Blog

  • From Video to Evaluation: Automating Quiz Creation and Grading with Generative AI

    Operational Efficiency

    • Automated Quiz Creation: Quizzes generated within minutes of video upload.
    • AI-Powered Grading: Rubric-based evaluation with LLMs reduced manual effort.
    • Faster Feedback: Accelerated review cycles improved learning responsiveness.

    Customer Value

    • Interactive Learning: Passive videos turned into engaging assessments.
    • Instructor Time Savings: Over 70% reduction in quiz and grading workload.
    • Scalable Delivery: Consistent quality across growing learner base.

    Financial Performance

    • Lower Costs: Reduced manual assessment overhead.
    • Improved ROI: Higher engagement led to better course outcomes.
    • Operational Gains: Efficient scaling with no added manual resources.

    Innovation Highlights

    • Multi-Model Quiz Engine: GPT-3.5, LLAMA-3, Mistral for diverse question formats.
    • Smart Video Segmentation: BERTopic for Bloom’s taxonomy alignment.
    • Hybrid Grading: Combined AI scoring with structured rubrics.

  • How Chaos Engineering Can Enhance System Reliability and Resilience?

    Rapid adoption of cloud, complexity of infrastructures and the growing number of interconnected components have exposed business systems to potential vulnerabilities. Also, to predict and prevent system failures that occur due to server outages, network disruptions, and unplanned traffic spikes, traditional methods of testing and monitoring fall short.

    This is where chaos engineering comes into play. Chaos Engineering makes system failures evitable by testing how systems react to disruptions. It is a proactive approach that involves deliberately introducing faults into a system to test its resilience and ability to recover. Users can identify vulnerabilities and potential failure points with the help of chaos engineering.

    Chaos engineering is surely a breakthrough in strengthening the immunity of IT systems against unexpected failures. Gartner identified the “Digital Immune System” as a top strategic technology trend for 2023 and predicted that by 2025, this year, 40% of organizations would adopt chaos engineering as a key part of their Site Reliability Engineering (SRE) practices.

    Navigating Known and Unknown Risks with Chaos Engineering

    Chaos Engineering offers a structured approach to uncovering both expected and unforeseen failure modes, helping organizations move beyond reactive fixes toward proactive resilience.

    Through chaos experiments, teams can explore three essential categories of risk:

    • Confirm Known-Knowns: These are predictable scenarios with expected outcomes.
      • Example: In a payment processing system, if the primary database instance goes down, the system is configured to fail over to a read replica.
      • Chaos Engineering Role: By simulating a primary database failure, chaos testing confirms that the failover mechanism kicks in automatically and transactions continue without interruption.
    • Understand Known-Unknowns: These are scenarios where the failure is known, but the extent of its impact is not fully understood.
      • Example: What happens to real-time payment approvals when the fraud detection microservice experiences latency or delays?
      • Chaos Engineering Role: By injecting artificial latency into the fraud detection service, chaos testing helps assess how many payments are delayed, flagged, or failed altogether—especially during peak transaction windows.
    • Discover Unknown-Unknowns: These are unanticipated scenarios with potentially serious consequences.
      • Example: What if the entire logging infrastructure (used for transaction auditing and compliance) fails silently during high-volume processing?
      • Chaos Engineering Role: Simulating a complete logging pipeline failure can uncover hidden gaps in alerting, recovery processes, or data compliance, blind spots that traditional monitoring tools often overlook until it’s already too late.

    In 2025, business downtime could cost an average of $5,600 per minute, translating to a staggering $336,000 in losses for every hour of inactivity, as reported by Atlassian. So, understanding and preparing for the unknown is no longer optional, it’s essential.

    Chaos Engineering Enhances System Reliability and Resilience

    1. Identifies vulnerabilities before they break systems

    By simulating real-world failures, like server crashes, latency spikes, or dependency outages, Chaos Engineering exposes faults in distributed systems that traditional testing often overlooks. This proactive detection enables timely fixes.

    2. Validates system redundancies and failover mechanisms

    Chaos experiments test whether your failovers, backups, and load balancers truly work as expected under threats. This validation builds trust in your system’s ability to recover swiftly when disruptions occur.

