Services

Resources

Company

Our Work

Blog

Pragmatic Software Engineering Stories,

Read PSES

The database that was quietly eating itself
P50, P90, and P99 alerts keep firing. APIs are slow. You investigate. A slow-burning incident story about a database degrading itself over time.

Read PSES

Debugging a website that worked on every device except mine
Debugging a website that worked on every device except mine. Storytime! Colleague: Hey, can anyone help? I can't access go.dev on my work laptop. Tried different browsers, cleared DNS cache, nothing works.

Read PSES

A curious case of Postgres choosing the wrong index
A core feature goes down for some users during peak traffic. You're on call. A story about Postgres picking the wrong index and what it took to fix it.

Read PSES

Data engineering mystery - rerouting large data in Kafka
You're a tech lead pulled into a Kafka issue by a colleague. A data engineering mystery about rerouting large-scale data without breaking the pipeline.

Read PSES

The Mystery of Failing Database Writes
You're on call when a PagerDuty alert fires for the main transactional database. An SRE story about diagnosing failing writes under pressure.

Read PSES

A story about a nightmare scenario for every SRE
A cloud security failure wakes you up via an AWS billing alarm. A story about why good engineering practices matter during the One-to-N journey.

Read PSES

Curious case of debugging failing webhook API requests
A short debugging story to start off the new year. Dev: Our backend has a webhook API that a third party will invoke over the internet. The customer team from that third party is on the call. They are getting a 500 error when making this API call.

Read PSES

A curious story of debugging Machine Learning model performance
You're woken up by a p90 latency-related alert. This alert is for the main API service, so you start investigating right away.

Read PSES

Database Reliability - Migrating Terabyte from self-hosted MySQL to GCP CloudSQL
You manage a 6-node self-hosted MySQL cluster with 1.5TB on production. The CTO wants to move to a managed service. A harder migration than expected.

Read PSES

Database Reliability - Zero Downtime Schema Migrations with MySQL
You join a team as lead SRE, and the CTO asks you to manage and scale a self-managed 6-node MySQL cluster on production.

Read PSES

Migrating Terabytes of metrics data with zero downtime
You run VictoriaMetrics at 30M time series per minute. The CTO wants costs cut without compromising reliability. A zero-downtime migration story.

Read PSES

Building Pull Request-based ephemeral Preview environments on Kubernetes
A CTO wants Heroku-style ephemeral preview apps rebuilt on Kubernetes after migrating to AWS EKS. A story about making it work from scratch.

Read PSES

My app is slow. Can you fix it?
A freshly funded founder calls you to fix webapp performance problems. A story about diagnosing slow systems under pressure with no context.

Read PSES

Taming GCP networking cloud costs
Here's a story of a pragmatic tech lead who understands networking fundamentals like iptables, packet routing and NAT saved thousands of $$$ on cloud costs.

Read PSES

A case of Terabyte scale backup and recovery solution
You're tasked with backing up 1.5TB of data daily to S3. You start asking questions. A story about designing backup systems at terabyte scale.

Read PSES

Not all debugging stories have a happy ending
You migrated services from VMs to Kubernetes. Everything works except one service. A story about deciding which problems are worth solving.

Read PSES

A curious case of slow APIs
On your first day as tech lead, the CTO says the video processing API is slow and points at AWS EFS. A story about finding the real cause.

Read PSES

Unblocking Team members
A teammate has been blocked for two days without AWS credentials. A story about ownership, communication, and how blockers compound silently.

Subscribe for more such content

Get the latest in software engineering best practices straight to your inbox. Subscribe now!

Subscribe for more such content

Get the latest in software engineering best practices straight to your inbox. Subscribe now!

Subscribe for more such content

Get the latest in software engineering best practices straight to your inbox. Subscribe now!

Subscribe for more such content

Get the latest in software engineering best practices straight to your inbox. Subscribe now!

Blogs.

Illustration of a wall clock at 2:00 beside versioned policy cards v17 and v18 with a W+1 window token tag, above a stream of events

Read Blog

How temporal versioning prevents configuration drift in stream processing

Kalpesh Deo

Lead Software Engineer @One2N

How temporal versioning with effective-time configuration and window tokens stops configuration drift across tenant time zones, rollovers and event replay.

Read Blog

Why Your EKS Auto Mode NodeClass Keeps Reverting to Default

Ananya Dasgupta

SRE @One2N

How a Secondary CIDR rollout on EKS Auto Mode exposed a configuration ownership conflict between Argo CD and Auto Mode's own controller - and a lesson about which parts of your NodeClass you don't actually own.

Read Blog

OpenSearch Workload Management (WLM): How to Control Heavy Search Queries

Srivatsa RV

SRE @One2N

Learn how OpenSearch Workload Management (WLM) isolates heavy search queries with workload groups, resource limits, and resiliency modes - without over-provisioning.

Read Blog

How to evaluate AI SRE agents for production?

Hemant Kumar

Staff SRE @One2N

AI SRE agents promise faster incident response. The hard part is knowing which ones you can trust when production is noisy. This post shares how we evaluated OpenSRE before we let any of them influence a production incident.

Read Blog

Conway's Law as a lever to fix legacy architectures

Chinmay Naik

CEO @One2N

Conway’s law talks about how software architecture mirrors the org chart. Learn what this means in practice and how to use Reverse Conway Maneuver to refactor existing system architectures.

Read Blog

Hardening Kubernetes Security with Istio Ambient Mode on Flat Networks

Harshwardhan Mehrotra

SRE @One2N

Spandan Ghosh

Content @One2N

Learn how One2N used Istio Ambient mode to enforce zero-trust security on a flat EKS Hybrid network - with mTLS, SPIFFE identity, egress control, and NetworkPolicies.

Blogs

Blogs.

Illustration of a wall clock at 2:00 beside versioned policy cards v17 and v18 with a W+1 window token tag, above a stream of events

Read Blog

How temporal versioning prevents configuration drift in stream processing

Kalpesh Deo

Lead Software Engineer @One2N

How temporal versioning with effective-time configuration and window tokens stops configuration drift across tenant time zones, rollovers and event replay.

Read Blog

Why Your EKS Auto Mode NodeClass Keeps Reverting to Default

Ananya Dasgupta

SRE @One2N

How a Secondary CIDR rollout on EKS Auto Mode exposed a configuration ownership conflict between Argo CD and Auto Mode's own controller - and a lesson about which parts of your NodeClass you don't actually own.

Read Blog

OpenSearch Workload Management (WLM): How to Control Heavy Search Queries

Srivatsa RV

SRE @One2N

Learn how OpenSearch Workload Management (WLM) isolates heavy search queries with workload groups, resource limits, and resiliency modes - without over-provisioning.

Blogs