Hi this is rathwjj’s personal blog,

TL;DR: Software Supply Chain Security helps us protect the software components, dependencies, and processes involved in building and delivering software. A Software Bill of Materials (SBOM) gives us an inventory of those components, helping us identify vulnerabilities and respond when problems are discovered. I believe in checklists. Before completing a task, I want to know what needs to be done, what has already been done, and what might have been missed. In infrastructure, overlooking one small dependency can sometimes create a much bigger problem. ...

TL;DR: Shift-left security integrates security practices earlier in the software development lifecycle. Automation helps teams identify vulnerabilities, misconfigurations, and policy violations before they reach production. Before discussing Shift-Left Security, we need to understand the overall picture. What do we mean by “left” and “right” in the development lifecycle, and what changes when we shift security to the left? Understanding the Software Development Lifecycle A simplified software development lifecycle looks like this: ...

This page lists selected professional certifications and transcripts. For the complete list of certifications, visit here. Cisco Learning Transcript Microsoft Learn Transcript IBM Skillsbuild Motorola Solutions | KCS Publisher License Exam Google Project Management | Coursera

TL;DR: Mutual TLS (mTLS) extends standard TLS by requiring both the client and server to authenticate each other using digital certificates. It is an important building block for Zero Trust security and encrypted communication between services in cloud-native environments. Before exploring Mutual TLS (mTLS), let’s first review Transport Layer Security (TLS). What is Transport Layer Security (TLS)? Transport Layer Security (TLS) is a cryptographic protocol that provides confidentiality, data integrity, and authentication for communications over a network. Common use cases include HTTPS, SMTP, IMAP, and gRPC. ...

TL;DR: A Service Mesh provides a dedicated infrastructure layer for managing communication between services. It can standardize service-to-service security, traffic management, and observability across distributed applications, with minimal changes to application code. Modern business applications are often divided into smaller, interconnected services. For example, an Inventory service may need to communicate with Procure and Distribute services to fulfill a single request. A typical workflow might involve a Web UI, an application service, a caching layer, a database, inventory verification, purchase confirmation, and a payment gateway. As the number of services grows, managing their communication becomes increasingly complex. ...

TL;DR: Progressive Delivery is a way to release software gradually instead of making a new version available to everyone at once. We can start with a small group of users, monitor the results, and gradually increase the rollout if everything works as expected. What Is Progressive Delivery? Imagine you have developed a new feature or updated an application. The software has passed testing and staging, and now you are ready to release it to production. ...

TL;DR: Feature flags allow teams to control when and for whom application functionality is enabled, independently of code deployment. They support gradual rollouts, experimentation, and rapid feature disablement. Similar configuration switches can control infrastructure provisioning, although they operate at a different layer. What Are Feature Flags? Imagine deploying a new checkout feature to production while keeping it disabled for users. The code is already deployed, but the functionality remains hidden until the team decides to enable it. ...

Throughout my career in network and systems engineering, continuous learning has been essential to keeping up with changing technologies and infrastructure practices. This page collects learning platforms, technical documentation, hands-on labs, and educational resources covering networking, cloud infrastructure, platform engineering, and emerging technologies. These resources provide different ways to build technical knowledge, explore new tools, and develop practical skills. Networking & Infrastructure Cisco Cisco provides learning materials and technical references for networking fundamentals, enterprise network architecture, security, and automation. ...

TL;DR: Observability helps engineers understand what is happening inside a system by examining its outputs. Logs, metrics, and traces provide complementary perspectives that help identify, investigate, and resolve problems. Remember Grafana? In that article, we discussed logs, metrics, and traces. These are commonly known as the three pillars of observability, or O11y. Each provides a different perspective on a system. Metrics: Numerical measurements collected over time, such as response time, CPU utilization, memory usage, and error rate. They help engineers identify abnormal behavior, monitor trends, and trigger alerts when predefined conditions are met. ...