    3. Builds a culture of preparedness and reliability

    Instead of reacting to failures, engineering teams become better equipped to anticipate and handle them. This cultural shift toward resilience ensures better incident response and fewer surprises in production.

    4. Enhances monitoring and observability

    Chaos tests often reveal gaps in existing observability setups. Teams can strengthen monitoring tools to detect anomalies earlier and respond faster, reducing Mean Time to Detection (MTTD) and Mean Time to Recovery (MTTR).

    5. Supports scalability and performance under stress

    Simulating failure during high-load periods helps validate how your system scales and whether critical business processes, like payments, searches, or transactions, hold steady under pressure.

    Harness the power of Chaos Engineering to build systems that bend but don’t break!

    In a world where even a moment’s downtime can disrupt customer trust, stall revenue, or derail critical operations, Chaos Engineering emerges as a vital strategy, not a luxury.

    At R Systems, we bring proven expertise in Chaos Engineering to help you simulate disruptions, expose weak links, and build systems that recover smarter and faster. From chaos to confidence, we turn uncertainty into uptime.

    Connect with us to future-proof your reliability.

  • Taming the OpenStack Beast – A Fun & Easy Guide!

    So, you’ve heard about OpenStack, but it sounds like a mythical beast only cloud wizards can tame? Fear not! No magic spells or enchanted scrolls are needed—we’re breaking it down in a simple, engaging, and fun way.

    Ever felt like managing cloud infrastructure is like trying to tame a wild beast? OpenStack might seem intimidating at first, but with the right approach, it’s more like training a dragon —challenging but totally worth it!

    By the end of this guide, you’ll not only understand OpenStack but also be able to deploy it like a pro using Kolla-Ansible. Let’s dive in! 🚀

    🤔 What Is OpenStack?

    Imagine you’re running an online store. Instead of buying an entire warehouse upfront, you rent shelf space, scaling up or down based on demand. That’s exactly how OpenStack works for computing!

    OpenStack is an open-source cloud platform that lets companies build, manage, and scale their own cloud infrastructure—without relying on expensive proprietary solutions.

    Think of it as LEGO blocks for cloud computing—but instead of plastic bricks, you’re assembling compute, storage, and networking components to create a flexible and powerful cloud. 🧱🚀

    🤷‍♀️ Why Should You Care?

    OpenStack isn’t just another cloud platform—it’s powerful, flexible, and built for the future. Here’s why you should care:

    It’s Free & Open-Source – No hefty licensing fees, no vendor lock-in—just pure, community-driven innovation. Whether you’re a student, a startup, or an enterprise, OpenStack gives you the freedom to build your own cloud, your way.

    Trusted by Industry Giants – If OpenStack is good enough for NASA, PayPal, and CERN (yes, the guys running the Large Hadron Collider ), it’s definitely worth your time! These tech powerhouses use OpenStack to manage mission-critical workloads, proving its reliability at scale.

    Super Scalable – Whether you’re running a tiny home lab or a massive enterprise deployment, OpenStack grows with you. Start with a few nodes and scale to thousands as your needs evolve—without breaking a sweat.

    Perfect for Hands-On Learning – Want real-world cloud experience? OpenStack is a playground for learning cloud infrastructure, automation, and networking. Setting up your own OpenStack lab is like a DevOps gym—you’ll gain hands-on skills that are highly valued in the industry.

    ️🏗️ OpenStack Architecture in Simple Terms – The Avengers of Cloud Computing

    OpenStack is a modular system. Think of it as assembling an Avengers team, where each component has a unique superpower, working together to form a powerful cloud infrastructure. Let’s break down the team:

    🦾 Nova (Iron Man) – The Compute Powerhouse

    Just like Iron Man powers up in his suit, Nova is the core component that spins up and manages virtual machines (VMs) in OpenStack. It ensures your cloud has enough compute power and efficiently allocates resources to different workloads.

    • Acts as the brain of OpenStack, managing instances on physical servers.
    • Works with different hypervisors like KVM, Xen, and VMware to create VMs.
    • Supports auto-scaling, so your applications never run out of power.

    ️🕸️ Neutron (Spider-Man) – The Web of Connectivity

    Neutron is like Spider-Man, ensuring all instances are connected via a complex web of virtual networking. It enables smooth communication between your cloud instances and the outside world.

