lucavallin

Author here. The main idea is to treat instructions as context and put anything you actually need guaranteed into tests, lint and CI. The other part is pruning. Claude Code keeps usage counters in ~/.claude.json, and most of what I had installed had never run. Happy to answer questions.

A comprehensive but quick walkthrough of everything you need to know about GCP networking: VPCs, subnets, routing, firewalls, Shared VPC, GKE networking, load balancing, Cloud NAT, hybrid connectivity, VPC Service Controls, DNS, packet inspection, and how to operate all of it. Written for engineers who need a solid mental model in 15 minutes.

Hello! This is a practical write-up based on notes from docs, blog posts, and Liz Rice’s Container Security. I pulled together the main ideas that helped me better understand how container security actually works, and a bunch of simple things you can do to make containers safer in practice.

I published a new blog post: "A Tour of eBPF in the Linux Kernel: Observability, Security and Networking". I recently read the book "Learning eBPF" by Liz Rice and condensed my notes into this article. Great for a quick overview before you decide to dive deeper!

A Practical tour of eBPF in the Linux Kernel: Observability, Security and Networking.

eBPF lets you run small, verified programs inside the Linux kernel, enabling fast observability, security, and networking without changing application code. This practical tour explains why eBPF matters now, how programs are compiled, verified, JITed, and attached to events, and how maps and ring buffers move data. You'll leave with simple demos and a clear mental model to start experimenting.

I tried to write an end-to-end guide on Kubernetes networking, covering the full journey from the foundational Linux stack and CNI up to advanced topics like mTLS and service meshes. It's a long-ish read, but aims to be a good "intro" resource. Feedback is welcome!