martinuke0's Blog

Abstract diagram showing white, grey, and black object nodes connected by pointers representing tri-color marking.

Implementing Concurrent Garbage Collection: A Deep Dive into Tri-Color Marking for Low-Latency Runtimes

A working-engineer’s tour of tri-color invariant, write barriers, and the SATB vs. incremental-update trade-offs that make modern concurrent GCs possible.

Layered diagram of seven Linux namespaces surrounding a containerized process tree.

Inside Linux Namespaces: Unpacking the Kernel Primitives That Power Container Isolation

Containers look like lightweight VMs, but they’re really just processes wrapped in namespaces and cgroups. We unpack mount, PID, network, UTS, IPC, user, and cgroup namespaces, trace how runtimes like containerd wire them together, and explore the failure modes every SRE should know.

Stylized illustration of a bloom filter grid and an LSM-tree SSTable stack.

Implementing Bloom Filters in LSM-Tree Storage Engines for High-Throughput Key Lookups

Bloom filters are the unsung hero of LSM-tree reads: a few bits per key let engines like RocksDB skip 99% of disk seeks. Here’s the math, the tradeoffs, and what to tune in production.

Abstract representation of encrypted network traffic and connection resumption between client and server.

Implementing TLS 1.3 Zero Round-Trip Resumption: Mechanisms, Pitfalls, and Production Deployment

How TLS 1.3 0-RTT resumption actually works on the wire, why replay attacks make it risky for non-idempotent requests, and the patterns real teams use to deploy it safely behind NGINX, Envoy, and HAProxy.

Abstract diagram of traffic flowing through a load shedding filter before reaching backend services.

Designing Adaptive Load Shedding Strategies: Patterns, Thresholds, and Failover Mechanisms for Overload Resilience

How to design load shedding that adapts in real time, sets thresholds based on signal quality, and fails over gracefully when the system is already on fire.