculation: downtime minutes for every SLO

Srivatsa RV

SRE @One2N

Error budget calculation from your SLO: 99.9% over 30 days is 43 minutes of downtime, 99.95% is 21m 54s. Use burn rate to decide when to ship or pause.

December 3, 2025 | 3 min read

Read Blog

Percentiles in SRE: Why averages lie about latency

Srivatsa RV

SRE @One2N

Spandan Ghosh

Content @One2N

Percentiles in SRE: 50 slow requests in 1,000 can leave average latency near 200 ms. How p50, p95 and p99 expose tail latency and which ones to monitor.

November 26, 2025 | 3 min read

Read Blog

Latency vs throughput: why high utilisation hurts reliability

Srivatsa RV

SRE @One2N

Spandan Ghosh

Content @One2N

Latency vs throughput explained for engineers: how the two interact with utilisation, and why running at 90 percent capacity quietly wrecks your SLOs.

November 19, 2025 | 6 min read

Read Blog

Deploying a scalable NATS cluster part 2: hands-on demo

Barun Debnath

SRE

Spandan Ghosh

Content @One2N

Deploy a four-node NATS cluster with Docker, JetStream stream replication, dead letter queues and Prometheus and Grafana dashboards, then load test it.

November 12, 2025 | 7 min read

Read Blog

SRE math every engineer should know: a practical guide

Srivatsa RV

SRE @One2N

SRE math for on-call engineers: percentiles that averages hide, Little's Law, error budgets as downtime minutes, queueing theory and honest graph reading.

November 5, 2025 | 8 min read

Read Blog

Debugging KubeVPN's DNS resolution failures

Nilesh D

Software Engineer @One2N

Chinmay Naik

CEO @One2N

Debugging KubeVPN DNS on macOS: go.dev failed to resolve because KubeVPN sent it to a dev namespace. scutil --dns found it; resetting adapter DNS fixed it.

September 30, 2025 | 3 min read

Read Blog

What happens when you run Terraform commands?

Sahil Joseph

Staff SRE @One2N

Saurabh Hirani

Principal SRE @One2N

What happens when you run Terraform commands: how Terraform core talks to provider plugins over gRPC, credential handling, state locking and debugging.

September 24, 2025 | 7 min read

Read Blog

Daily driving Omarchy and Hyprland as a CTO

Jaideep Khandelwal

CTO @One2N

A CTO's review of daily driving Omarchy, DHH's Arch-based Linux with Hyprland preconfigured, after macOS: what works, what breaks and who should use it.

September 16, 2025 | 5 min read

Read Blog

A pragmatic guide to get started with OpenTelemetry

Spandan Ghosh

Content @One2N

A pragmatic OpenTelemetry guide for SREs: monitoring vs observability, logs, metrics and traces, OTel instrumentation, and strategies to migrate backends.

August 20, 2025 | 5 min read

Read Blog

How we solved a critical site-to-site VPN IP address conflict in AWS

Rishiraj Rathore

SRE @One2N

Spandan Ghosh

Content @One2N

A site-to-site VPN in AWS came up but every request timed out: both sides used 10.0.0.0/22. Why a secondary CIDR failed and the parallel setup that worked.

July 15, 2025 | 7 min read

Read Blog

Deploying a scalable NATS cluster, part 1: core architecture

Barun Debnath

SRE

NATS cluster architecture, part 1: pub-sub and queue groups, JetStream persistence, cluster, super cluster and leaf node topologies, and what to plan for.

June 4, 2025 | 5 min read

Read Blog

GitHub runners fundamentals and self-hosted runner setup

Rajesh Jangid

SRE

Spandan Ghosh

Content @One2N

What GitHub runners are, how GitHub-hosted and self-hosted runners differ, and how to set up a self-hosted GitHub Actions runner.

April 10, 2025 | 5 min read

Read Blog

All software is assembled

Chinmay Naik

CEO @One2N

All software is assembled: why teams ship faster by integrating third-party components than building from scratch, and how to treat dependencies.

April 8, 2025 | 4 min read

Read Blog

EKS upgrade best practices: how to upgrade EKS clusters safely

Aashi Rathore

SRE @One2N

Spandan Ghosh

Content @One2N

EKS upgrade checklist from our v1.23 to v1.30 move: control plane checks, VPC CNI, CoreDNS and kube-proxy add-ons, Velero backups and node group upgrades.