    • Provides network automation, floating IPs, and load balancing.
    • Supports custom network configurations like VLANs, VXLAN, and GRE tunnels.
    • Just like Spidey’s web shooters, it’s flexible, allowing integration with SDN controllers like Open vSwitch and OVN.

    💪 Cinder (Hulk) – The Strength Behind Storage

    Cinder is OpenStack’s block storage service, acting like the Hulk’s immense strength, giving persistent storage to VMs. When VMs need extra storage, Cinder delivers!

    • Allows you to create, attach, and manage persistent block storage.
    • Works with backend storage solutions like Ceph, NetApp, and LVM.
    • If a VM is deleted, the data remains safe—just like Hulk’s memory, despite all the smashing.

    📸 Glance (Black Widow) – The Memory Keeper

    Glance is OpenStack’s image service, storing and managing operating system images, much like how Black Widow remembers every mission.

    • Acts as a repository for VM images, including Ubuntu, CentOS, and custom OS images.
    • Enables fast booting of instances by storing pre-configured templates.
    • Works with storage backends like Swift, Ceph, or NFS.

    🔑 Keystone (Nick Fury) – The Security Gatekeeper

    Keystone is the authentication and identity service, much like Nick Fury, who ensures that only authorized people (or superheroes) get access to SHIELD.

    • Handles user authentication and role-based access control (RBAC).
    • Supports multiple authentication methods, including LDAP, OAuth, and SAML.
    • Ensures that users and services only access what they are permitted to see.

    🧙‍♂️ Horizon (Doctor Strange) – The All-Seeing Dashboard

    Horizon provides a web-based UI for OpenStack, just like Doctor Strange’s ability to see multiple dimensions.

    • Gives a graphical interface to manage instances, networks, and storage.
    • Allows admins to control the entire OpenStack environment visually.
    • Supports multi-user access with dashboards customized for different roles.

    🚀 Additional Avengers (Other OpenStack Services)

    • Swift (Thor’s Mjolnir) – Object storage, durable and resilient like Thor’s hammer.
    • Heat (Wanda Maximoff) – Automates cloud resources like magic.
    • Ironic (Vision) – Bare metal provisioning, a bridge between hardware and cloud.

    Each of these heroes (services) communicates through APIs, working together to make OpenStack a powerful cloud platform.

    apt update &&

    ️🛠️ How This Helps in Installation

    Understanding these services will make it easier to set up OpenStack. During installation, configure each component based on your needs:

    • If you need VMs, you focus on Nova, Glance, and Cinder.
    • If networking is key, properly configure Neutron.
    • Secure access? Keystone is your best friend.

    Now that you know the Avengers of OpenStack, you’re ready to start your cloud journey. Let’s get our hands dirty with some real-world OpenStack deployment using Kolla-Ansible.

    ️🛠️ Hands-on: Deploying OpenStack with Kolla-Ansible

    So, you’ve learned the Avengers squad of OpenStack—now it’s time to assemble your own OpenStack cluster! 💪

    🔍 Pre-requisites: What You Need Before We Begin

    Before we start, let’s make sure you have everything in place:

    🖥️ Hardware Requirements (Minimum for a Test Setup)

    • 1 Control Node + 1 Compute Node (or more for better scaling).
    • At least 8GB RAM, 4 vCPUs, 100GB Disk per node (More = Better).
    • Ubuntu 22.04 LTS (Recommended) or CentOS 9 Stream.
    • Internet Access (for downloading dependencies).

    🔧 Software & Tools Needed

    Python 3.10+ – Because Python runs the world.

    Ansible 8-9 (ansible-core 2.15-2.16) – Automating OpenStack deployment.

    Docker & Docker Compose – Because we’re running OpenStack in containers!

    Kolla-Ansible – The magic tool for OpenStack deployment.

