I had a blast learning about Linkerd lately. It’s a service mesh designed to help with traditional issues regarding service to service communication

Many times we would have to write a lot of code and operational overhead to achieve:

A service mesh can help here by injecting a discrete proxy next to every application which hijacks requests coming in and out of that service.

I cover these challenges and service mesh basics in my Introduction to Service mesh video on YouTube.

Step 1 : We need a Kubernetes Cluster

Lets create…


Secret management has always been a hot topic since the rise of Kubernetes. Many cloud providers have sold us their Vault implementations, and then some of us may have also heard of the open source Vault by HashiCorp.

Personally, for me, Vault implementations have always seemed somewhat over complicated. Why is that ?

How would I attempt to secure secrets on Kubernetes?

In an environment like Kubernetes I can use the built-in secret abstraction that the API provides. It allows me to decouple secrets so developers can refer to secret by name and Kubernetes will mount the actual secret into the applications file system at the time of scheduling…


Lately I’ve been reflecting back on the last couple of years when I used to be in a DevOps focused role. As many of you may already know DevOps is more about the way we work as developers and operational folk rather than a job role. So when dealing with developers or operations people, I’ve always tried to teach and cultivate a DevOps mindset to help those people get things done efficiently. Also, try to make myself redundant so those people can focus on getting things done, rather than rely on me to provide a service. Doing this over the…


The Challenge

So a few weeks back I released a video about using Linux BPF to build up a container which is capable of profiling CPU of other containers on the same host. This would be particularly useful for having a portable container in a cloud managed container environment where one may not have direct access to install stuff on the host. For example, AKS, GKE or EKS. Although some cloud providers give you SSH access to the host, I’d like to pretend I can’t. So how do you profile processes without SSH?

So I wanted to find a way I could…


Starting with Docker

Over the past few years I’ve worked a lot with container workloads. It all starts with a need to run containers whether its a batch job, a microservice or some scripts. Learning about containers will have you learn about Linux since containerisation is made possible by Linux kernel features, starting with cgroups and namespaces Docker files are Linux file system overlay definitions, volumes are Linux mount points, and entrypoints are Linux commands with arguments. So it’s hard to build containers without learning a few things about Linux.

Since all workloads I work on are running in containers, on Linux, there…


Throughout my career I’ve been mostly focused on development. I used to be a C# .NET developer and dabbled in operations work, as I’ve always been involved in production deployments once code was written.

This gave me a good overview of all the frustrations that system admins and operations folks had, as well as the developer frustrations, since I’ve dealt with complex code myself.

Over the last 5 years, I’ve moved into a DevOps focused role, understanding both sides of the “Dev” and “Ops” fence. …


Today I wanted to share one of the most simple solutions to one of the most complex part of software performance engineering, and it’s called “mocking”

What is mocking?

The concept of mocking is simple. Let’s assume we have a system called “FOO”. System foo, depends on system “BAR”.

System “Foo” depends on System “Bar”

Mocking is a concept of simulating the behavior of a real system in a controlled way. We can achieve mocking by building a simple imitated dummy system that behaves like the real thing.

So let’s say we want to test system Foo in isolation without being dependent on system Bar. …


I get this question quite often. People ask whats a good way to host an AngularJS, ReactJS, JavaScript, JQuery, Bootstrap HTML based website.

In this post, I am going to demonstrate how to create and run a web server that’s great at serving static HTML websites. It’s called NGINX, let’s do this!

You might be thinking, Why NGINX ?

NGINX is extremely fast. It can serve thousands of requests per second. NGINX is also very lightweight. It’s optimized to serve static files.

When running on a server, you can hardly notice it’s there when you look at the CPU\Memory footprint.


My music finder project part 1

I started a YouTube journey recently and I immediately encountered a challenge. How to obtain music that is good and legal to use commercially in YouTube videos ?

Sound Cloud has a search filter that allows one to search on commercially usable music. I have not seen this ability on Spotify or YouTube music. One problem I found with that feature was when I found a song I liked, and looked at the related songs, they’re all illegal to use commercially. So the license based filters don’t apply to related songs. …


As a kid, I always loved playing with computers. My mom taught me how to use MS DOS on a 386 when I was about 6 years old and I used to play Prince of Persia, Commander Keen and many other games

Throughout my school life, my friends and I used to meet up at each others houses and have LAN parties where we just play games all weekend on a local area network. From then on, I ended up studying Computer Science. I did not know anything about the industry of programming. …

Marcel Dempers

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store