March 25, 2025 | 5 min read

Read Blog

AWS SSM port forwarding to private EC2 without SSH or bastions

Harsh Mishra

SRE

AWS SSM port forwarding to EC2 in private subnets with Session Manager, with no open SSH port or bastion. Covers the IAM role, SSM Agent and endpoints.

March 10, 2025 | 5 min read

Read Blog

Gotchas to avoid when using AWS spot instances in production

Aashi Rathore

SRE @One2N

Spandan Ghosh

Content @One2N

AWS spot instances in production on EKS: two-minute termination notices, ignored PodDisruptionBudgets, slow replacement capacity and a real outage we had.

February 24, 2025 | 4 min read

Read Blog

Accessing private EC2 Instances without keys or passwords

Adarsh Raj

SRE

Spandan Ghosh

Content @One2N

Access private EC2 instances without SSH keys or passwords using AWS Systems Manager Session Manager: no public IPs, no inbound rules, and no shared keys.

December 3, 2024 | 7 min read

Read Blog

Using UTM and Vagrant for dev environments on Apple Silicon

Srivatsa RV

SRE @One2N

Spandan Ghosh

Content @One2N

VirtualBox no longer supports M-series Macs. How to run Vagrant with UTM to spin up reproducible local dev environments on Apple Silicon, tested on an M3.

December 2, 2024 | 5 min read

Read Blog

Karpenter vs Cluster Autoscaler for Kubernetes node scaling

Rahul H Bhatia

SRE

Spandan Ghosh

Content @One2N

Karpenter vs Cluster Autoscaler: how each scales Kubernetes nodes, from predefined node groups and priority expanders to provisioning and cost trade-offs.

November 8, 2024 | 7 min read

Read Blog

Exploring RAG: enhancing LLMs with external knowledge

Harsh Mishra

SRE

Saurabh Hirani

Principal SRE @One2N

Retrieval augmented generation (RAG) for engineers: LLM basics, where standalone models fall short, and the parts of a RAG app such as embeddings.

October 8, 2024 | 9 min read

Read Blog

ClickHouse schema optimization for sparse data sets

Amit Sadafule

Lead Software Engineer

Spandan Ghosh

Content @One2N

Saurabh Hirani

Principal SRE @One2N

Chinmay Naik

CEO @One2N

Schema designs for storing and querying sparse data sets in ClickHouse, including a sparse matrix and separate tables, and when each one fits.

September 19, 2024 | 10 min read

Read Blog

Setting up CloudWatch alerts for EKS clusters: insights and solutions

Mihir Bhagwat

SRE @One2N

Saurabh Hirani

Principal SRE @One2N

Spandan Ghosh

Content @One2N

CloudWatch alerts for EKS node readiness with Container Insights: per-node alarms for static nodes, then Metric Insights and MIN(MIN) for autoscaled ones.

August 30, 2024 | 6 min read

Read Blog

How we used Fly.io to improve a Pipecat-AI chatbot

Ajinkya Wadekar

SRE @One2N

Spandan Ghosh

Content @One2N

A Pipecat-AI chatbot on ECS hit limits at 10 to 15 chat rooms per task, and 6GB images slowed scale-up. How Fly.io machines spun from containers fixed it.

August 19, 2024 | 5 min read

Read Blog

How to use multiple GitHub accounts on one machine

Saurabh Hirani

Principal SRE @One2N

Use multiple GitHub accounts on one machine: a separate SSH key per account, SSH host entries, and includeIf in your Git config to pick the right identity.

August 5, 2024 | 3 min read

Read Blog

Understanding MLOps from a software engineers' perspective

Harsh Mishra

SRE

Spandan Ghosh

Content @One2N

Chinmay Naik

CEO @One2N

Jaideep Khandelwal

CTO @One2N

MLOps for software engineers is DevOps plus data engineering and ML. The MLOps lifecycle, knowledge silos, automation, versioning and experiment tracking.

July 30, 2024 | 7 min read

Read Blog

Database schema migrations: a practical guide to managing schema changes

Spandan Ghosh

Content @One2N

Database schema migrations without manual steps: versioned migrations, running them in every deploy, and tools like Flyway, Liquibase and ORM migrations.

April 25, 2024 | 5 min read

Read Blog

Multi-tenant authorization in Go with Permify for B2B SaaS

Mohit Kumar

Software Engineer

Multi-tenant authorization in Go with Permify, an open-source Zanzibar-based engine: our RBAC model, the schema, and how services call Permify over gRPC.

