KBY Technologies Logo
BACK TO DIRECTORY
Alistair Vance
KBY EDITORIALAUTHOR PROFILE

Alistair Vance

PRINCIPAL INFRASTRUCTURE ENGINEER
Alistair Vance brings over fifteen years of experience architecting resilient, multi-region Kubernetes clusters for tier-one financial institutions. A core contributor to several CNCF incubation projects, his expertise lies in constructing automated self-healing infrastructures and establishing stringent service level objectives. He focuses relentlessly on operational excellence and eliminating toil through advanced eBPF-based observability.
PUBLISHED ARTICLES
10
EDITORIAL ROLE
CONTRIBUTOR
AREAS OF EXPERTISE
MicroservicesPostgreSQLBGPNetwork SecurityRouting
PUBLISHED ARTICLES
10 analyses shown
Mechanic organizing a toolkit outdoors on a sunny day, highlighting essential hand tools for repair and maintenance.

Failure-Aware PowerShell Architecture for a Bounded IT Toolkit

Design a bounded PowerShell workflow for The IT Toolkit with validated architecture, failure modes, security boundaries and a tested rollback path.

01/08/20267 minAlistair Vance
Hunting BGP Route Hijacking in Real-Time Networks

Hunting BGP Route Hijacking in Real-Time Networks

Real-time BGP route hijacking detection using RPKI validation, AS-path anomaly scoring, and prefix origin tracking to stop network traffic diversion.

30/07/20268 minAlistair Vance
Designing Compensating Sagas for Microservices

Designing Compensating Sagas for Microservices

How orchestrator state machines, compensating handlers and idempotency ledgers make the saga orchestration pattern safe for distributed writes.

29/07/202611 minAlistair Vance
Chernobyl’s Hostile Edge Computing Stack

Chernobyl’s Hostile Edge Computing Stack

How rad-hardened silicon, LoRaWAN dosimetry mesh and quadruped LiDAR scans keep the Chernobyl NSC digital twin synchronised under gamma flux.

28/07/202612 minAlistair Vance
TOCTOU Race Conditions in Admission Webhooks

TOCTOU Race Conditions in Admission Webhooks

resourceVersion snapshots and subresource rule gaps create a TOCTOU race condition that lets attackers bypass Kubernetes admission webhooks.

28/07/202611 minAlistair Vance
Postgres Replication Slot Bloat: Root Causes & Fixes

Postgres Replication Slot Bloat: Root Causes & Fixes

WAL retention math, pg_replication_slots monitoring, and max_slot_wal_keep_size tuning to stop replication slot bloat from filling pg_wal to disk.

28/07/202611 minAlistair Vance
Building a DNSSEC Chain-of-Trust Validator

Building a DNSSEC Chain-of-Trust Validator

Walking the DS-DNSKEY-RRSIG delegation chain node by node to build a DNSSEC validation tool that pinpoints exactly where trust breaks.

25/07/202610 minAlistair Vance
Stopping Swap Thrashing With OOM Killer Tuning

Stopping Swap Thrashing With OOM Killer Tuning

How PSI thresholds, oom_score_adj weighting and systemd-oomd close the gap the kernel OOM killer leaves open during swap thrashing.

21/07/202611 minAlistair Vance
Backend-for-Frontend Patterns for API Fan-Out

Backend-for-Frontend Patterns for API Fan-Out

How client-specific BFF layers, aggregation logic and edge deployment stop API fan-out from strangling mobile and web latency budgets.

18/07/202610 minAlistair Vance
Diagnosing PgBouncer Pool Exhaustion Under Load

Diagnosing PgBouncer Pool Exhaustion Under Load

Why 40 stateless API pods can saturate PgBouncer while Postgres sits idle, and how transaction-mode pooling and pool sizing math fix it.

16/07/202610 minAlistair Vance