Agrohi
Let’s talk infrastructure

THE AGROHI ENGINEERING DESK

Notes from the infrastructure.
Ideas for what’s next.

Practical guides, architecture decisions, and honest cost breakdowns from the world of cloud engineering.

DevOps

Canary Deployment With Istio

Istio service mesh is great for many things ie. Security, Multicluster and hybrid deployment, Circuit breaking, rate limiting, retries, service-to-service authentication/authorization, cluster-wide mTLS, and many more. But this demo will focus on the Canary deployment with Kubernetes Gateway API and Istio.

Read the insight ↗
Backend

Real Client IP Behind Istio Ambient Gateway: Secure X-Forwarded-For in Go

Istio ambient mesh is great for many things ie. sidecar-free mTLS, L4 authorization with ztunnel, a clean Gateway API entry point, and a much smaller per-pod footprint than the old sidecar model. But the moment you put a service behind an ambient ingress gateway, one thing quietly breaks: access logs stop showing who is actually calling the service. And the way it breaks is nastier than the usual “read X-Forwarded-For” story, because it breaks intermittently.

Read the insight ↗
DevOps

Managed DevOps vs. Hiring In-House: The Real 2026 Cost Comparison

Short answer: Hiring one in-house DevOps engineer costs roughly $150,000–$200,000/year fully loaded — and a single person cannot provide 24/7 coverage, take vacation, or cover every domain (Kubernetes, networking, security, cost, databases). Managed DevOps typically runs $500–$2,500/month for equivalent or broader coverage, with no recruiting cycle and no key-person risk. The right choice depends on how much ongoing, original infrastructure engineering you actually have — not on day-to-day operations.

Read the insight ↗
Cost

Heroku, Render & Vercel Alternatives for Scaling Startups (2026 Cost Guide)

Managed PaaS (Heroku, Render, Vercel) is the cheapest option when your bill is small and your team is tiny. It becomes the most expensive option once you cross roughly $2,000/month in platform spend, because you're paying a 3–10x markup on raw compute for convenience you eventually outgrow. The best alternatives in 2026 are AWS ECS/Fargate or Cloud Run (the moderate step) and managed Kubernetes — EKS, GKE, AKS (the full step), ideally run for you so you don't trade a platform bill for a hiring problem.

Read the insight ↗