April 22, 2024 | 6 min read

Read Blog

Achieving CI/CD with previews for your static website hosted on S3

Drasti Kaurav

SRE @One2N

CI/CD for a static website on S3 with preview environments: automated builds and deploys without developer AWS keys, plus CloudFront cache invalidation.

February 24, 2024 | 4 min read

Read Blog

Making your Go CLI binaries self-updatable

Sitaram Shelke

SRE

Make Go CLI binaries self-updatable without brew or apt: fetch the latest release, download the binary for the OS and architecture, and apply the update.

January 25, 2024 | 8 min read

Read Blog

Exposing SaaS APIs privately to customers with AWS PrivateLink

Siddharth Mishra

SRE

Expose SaaS API endpoints privately with AWS PrivateLink, not VPC peering, which breaks on overlapping CIDRs. Same-region latency fell from 0.21s to 0.08s.

December 25, 2023 | 5 min read

Read Blog

AWS SSO with the Go SDK: making SSO auth work in Golang

Chinmay Somani

SRE

Why AWS SSO profiles fail with the AWS SDK for Go v1, and the two fixes: change your ~/.aws/config, or upgrade to the v2 SDK.

October 25, 2023 | 7 min read

Read Blog

Automate RDS secret management using AWS Secrets Manager

Siddharth Shashikar

SRE @One2N

Manage and rotate RDS credentials with AWS Secrets Manager: compare ways to store RDS secrets, then automate creation and rotation with Terraform.

July 14, 2023 | 8 min read

Read Blog

Moving from traditional CD pipelines to GitOps

Jaideep Khandelwal

CTO @One2N

Moving from traditional CD pipelines to GitOps: shared Jenkins credentials and cross-environment access, GitOps principles, and how we adopted Flux CD.

June 17, 2023 | 4 min read

Read Blog

Kubernetes HPA on external metrics with Prometheus Adapter

Akshay Srivastava

SRE @One2N

Kubernetes HPA on external metrics: scaling pods on Redis queues from a server outside the cluster with Prometheus Adapter, plus CPU and memory metrics.

October 14, 2022 | 6 min read

Read Blog

Implementing a real-time analytics engine using big data principles

Jaideep Khandelwal

CTO @One2N

A real-time analytics engine for 50 million data points: replacing a MySQL setup with 48-hour query delays with Apache Spark pipelines and data marts.

July 14, 2022 | 8 min read

Read Blog

Mock API in microservices architecture

Kalpesh Deo

Staff software engineer-II @One2N

Mock APIs in microservices architecture: why running every dependent service locally slows developers down, and how mocks unblock local dev and testing.

June 22, 2022 | 5 min read

Read Blog

Centralized VPN solutions for cloud and on-premise

Sagar Rakshe

SRE

A centralized VPN for cloud and on-premise networks: how a Pritunl cluster replaced shared OpenVPN profiles and cut a client's VPN issues by more than 90%.

April 5, 2022 | 6 min read

Read Blog

Homogenous build setups for local and CI workflows

Sitaram Shelke

SRE

Homogenous build setups give local and CI one interface to build and test. How we used Makefiles and Bash with Jenkins so builds match everywhere.

March 10, 2022 | 3 min read

Talks

Watch Talk

Using LLMs to Improve Incident Response Times | mitramandal.ai - 2025

Jaideep Khandelwal

CTO @One2N

A talk from mitramandal.ai, One2N's AI meetup, on using LLMs to improve incident response times in real engineering workflows.

December 6, 2025 | 37 min

Watch Talk

Sshuttle, poor man's VPN - Devops Days Bangalore 2023

Jaideep Khandelwal

CTO @One2N

A lightning talk on sshuttle: a transparent proxy that works as a lightweight VPN, forwards over SSH, needs no admin, and supports DNS tunneling.

December 13, 2023 | 6 min

Watch Talk

Making your cli self Updateable

Shubham Rasal

SRE

How to make Go binaries self-updatable using Minio's self-update library, with real examples from ProjectDiscovery and Cloudlens.

September 9, 2023 | 3 min

Watch Talk

How to navigate unknown codebases

Chinmay Naik

CEO @One2N

How to navigate an unknown codebase, using a todo app (Ultralist) as the example, with practical takeaways for exploring unfamiliar code.

May 9, 2022 | 33 min

Watch Talk

Learn REST API design - OTP based Auth API

Chinmay Naik

CEO @One2N

Learn REST API design with a real-world example: we build an OTP-based auth API with signup, login, send-otp and validate-otp endpoints.

April 24, 2022 | 53 min

‹ Go

Incident Management ›