CloudFront in Front of ALB: Receiving Traffic Only from the CDN
· Sanjeev Pandey
Bots hit our ALB directly while we thought CloudFront was 'the front door'. Locking the ALB to the CDN origin was the fix we should've done earlier.
DevOps and related articles.
· Sanjeev Pandey
Bots hit our ALB directly while we thought CloudFront was 'the front door'. Locking the ALB to the CDN origin was the fix we should've done earlier.
· Sanjeev Pandey
Someone turned on a public S3 bucket from a sandbox account tied to prod data paths. SCPs became the boundary we couldn't skip anymore.
· Sanjeev Pandey
Four or five DevOps engineers, all running Terraform from laptops and sure we owned the stack — until state locks, version drift, and silent applies collided with what we said we wanted from platform engineering.
· Sanjeev Pandey
Why public DNS like 8.8.8.8 feels fast and stable — a walk through Anycast, routing, and how the same IP can live in multiple places.
· Sanjeev Pandey
A closer look at when Kube-proxy (Service) is no longer used for service communication — with Ingress Controller and Service Mesh.
· Sanjeev Pandey
DNS vs Name Server — they're often used interchangeably, but there's a small, important difference. Here's a clear explanation with a real-world example (GoDaddy + Route53).
· Sanjeev Pandey
There is a lot fuss about the term called CI/CD in DevOps world — here’s a clear breakdown of CI, CD (delivery), and CD (deployment) as concepts, not just tools.
· Sanjeev Pandey
First post on Back to Basics — a blog about understanding DevOps fundamentals, not just copying commands.