    Step-by-Step: Setting Up OpenStack with Kolla-Ansible

    1️⃣ Set Up Your Environment

    First, update your system and install dependencies:

    apt update && sudo apt upgrade -y
    apt-get install python3-dev libffi-dev gcc libssl-dev python3-selinux python3-setuptools python3-venv -y

    python3 -m venv kolla-venv
    echo "source ~/kolla-venv/bin/activate" >> ~/.bashrc
    source ~/kolla-venv/bin/activate

    Install Ansible & Docker:

    sudo apt install python3-pip -y
    pip install -U pip
    pip install 'ansible-core>=2.15,<2.17' ansible

    2️⃣ Install Kolla-Ansible

    pip install git+https://opendev.org/openstack/kolla-ansible@master

    3️⃣ Prepare Configuration Files

    Copy default configurations to /etc/kolla:

    mkdir -p /etc/kolla
    sudo chown $USER:$USER /etc/kolla
    cp -r /usr/local/share/kolla-ansible/etc/kolla/* /etc/kolla/

    Generate passwords for OpenStack services:

    kolla-genpwd

    Before deploying OpenStack, let’s configure some essential settings in globals.yml. This file defines how OpenStack services are installed and interact with your infrastructure.

    Run the following command to edit the file:

    nano /etc/kolla/globals.yml

    Here are a few key parameters you must configure:

    kolla_base_distro – Defines the OS used for deployment (e.g., ubuntu or centos).

    kolla_internal_vip_address – Set this to a free IP in your network. It acts as the virtual IP for OpenStack services. Example: 192.168.1.100.

    network_interface – Set this to your main network interface (e.g., eth0). Kolla-Ansible will use this interface for internal communication. (Check using ip -br a)

    enable_horizon – Set to yes to enable the OpenStack web dashboard (Horizon).

    Once configured, save and exit the file. These settings ensure that OpenStack is properly installed in your environment.

    4️⃣ Bootstrap the Nodes (Prepare Servers for Deployment)

    kolla-ansible -i /etc/kolla/inventory/all-in-one bootstrap-servers

    5️⃣ Deploy OpenStack! (The Moment of Truth)

    kolla-ansible -i /etc/kolla/inventory/all-in-one deploy

    This step takes some time (~30 minutes), so grab some ☕ and let OpenStack build itself.

    6️⃣ Access Horizon (Web Dashboard)

    Once deployment is complete, check the OpenStack dashboard:

    kolla-ansible post-deploy

    Now, find your login details:

    cat /etc/kolla/admin-openrc.sh

    Source the credentials and log in:

    source /etc/kolla/admin-openrc.sh
    openstack service list

    Open your browser and try accessing: http://<your-server-ip>/dashboard/ or https://<your-server-ip>/dashboard/”

    Use the username and the password from admin-openrc.sh.

    Troubleshooting Common Issues

    Deploying OpenStack isn’t always smooth sailing. Here are some common issues and how to fix them:

    Kolla-Ansible Fails at Bootstrap

    Solution: Run `kolla-ansible -i /etc/kolla/inventory/all-in-one prechecks` to check for missing dependencies before deployment.

    Containers Keep Restarting or Failing

    Solution: Run docker ps -a | grep Exit to check failed containers. Then inspect logs with:

    docker ps --format 'table {{.ID}}\t{{.Names}}\t{{.Status}}'
    docker logs $(docker ps -q --filter "status=exited")
    journalctl -u docker.service --no-pager | tail -n 50

    Horizon Dashboard Not Accessible

    Solution: Ensure enable_horizon: yes is set in globals.yml and restart services with:

    kolla-ansible -i /etc/kolla/inventory/all-in-one reconfigure

    Missing OpenStack CLI Commands

    Solution: Source the OpenStack credentials file before using the CLI:

    source /etc/kolla/admin-openrc.sh

    By tackling these common issues, you’ll have a much smoother OpenStack deployment experience.

    🎉 Congratulations, You Now Have Your Own Cloud!

    Now that your OpenStack deployment is up and running, you can start launching instances, creating networks, and exploring the endless possibilities.

    What’s Next?

    ✅ Launch your first VM using OpenStack CLI or Horizon!

    ✅ Set up floating IPs and networks to make instances accessible.

    ✅ Experiment with Cinder storage and Neutron networking.

    ✅ Explore Heat for automation and Swift for object storage.

    Final Thoughts

    Deploying OpenStack manually can be a nightmare, but Kolla-Ansible makes it much easier. You’ve now got your own containerized OpenStack cloud running in no time.

