Pinned Tweet
A few weeks ago, I started turning the Kubernetes commands I use every day into something I could actually keep as a reference.
Days of writing.
Reviewing commands.
Creating diagrams.
Simplifying explanations.
Going through every page again and again.
It finally became a 20-page Kubernetes Handbook. โธ๏ธ
I decided to give it away for free to DevOps & Kubernetes learners.
Less Googling. More practicing. ๐
๐ Free download: asynctrix.gumroad.com/l/olpgโฆ
AsyncTrix retweeted
4 Pillars of a DeepAgent ๐ฅ
create_deep_agent()
โ
โโโ Planning
โโโ Filesystem
โโโ Subagents
โโโ Instructions
Distributed Systems Fundamentals ๐
Distributed Systems Fundamentals, Part 1/3.
A service is only as reliable as its ability to handle failures in the services it depends on.
In this series, we'll explore practical distributed systems concepts that every backend engineer should understand, starting with timeouts, retries, exponential backoff, and jitter.
A few rules to remember:
โข Always set timeouts for network calls.
โข Use exponential backoff to avoid retrying too aggressively.
โข Add jitter to prevent retry storms.
โข Retry only when it makes sense, and make operations idempotent.
Because in distributed systems, failures are inevitable. The goal is to stop one failure from taking down everything else.
4 Pillars of a DeepAgent ๐ฅ
create_deep_agent()
โ
โโโ Planning
โโโ Filesystem
โโโ Subagents
โโโ Instructions
AsyncTrix retweeted
Hiring Post ๐ซ
Hiring - Junior Python Developers
1. Must have 1 year experience shipping with Python
2. Ai Native; uses agents for shipping
3. Shipped features end to end; (we've asked for a loom video demo for this)
Details and application link:
jobs.clanx.ai/o/junior-backeโฆ
Happy Job Hunting :)
AsyncTrix retweeted
31. Why Does VPC Peering Get Difficult at Scale? ๐
Connecting 2 VPCs is simple:
VPC A โ VPC B
That's VPC Peering.
But what happens when you have 50 VPCs?
You end up managing many point-to-point connections and routes.
That's where Transit Gateway helps.
VPC Peering
โ Simple point-to-point connectivity
Transit Gateway
โ Centralized hub for many VPCs
Start simple.
Scale smart. ๐
30. Why Use VPC Endpoints? ๐
Your private EC2 needs to access AWS services.
Do you really need to send that traffic through a NAT Gateway?
VPC Endpoints let you access supported AWS services privately.
Gateway Endpoint
โ S3 & DynamoDB
โ Route table based
โ No NAT Gateway required
Interface Endpoint
โ AWS PrivateLink
โ Private IPs / ENIs
โ Many AWS services
Simple understanding:
Gateway โ S3 / DynamoDB
Interface โ Many other AWS services
Less NAT dependency.
Private connectivity.
Better network design. ๐
VPC Peering Simplified ๐
31. Why Does VPC Peering Get Difficult at Scale? ๐
Connecting 2 VPCs is simple:
VPC A โ VPC B
That's VPC Peering.
But what happens when you have 50 VPCs?
You end up managing many point-to-point connections and routes.
That's where Transit Gateway helps.
VPC Peering
โ Simple point-to-point connectivity
Transit Gateway
โ Centralized hub for many VPCs
Start simple.
Scale smart. ๐
31. Why Does VPC Peering Get Difficult at Scale? ๐
Connecting 2 VPCs is simple:
VPC A โ VPC B
That's VPC Peering.
But what happens when you have 50 VPCs?
You end up managing many point-to-point connections and routes.
That's where Transit Gateway helps.
VPC Peering
โ Simple point-to-point connectivity
Transit Gateway
โ Centralized hub for many VPCs
Start simple.
Scale smart. ๐
30. Why Use VPC Endpoints? ๐
Your private EC2 needs to access AWS services.
Do you really need to send that traffic through a NAT Gateway?
VPC Endpoints let you access supported AWS services privately.
Gateway Endpoint
โ S3 & DynamoDB
โ Route table based
โ No NAT Gateway required
Interface Endpoint
โ AWS PrivateLink
โ Private IPs / ENIs
โ Many AWS services
Simple understanding:
Gateway โ S3 / DynamoDB
Interface โ Many other AWS services
Less NAT dependency.
Private connectivity.
Better network design. ๐
AsyncTrix retweeted
๐จ Your docker pull can be a security problem.
Docker Engine 29.9.1 just shipped with an updated containerd 2.4.2.
The update fixes multiple vulnerabilities where a malicious or untrusted registry could potentially crash containerd during image pulls.
One issue involves a malformed digest.
Another involves a crafted "Content-Length" response during parallel layer downloads.
