Look closer.
Codelooru takes one thing at a time and takes it apart.
Explained
One concept, taken apart properly.
- Explained: NATStart here
- Explained: CoreDNSKubernetes
- Explained: Bloom FiltersData
Architecture
Complete systems, end to end.
- Architecture: KubernetesFull guide
- Architecture: KafkaStreaming
- Architecture: MainframeSeries
In Focus
Current tech, no hype.
Recent posts
August 19, 2026
In Focus: The Data Center Backlash Becomes an Election Issue
Information in this post reflects publicly available sources as of August 19, 2026. A party asks an industry for a favor Political parties usually tell industries what to do. This week the direction reversed. On August 18 the National Republican Senatorial Committee sent a private memo, headlined around Ohio data center risk, to leading AI companies. Axios obtained it and published the following day. The memo argues that Democrats have made data ce… Read More
by Phee Jay
August 19, 2026
Architecture: Policy as Code with OPA
A policy change gets approved at 4pm. It needs to reach 600 OPA instances spread across four clusters in three regions. Someone asks three questions. How long until every instance is enforcing the new rule? How do you know none of them silently kept the old one? And if an auditor asks what the system decided at 4:15pm, where exactly do you look? None of these are Rego questions. You can write a flawless policy and still fail all three. They are qu… Read More
by Phee Jay
August 19, 2026
Explained: Open Policy Agent
A new engineer asks who is allowed to delete an invoice. You say you will find out, which is the first sign of trouble. The answer lives in four places. There is a role check in the API gateway config. There is an if user.role == "admin" in the invoices service. There is a slightly different check in the nightly cleanup job, written a year later by someone who did not know about the first two. And there is a comment in the billing servi… Read More
by Phee Jay
August 03, 2026
Architecture: Zero Trust
A contractor joins for two weeks to fix a reporting dashboard. Someone in IT provisions a VPN account, the contractor connects, and the laptop picks up an address inside the corporate range. The dashboard loads. So does everything else. From that laptop the build servers answer. So does the internal wiki, the file share holding three years of payroll exports nobody archived, the printer management console, and a Jenkins instance last patched in 2… Read More
by Phee Jay