  • Linux Internals of Kubernetes Networking

    Introduction

    This blog is a hands-on guide designed to help you understand Kubernetes networking concepts by following along. We’ll use K3s, a lightweight Kubernetes distribution, to explore how networking works within a cluster.

    System Requirements

    Before getting started, ensure your system meets the following requirements:

    • A Linux-based system (Ubuntu, CentOS, or equivalent).
    • At least 2 CPU cores and 4 GB of RAM.
    • Basic familiarity with Linux commands.

    Installing K3s

    To follow along with this guide, we first need to install K3s—a lightweight Kubernetes distribution designed for ease of use and optimized for resource-constrained environments.

    Install K3s

    You can install K3s by running the following command in your terminal:

    curl -sfL https://get.k3s.io | sh -

    This script will:

    1. Download and install the K3s server.
    2. Set up the necessary dependencies.
    3. Start the K3s service automatically after installation.

    Verify K3s Installation

    After installation, you can check the status of the K3s service to make sure everything is running correctly:

    systemctl status k3s

    If everything is correct, you should see that the K3s service is active and running.

    Set Up kubectl

    K3s comes bundled with its own kubectl binary. To use it, you can either:

    Use the K3s binary directly:

    k3s kubectl get pods -A

    Or set up the kubectl config file by exporting the Kubeconfig path:

    export KUBECONFIG="/etc/rancher/k3s/k3s.yaml"
    sudo chown -R $USER $KUBECONFIG
    kubectl get pods -A

    Understanding Kubernetes Networking

    In Kubernetes, networking plays a crucial role in ensuring seamless communication between pods, services, and external resources. In this section, we will dive into the network configuration and explore how pods communicate with one another.

    Viewing Pods and Their IP Addresses

    To check the IP addresses assigned to the pods, use the following kubectl command:

    CODE: https://gist.github.com/velotiotech/1961a4cdd5ec38f7f0fbe0523821dc7f.sh

    This will show you a list of all the pods across all namespaces, including their corresponding IP addresses. Each pod is assigned a unique IP address within the cluster.

    You’ll notice that the IP addresses are assigned by Kubernetes and typically belong to the range specified by the network plugin (such as Flannel, Calico, or the default CNI). K3s uses Flannel CNI by default and sets default pod CIDR as 10.42.0.0/24. These IPs allow communication within the cluster.

    Observing Network Configuration Changes

    Upon starting K3s, it sets up several network interfaces and configurations on the host machine. These configurations are key to how the Kubernetes networking operates. Let’s examine the changes using the IP utility.

    Show All Network Interfaces

    Run the following command to list all network interfaces:

    ip link show

    This will show all the network interfaces.

    • lo, enp0s3, and enp0s9 are the network interfaces that belong to the host.  
    • flannel.1 interface is created by Flannel CNI for inter-pod communication that exists on different nodes.
    • cni0 interface is created by bridge CNI plugin for inter-pod communication that exists on the same node.
    • vethXXXXXXXX@ifY interface is created by bridge CNI plugin. This interface connects pods with the cni0 bridge.

    Show IP Addresses

    To display the IP addresses assigned to the interfaces:

    ip -c -o addr show

    You should see the IP addresses of all the network interfaces. With regards to K3s-related interfaces, only cni0 and flannel.1 have IP addresses. The rest of the vethXXXXXXXX interfaces only have MAC addresses; the details regarding this will be explained in the later section of this blog.

    Pod-to-Pod Communication and Bridge Networks

    The diagram illustrates how container networking works within a Kubernetes (K3s) node, showing the key components that enable pods to communicate with each other and the outside world. Let’s break down this networking architecture:

    At the top level, we have the host interface (enp0s9) with IP 192.168.2.224, which is the node’s physical network interface connected to the external network. This is the node’s gateway to the outside world.

    enp0s9 interface is connected to the cni0 bridge (IP: 10.42.0.1/24), which acts like a virtual switch inside the node. This bridge serves as the internal network hub for all pods running on the node.

    Each of the pods runs in its own network namespace, with each one having its own separate network stack, which includes its own network interfaces and routing tables. Each of the pod’s internal interfaces, eth0, as shown in the diagram above, has an IP address, which is the pod’s IP address. eth0 inside the pod is connected to its virtual ethernet (veth) pair that exists in the host’s network and connects the eth0 interface of the pod to the cni0 bridge.

