ID: ALISTAIR-VANCELevel 5 (Admin)

Alistair Vance

PRINCIPAL INFRASTRUCTURE ENGINEER

Alistair Vance brings over fifteen years of experience architecting resilient, multi-region Kubernetes clusters for tier-one financial institutions. A core contributor to several CNCF incubation projects, his expertise lies in constructing automated self-healing infrastructures and establishing stringent service level objectives. He focuses relentlessly on operational excellence and eliminating toil through advanced eBPF-based observability.

TOTAL COMMITS

STATUS

ACTIVE

PRIMARY STACKS

APNsDevice ManagementMDMPKIKubernetes CNI

AUTHOR_PLAYBOOKS

7 Articles

Mitigating MDM Certificate Rotation Storms

A technical breakdown of MDM certificate rotation architecture, covering APNs trust chains, enrollment storms, and diagnostic tooling for fleet operators.

07/07/20265 min

MTU Blackholes: TCP MSS Clamping Guide

A technical breakdown of TCP MSS clamping to prevent MTU blackholes in VXLAN, WireGuard, and IPsec overlay networks, with iptables and nftables configs.

07/07/20265 min

Real-Time eBPF Network Observability at Scale

Learn how eBPF XDP hooks, BPF maps, and ring buffers enable kernel-level network observability without sidecar proxies or packet capture overhead.

07/07/20265 min

Visualising AD Replication Latency & Tombstones

A technical breakdown of building an AD replication latency and tombstone visualiser using repadmin, USN vectors, and time-series alerting.

07/07/20265 min

Fixing State Drift in GraphQL Gateways

A technical breakdown of query plan drift, APQ cache poisoning, and entity cache desync in distributed GraphQL gateways, with Apollo Router remediation configs.

07/07/20265 min

Layer 7 ZTNA: WireGuard & Go Architecture

A technical breakdown of Layer 7 ZTNA architecture combining WireGuard transport encryption with a Go-based identity-aware proxy and OPA policy enforcement.

07/07/20265 min

Multi-Region Terraform State Locking at Scale

A deep dive into sharding Terraform state locking across AWS regions using DynamoDB Global Tables to eliminate lock contention and single points of failure.

07/07/20265 min