How to Validate Untrusted `traceparent` and Trim `tracestate` at Public Ingress
Validate incoming W3C trace context with a standard propagator and apply an explicit tracestate and sampling policy at public ingress.
12 Technical Guides RSS
Engineering Cloud & DevOps - Blog by Mahin Raza
Practical engineering guides on AWS, Kubernetes, Observability, OpenTelemetry, Prometheus, Incident Response, and Site Reliability Engineering by Mahin Raza.
Latest Engineering Guides
Deep dives into cloud infrastructure, Kubernetes, observability, and reliability.
SRE & Incident Response Sep 29, 2026 · 5 min read
How to Train a Shadow Incident Commander with Drills, Handoffs, and Reviews
Develop incident commanders through structured observation, realistic drills, explicit handoffs, supervised command, and evidence-based readiness reviews.
Observability & Tracing Sep 29, 2026 · 4 min read
How to Handle Sampled-Out or Expired Traces in Trace-ID Support Workflows
Design customer support lookup and fallback steps for trace IDs that were sampled out, never ingested, or removed by retention.
Observability & Tracing Sep 29, 2026 · 4 min read
How to Trace Telemetry Loss Across Agent, Collector, Remote Write, and Backend
Locate telemetry loss with per-boundary flow evidence, queue age and a known canary while accounting for retries, filtering and temporality.
Observability & Tracing Sep 29, 2026 · 3 min read
How to Stop OpenTelemetry Baggage from Leaking Customer IDs to Third-Party APIs
Keep customer identifiers out of third-party requests by applying destination-aware baggage policy before HTTP instrumentation injects headers.
SRE & Incident Response Sep 29, 2026 · 4 min read
How to Write Useful Incident Status Updates Without a Recovery ETA
Write incident updates that remain useful without a recovery estimate by stating current impact, remaining uncertainty, concrete actions, and the next communication checkpoint.
SRE & Incident Response Sep 29, 2026 · 5 min read
How to Split or Merge Incidents That Share an Upstream Dependency
Coordinate simultaneous incidents around shared dependencies while preserving distinct customer impact, responder ownership, recovery criteria, and historical incident identity.
SRE & Incident Response Sep 29, 2026 · 4 min read
How to Run Incident Command Safely with Combined Roles on a Small Team
Run incident command with one to four responders by making combined roles explicit, protecting operational attention, and splitting responsibilities before coordination fails.
Observability & Tracing Sep 29, 2026 · 3 min read
How to Alert on Seasonal Traffic with Baselines, SLOs, and Volume Guards
Combine seasonal traffic diagnostics with SLO burn alerts and explicit low-volume policies without allowing baselines to learn an outage.
Observability & Tracing Sep 29, 2026 · 3 min read
Why Remote Parents Have `isRecording=false`: Sampling and Child Spans
Distinguish a non-recording remote context from the recording and sampling decisions of the local child span.
Observability & Tracing Sep 29, 2026 · 3 min read
Why Dashboard Aggregation Hides Regional Outages and How to Detect Them
Preserve regional failure boundaries in SLIs and dashboards, detect missing regions explicitly, and avoid global aggregates that conceal outages.
Observability & Tracing Sep 29, 2026 · 4 min read
How to Alert on Queue Backlog Without Paging on Batch Spikes or Idle Consumers
Alert on queue age, deadlines and stalled progress while distinguishing normal batch accumulation from idle or failed consumers.