    Exploring Network Namespaces in Detail

    Kubernetes uses network namespaces to isolate networking for each pod, ensuring that pods have separate networking environments and do not interfere with each other. 

    A network namespace is a Linux kernel feature that provides network isolation for a group of processes. Each namespace has its own network interfaces, IP addresses, routing tables, and firewall rules. Kubernetes uses this feature to ensure that each pod has its own isolated network environment.

    In Kubernetes:

    • Each pod has its own network namespace.
    • Each container within a pod shares the same network namespace.

    Inspecting Network Namespaces

    To inspect the network namespaces, follow these steps:

    If you installed k3s as per this blog, k3s by default selects containerd runtime, your commands to get the container pid will be different if you run k3s with docker or other container runtimes.

    Identify the container runtime and get the list of running containers.

    sudo crictl ps

    Get the container-id from the output and use it to get the process ID

    sudo crictl inspect <container-id> | grep pid

    Check the network namespace associated with the container

    sudo ls -l /proc/<container-pid>/ns/net

    You can use nsenter to enter the network namespace for further exploration.

    Executing Into Network Namespaces

    To explore the network settings of a pod’s namespace, you can use the nsenter command.

    sudo nsenter --net=/proc/<container-pid>/ns/net
    ip addr show

    Script to exec into network namespace

    You can use the following script to get the container process ID and exec into the pod network namespace directly.

    POD_ID=$(sudo crictl pods --name <pod_name> -q) 
    CONTAINER_ID=$(sudo crictl ps --pod $POD_ID -q) 
    nsenter -t $(sudo crictl inspect $CONTAINER_ID | jq -r .info.pid) -n ip addr show

    Veth Interfaces and Their Connection to Bridge

    Inside the pod’s network namespace, you should see the pod’s interfaces (lo and eth0) and the IP address: 10.42.0.8 assigned to the pod. If observed closely, we see eth0@if13, which means eth0 is connected to interface 13 (in your system the corresponding veth might be different). Interface eth0 inside the pod is a virtual ethernet (veth) interface, veths are always created in interconnected pairs. In this case, one end of veth is eth0 while the other part is if13. But where does if13 exist? It exists as a part of the host network connecting the pod’s network to the host network via the bridge (cni0) in this case.

    ip link show | grep 13

    Here you see veth82ebd960@if2, which denotes that the veth is connected to interface number 2 in the pod’s network namespace. You can verify that the veth is connected to bridge cni0 as follows and that the veth of each pod is connected to the bridge, which enables communication between the pods on the same node.

    brctl show

    Demonstrating Pod-to-Pod Communication

    Deploy Two Pods

    Deploy two busybox pods to test communication:

    kubectl run pod1 --image=busybox --restart=Never -- sleep infinity
    kubectl run pod2 --image=busybox --restart=Never -- sleep infinity

    Get the IP Addresses of the Pods

    kubectl get pods pod1 pod2 -o wide -A

    Pod1 IP : 10.42.0.9

    Pod2 IP : 10.42.0.10

    Ping Between Pods and Observe the Traffic Between Two Pods

    Before we ping from Pod1 to Pod2, we will set up a watch on cni0 and veth pair of Pod1 and pod2 that are connected to cni0 using tcpdump.

    Open three terminals and set up the tcpdump listeners: 

    # Terminal 1 – Watch traffic on cni0 bridge 

    sudo tcpdump -i cni0 icmp

     # Terminal 2 – Watch traffic on veth1 (Pod1’s veth pair)

    sudo tcpdump -i veth3a94f27 icmp

    # Terminal 3 – Watch traffic on veth2 (Pod2’s veth pair) 

    sudo tcpdump -i veth18eb7d52 icmp

    Exec into Pod1 and ping Pod2:

    kubectl exec -it pod1 -- ping -c 4 <pod2-IP>

    Watch results on veth3a94f27 pair of Pod1.

    Watch results on cni0:

    Watch results on veth18eb7d52 pair of Pod2:

    Observing the timestamps for each request and reply on different interfaces, we get the flow of request/reply, as shown in the diagram below.

    Deeper Dive into the Journey of Network Packets from One Pod to Another

    We have already seen the flow of request/reply between two pods via veth interfaces connected to each other in a bridge network. In this section, we will discuss the internal details of how a network packet reaches from one pod to another.

