Skip to main content
NewGate Your Terraform Plans: Rules Decide, the Model Explains

Learn DevOps by doing,
not just reading.

707+ articles, guides, and hands-on learning tools for engineers who prefer a terminal over a slide deck.

Join 5,000+ DevOps engineers learning every week

kubectl --watch
$
devops-daily --stats

// featured

Interactive Simulators

Browse all simulators

// categories

Popular Categories

Explore our content by topic

// exercises

Hands-On Exercises

Practice real-world DevOps scenarios with step-by-step guidance

View all exercises

// quizzes

Test Your Knowledge

Short interactive quizzes across Docker, Kubernetes, Terraform, networking, and more

// posts

Latest Posts

Stay up to date with the latest DevOps content

Terraform

Gate Your Terraform Plans: Rules Decide, the Model Explains

A pull request says "3 to add, 1 to change, 1 to destroy" and everyone approves it. This is a GitHub Action that reads the plan JSON, fails the job on selected changes that risk data loss or public exposure, and uses DigitalOcean inference only to write the comment. Measured against twenty labelled plans, including the four it misses.

|14 min read
Networking

How Netflix Ships a Third of the Internet: The CDN They Had to Build

At its 2015 peak Netflix was 37% of North American downstream traffic, and almost none of it came from a commercial CDN. Open Connect is a cache hierarchy built on one asymmetry: Netflix knows tonight what people will watch tomorrow. Here is how the appliances, the nightly fill, the BGP steering and the 800 Gb/s FreeBSD boxes fit together, a runnable comparison of push fill against pull-through caching, and what it teaches anyone running a cache.

|18 min read
DevOps

In-App, Email and Push From One Event

An order ships. The user wants a badge in the app, a digest email later, no push at all, and their own webhook endpoint pinged. The design that handles that without duplicates: an outbox keyed by event, user and channel, preferences evaluated at send time, digest windows, and provider feedback wired back in. With a runnable model and a build-or-buy verdict.

|15 min read
DevOps

Meta Says Every Muse User Gets Their Own VM

Meta says its new consumer agent runs on a dedicated cloud VM per person, with a second agent that has to approve anything leaving that machine and a credential store the agent can use but never read. Those are three infrastructure decisions you face too. Here is what each one defends against, what it costs to build, and a runnable model of the broker, including the injected page that tries to walk out with a token.

|15 min read
DevOps

How Stripe Avoids Double-Charging Anyone

A payment request times out. Did the charge happen? Stripe answers that question with idempotency keys, and the design behind them is more than a cache of responses: locked key rows, recovery points, and a rule about which calls can be retried. Here is the design, a working Postgres implementation, the run where our own version double-created rides, and the constraint that caught it.

|17 min read
Terraform

Who Owns the State File, and Other Questions That Decide Your Week

Most Terraform pain is not HCL. It is state: who is allowed to write it, how it is split, how you find out it no longer matches reality, and how a plan gets reviewed before it applies. Four decisions, a real drift run, and the tooling that exists for each.

|14 min read

// guides

Latest Guides

Step-by-step tutorials to boost your DevOps skills

// tools

DevOps Tools and Calculators

Free, browser-only utilities. CIDR, JWT, base64, UUID, cron, K8s sizing, YAML. No sign-up, no server.

// about

DevOps Daily is a free, independent education platform for engineers who want to learn by running things, not by reading pitch decks. Kubernetes, Docker, Terraform, CI/CD, observability, and security, through hands-on simulators, quizzes, exercises, and a weekly newsletter.

Free
$0
forever
Tools
55
interactive
Subscribers
5,000+
engineers
Cadence
Weekly
no spam
devops-daily --subscribe
$ echo "Weekly DevOps digest. No spam. Unsubscribe anytime."
Weekly DevOps digest. No spam. Unsubscribe anytime.
$ subscribe --email
$

5,000+ engineers subscribed