🌐 Available languages: English | 日本語
This repository provides hands-on technical workshops covering infrastructure and software architecture topics.
Primary Language: Go 1.26.2 Architecture Pattern: Clean Architecture (3-Layer Variant)
- CoreDNS Workshop: Building Parent-Child DNS Servers to Understand Name Resolution
- Build authoritative servers and forwarding using two VMs to experience the zone delegation mechanism.
- Podman Workshop: Creating L3 Isolated Networks with macvlan + Router Containers
- Create macvlan networks on VLAN sub-interfaces and perform NAT/forwarding with router containers.
- K8s Service (LoadBalancer) Workshop: Virtual Load Balancer built with iptables
- Replicate the operating principles of MetalLB and kube-proxy using VIP addition + DNAT/SNAT.
- iSCSI and Kubernetes PersistentVolume Workshop
- Build iSCSI targets/initiators and verify mounting/persistence with K8s PV/PVC.
- Terraform Workshop: From Basics to Practical DNS Server Construction
- Learn the basics with the local provider and manage CoreDNS environments as IaC using Docker/Podman.
- TLS/SSL Certificate Workshop: Building Self-Signed CA and Understanding Certificate Chains
- Step-by-step guide from CA construction to certificate verification using OpenSSL.
- Container Runtime Workshop: Understanding the Reality of Containers through namespaces and cgroups
- Replicate the magic behind
podman runby manually creating namespaces/cgroups.
- Replicate the magic behind
- Redis Workshop: Real-time Game Leaderboard with Sorted Sets
- Build a high-performance leaderboard using Redis Sorted Sets and manage banned users with Sets.
- Message Queue Workshop: Learning Pub/Sub and Queuing with RabbitMQ
- Build a real-time crypto monitoring system using RabbitMQ Topic Exchange.
- Secret Management Workshop: Secure API Key Management with HashiCorp Vault
- Centralized secret management, versioning, and Clean Architecture integration using Vault KV v2.
- Kerberos / SPNEGO Authentication Workshop: Single Sign-On with NGINX and Podman
- Experience passwordless authentication flow with KDC construction and NGINX SPNEGO module.
- OAuth2 Workshop: Learning Authorization Flow with Keycloak + Go + Podman
- Issue tokens with Keycloak and implement protected APIs by validating JWTs in a Go Resource Server.
- OAuth2 Workshop: Learning Authorization Flows with Microsoft Entra ID and Go
- Learn both managed identity based M2M access and user-delegated API access with Microsoft Entra ID.
- Reverse Proxy Workshop: Understanding K8s Ingress through Traefik
- SSL termination, routing, and health checks with Traefik + multiple backend containers.
- Service Mesh Fundamentals: Understanding L7 Traffic Control with Envoy Sidecars
- Manually deploy Envoy proxies for traffic control (retries, timeouts, routing).
- Object Storage Workshop: Learning S3-Compatible API with MinIO
- MinIO construction + bucket operations and signed URL generation using AWS CLI/SDK.
- HTTP Persistent Connection Workshop: Keep-Alive, WebSocket, HTTP/2, gRPC, HTTP/3
- Comparison of connection reuse and 0-RTT mechanisms from HTTP/1.1 to the latest HTTP/3 (QUIC).
- Sharding Fundamentals: Sparse Table, Segment Tree, Elasticsearch, and Cortex
- Practical sharding design with Elasticsearch and Cortex examples, including a summary of Cortex PRs #7266 and #7270.
- TCP/IP Protocol Stack Workshop: Building a Network Stack from Scratch
- Implement Ethernet/IP/ICMP/UDP with Go and C (CGO), understanding packets from raw socket.
- Kubernetes Workshop: From Basics to Practical Container Orchestration
- Comprehensive guide covering Pod, Deployment, Service, ConfigMap, Helm, and more.
- Kubernetes Operations & Security Workshop: Advanced Features for Production
- Hands-on with RBAC, NetworkPolicy, HPA, GitOps (ArgoCD), Backup (Velero), and more.
- Zero Trust Architecture Workshop: Implementing "Always Verify" with mTLS and Service Mesh
- Implement identity-based security (mTLS/AuthZ) using Istio and SPIRE, moving beyond network perimeters.
- Web Security Workshop: XSS, CSRF, and Clickjacking
- Experience common web attacks and learn defense mechanisms (escaping, tokens, etc.) using an intentionally vulnerable application.
- Supply Chain Security Workshop: Dependency and Container Image Vulnerability Management
- Detect vulnerabilities with govulncheck/Trivy, generate SBOMs with syft/grype, and sign images with cosign.
- Observability Workshop: Metric Collection and Visualization with Prometheus + Grafana
- Metric collection and dashboard construction with Node Exporter + Prometheus + Grafana.
- Clean Architecture (4-Layer Structure)
- Visual explanation of dependencies and responsibilities across Domain/UseCase/Infra/Framework.
- Clean Architecture Workshop (WS1): Learning Design Resilient to Change
- Hands-on implementation of Entity/Domain Service and swapping infrastructure from DB to AD.
- Clean Architecture Workshop (WS2): Extension and Optimization
- Abstraction of notification channels and introduction of transparent caching using the Decorator pattern.
- Clean Architecture Workshop (WS3): Swapping Communication Protocols
- Migrate a BBS REST API to gRPC by modifying only the Framework layer.
- Clean Architecture Workshop (WS4): Adding Business Rules
- Add a new business rule and observe changes propagating from inside to outside.
- Clean Architecture Workshop (WS5): Swapping the Persistence Layer
- Migrate from SQLite to PostgreSQL by modifying only the Infra layer.
- Clean Architecture Workshop (WS6): Integrating External Services
- Add Slack notifications using the new Port/Adapter pattern.
- Clean Architecture Workshop (WS7): Adding Authentication
- Add JWT Bearer Token authentication as a cross-cutting concern in the Framework layer.
- SOLID Principles (with Go examples)
- Learn S/O/L/I/D with practical Go examples and Clean Architecture mapping.
- Secure Coding Best Practices (Go)
- Prevent SQL injection, path traversal, password hashing mistakes, race conditions, and information leakage in everyday coding.
- Caching Patterns in Go
- Practical cache patterns: TTL, LRU, cache-aside, Redis, and write-through.
- Introduction to Succinct Data Structures (Go Perspective)
- Guide to memory-efficient Trie implementation using LOUDS.
- Design Patterns
- Implementation examples and application scenarios of GoF design patterns.