    Packet Leaving Pod1’s Network

    Inside Pod1’s network namespace, the packet originates from eth0 (Pod1’s internal interface) and is sent out via its virtual ethernet interface pair in the host network. The destination address of the network packet is 10.0.0.10, which lies within the CIDR range 10.42.0.0 – 10.42.0.255 hence it matches the second route.

    The packet exits Pod1’s namespace and enters the host namespace via the connected veth pair that exists in the host network. The packet arrives at bridge cni0 since it is the master of all the veth pairs that exist in the host network.

    Once the packet reaches cni0, it gets forwarded to the correct veth pair connected to Pod2.

    Packet Forwarding from cni0 to Pod2’s Network

    When the packet reaches cni0, the job of cni0 is to forward this packet to Pod2. cni0 bridge acts as a Layer2 switch here, which just forwards the packet to the destination veth. The bridge maintains a forwarding database and dynamically learns the mapping of the destination MAC address and its corresponding veth device. 

    You can view forwarding database information with the following command:

    bridge fdb show

    In this screenshot, I have limited the result of forwarding database to just the MAC address of Pod2’s eth0

    1. First column: MAC address of Pod2’s eth0
    2. dev vethX: The network interface this MAC address is reachable through
    3. master cni0: Indicates this entry belongs to cni0 bridge
    4. Flags that may appear:
      • permanent: Static entry, manually added or system-generated
      • self: MAC address belongs to the bridge interface itself
      • No flag: The entry is Dynamically learned.

    Dynamic MAC Learning Process

    When a packet is generated with a payload of ICMP requests made from Pod1, it is packed as a frame at layer 2 with source MAC as the MAC address of the eth0 interface in Pod1, in order to get the destination MAC address, eth0 broadcasts an ARP request to all the network interfaces the ARP request contains the destination interface’s IP address.

    This ARP request is received by all interfaces connected to the bridge, but only Pod2’s eth0 interface responds with its MAC address. The destination MAC address is then added to the frame, and the packet is sent to the cni0 bridge.

    This destination MAC address is added to the frame, and it is sent to the cni0 bridge.  

    When this frame reaches the cni0 bridge, the bridge will open the frame and it will save the source MAC against the source interface(veth pair of pod1’s eth0 in the host network) in the forwarding table.

    Now the bridge has to forward the frame to the appropriate interface where the destination lies (i.e. veth pair of Pod2 in the host network). If the forwarding table has information about veth pair of Pod2 then the bridge will forward that information to Pod2, else it will flood the frame to all the veths connected to the bridge, hence reaching Pod2.

    When Pod2 sends the reply to Pod1 for the request made, the reverse path is followed. In this case, the frame leaves Pod2’s eth0 and is tunneled to cni0 via the veth pair of Pod2’s eth0 in the host network. Bridge adds the source MAC address (in this case, the source will be Pod2’s eth0) and the device from which it is reachable in the forwarding database, and forwards the reply to Pod1, hence completing the request and response cycle.

    Summary and Key Takeaways

    In this guide, we explored the foundational elements of Linux that play a crucial role in Kubernetes networking using K3s. Here are the key takeaways:

    • Network Namespaces ensure pod isolation.
    • Veth Interfaces connect pods to the host network and enable inter-pod communication.
    • Bridge Networks facilitate pod-to-pod communication on the same node.

    I hope you gained a deeper understanding of how Linux internals are used in Kubernetes network design and how they play a key role in pod-to-pod communication within the same node.

  • Connecting All Parts of Self: Marina’s Story of Motherhood, Management, and Mental Wellbeing

    We sat down with Marina Svidki, a project manager and a mother of six – three biological, three adopted – to talk about what connection really means when life is full and roles are many. Her story is about much more than parenting. It’s about being human – imperfect, real, and sometimes uncertain – and learning to trust that who we are, in all our parts, is enough.

    Though colleagues often admire her calm leadership and ability to “hold it all together,” she opens up about the quiet moments of doubt, the internal tug-of-war between roles, and the quiet power of reconnecting – with herself, with her purpose, and with the people around her.

    Could you share a bit about your journey to having such a diverse family with both biological and adopted children?