And another could allow unbounded layer data to consume the host's disk before size validation.
This is why container security isn't only about what's running inside the container.
Even the image pulling process itself is part of your attack surface.
If you're running Docker Engine, check your nodes and upgrade to 29.9.1.
Especially if those nodes pull images from registries you don't fully control.
๐จ Your docker pull can be a security problem.
Docker Engine 29.9.1 just shipped with an updated containerd 2.4.2.
The update fixes multiple vulnerabilities where a malicious or untrusted registry could potentially crash containerd during image pulls.
One issue involves a malformed digest.
Another involves a crafted "Content-Length" response during parallel layer downloads.
And another could allow unbounded layer data to consume the host's disk before size validation.
This is why container security isn't only about what's running inside the container.
Even the image pulling process itself is part of your attack surface.
If you're running Docker Engine, check your nodes and upgrade to 29.9.1.
Especially if those nodes pull images from registries you don't fully control.
AsyncTrix retweeted
30. Why Use VPC Endpoints? ๐
Your private EC2 needs to access AWS services.
Do you really need to send that traffic through a NAT Gateway?
VPC Endpoints let you access supported AWS services privately.
Gateway Endpoint
โ S3 & DynamoDB
โ Route table based
โ No NAT Gateway required
Interface Endpoint
โ AWS PrivateLink
โ Private IPs / ENIs
โ Many AWS services
Simple understanding:
Gateway โ S3 / DynamoDB
Interface โ Many other AWS services
Less NAT dependency.
Private connectivity.
Better network design. ๐
29. Security Group vs NACL โ๏ธ
Same VPC. Different jobs.
Security Group
โ Resource level
โ Stateful
โ Allow only
NACL
โ Subnet level
โ Stateless
โ Allow + Deny
โ Rules evaluated in order
Easy mental model:
๐ Security Group โ Protect the resource
๐ง NACL โ Filter the subnet
Use both for defense in depth.
Understand VPC Endpoints ๐
30. Why Use VPC Endpoints? ๐
Your private EC2 needs to access AWS services.
Do you really need to send that traffic through a NAT Gateway?
VPC Endpoints let you access supported AWS services privately.
Gateway Endpoint
โ S3 & DynamoDB
โ Route table based
โ No NAT Gateway required
Interface Endpoint
โ AWS PrivateLink
โ Private IPs / ENIs
โ Many AWS services
Simple understanding:
Gateway โ S3 / DynamoDB
Interface โ Many other AWS services
Less NAT dependency.
Private connectivity.
Better network design. ๐
30. Why Use VPC Endpoints? ๐
Your private EC2 needs to access AWS services.
Do you really need to send that traffic through a NAT Gateway?
VPC Endpoints let you access supported AWS services privately.
Gateway Endpoint
โ S3 & DynamoDB
โ Route table based
โ No NAT Gateway required
Interface Endpoint
โ AWS PrivateLink
โ Private IPs / ENIs
โ Many AWS services
Simple understanding:
Gateway โ S3 / DynamoDB
Interface โ Many other AWS services
Less NAT dependency.
Private connectivity.
Better network design. ๐
29. Security Group vs NACL โ๏ธ
Same VPC. Different jobs.
Security Group
โ Resource level
โ Stateful
โ Allow only
NACL
โ Subnet level
โ Stateless
โ Allow + Deny
โ Rules evaluated in order
Easy mental model:
๐ Security Group โ Protect the resource
๐ง NACL โ Filter the subnet
Use both for defense in depth.
AsyncTrix retweeted
Lambda is starting to look less like just functions
AWS just introduced Lambda Web Functions๐ฅ
The interesting part?
You can run a normal HTTP application on Lambda without rewriting it into a Lambda handler.
Your app listens on a port.
Lambda takes care of the infrastructure and scaling.
It can also handle multiple requests concurrently in the same execution environment.
This feels like AWS is bringing the simplicity of deploying a web service to the serverless model.
Lambda is getting closer to running apps, not just functions.
share.google/Zp3np7uvHSdOlZeโฆ
Lambda is starting to look less like just functions
AWS just introduced Lambda Web Functions๐ฅ
The interesting part?
You can run a normal HTTP application on Lambda without rewriting it into a Lambda handler.
Your app listens on a port.
Lambda takes care of the infrastructure and scaling.
It can also handle multiple requests concurrently in the same execution environment.
This feels like AWS is bringing the simplicity of deploying a web service to the serverless model.
Lambda is getting closer to running apps, not just functions.
share.google/Zp3np7uvHSdOlZeโฆ
7/8 The interesting part is that these aren't four separate agents or products.
They work together around the same agent.
LangGraph provides the runtime.
Deep Agents provides the harness that helps the agent manage longer, more complex work.