    After having three biological sons – one from a previous marriage and two from the current one – my partner and I still felt our family wasn’t quite complete. We had always hoped for a daughter, and when we realized the probability of having a girl through pregnancy was quite low, we began seriously discussing adoption.

    We went through numerous evaluations and checks and eventually obtained the necessary certification that allows for adoption.

    We waited patiently for two years without finding a suitable match. I remember the day we finally received the call about a little girl available for adoption – it felt like our dream was finally coming true. However, during the discussion, we learned she had two brothers. After talking it through as a family, we made what turned out to be one of the best decisions of our lives: to adopt all three siblings together.

    Now with six children – three biological sons and three adopted children including the daughter we had hoped for – our family feels wonderfully complete.

    At work, you’re seen as a strong, capable leader. At home, you’re a mother of six. Do you ever feel like you’re two different people?

    Of course, these are different roles, and I do try to separate the two while still being present in both. Balancing my role as a project manager with being a mother of six requires intentional boundaries and support systems. I’m fortunate that my workplace offers flexible arrangements that accommodate family needs when they arise. Over time, I’ve learned that clearly separating my professional and family responsibilities helps me be more present in both areas of my life.

    Are there specific skills you’ve developed as a mother that have unexpectedly enhanced your effectiveness as a project manager, or vice versa?

    Yes, I often find myself applying parenting techniques in professional settings and bringing project management frameworks home, sometimes without even realizing it until later!

    One framework that I’ve noticed applies in both worlds is what parenting experts call the three Cs: connection, control, and competence. I initially learned about this approach for child development, but I’ve discovered it’s remarkably effective with professional teams as well.

    Beyond this, crisis management is perhaps the most transferable skill I’ve developed. When you’re raising six children, you learn to become adaptable to unexpected changes and emergencies, and this has helped me stay calm under pressure at work. Last, but not least, both roles have strengthened my emotional intelligence.

    What helps you stay connected to yourself when work gets intense or life gets loud?

    What’s been absolutely essential for my well-being is establishing regular “me time.” My husband and I have a routine where each of us gets one evening a week that’s completely our own. This dedicated time to recharge isn’t negotiable in our family calendar—it’s as important as any work meeting or children’s activity.

    During my “me time,” I reconnect with activities that feed my soul but often get pushed aside in day-to-day life. Sometimes that means spending quiet time in nature, where I can breathe and process my thoughts without interruption. Other times, I’ll meet with close friends for coffee and conversation. These simple activities help me relax and remember who I am beyond my roles as mother and professional.

    I’ve come to understand that self-care isn’t selfish – it’s essential. Taking time for myself allows me to show up more fully for everyone else in my life. When I’m exhausted or stressed, I simply don’t have the emotional bandwidth to support my children or contribute meaningfully at work. Self-care gives me tools to manage difficult emotions rather than being overwhelmed by them.

    My husband and I also prioritize our relationship amid the busyness. We schedule regular date nights to maintain our connection – sometimes it’s just a simple walk together after the children are in bed, other times it’s dinner out while a family member watches the kids.

    People often admire everything you manage. Do you always feel that admiration matches how you see yourself? Have you ever questioned whether you’re a “good enough” mom or leader? How do you work through those moments?

    I appreciate that, but there sometimes is a gap between how I am perceived and my own internal experience, because moments of self-doubt and vulnerability are inevitable.

    I have to admit that in the beginning of our adoption journey, both my husband and I felt a bit lost. We never second-guessed our decision to adopt, we were very clear on that, but we did doubt our abilities as parents.

    After some discussions with our children, and among ourselves, we realized that we had set some very high expectations. What helped immensely was redefining what “success” looked like for our family. Rather than striving for some perfect vision of blended family life or flawless work-family balance, we began celebrating small victories and focusing on the positives: that we had a large, warm, welcoming family, with lots of support!

    Is there anything you would like to share with colleagues who are balancing a leadership role with family responsibilities? 

    From my experience, to have a balanced family life, firstly you need to look after yourself and your own wellbeing because children are like a mirror – they reflect everything back at you.

    What I’ve learned through raising six children while managing projects is that authentic connection requires intentionality and it rarely happens by accident in either environment. For me, creating genuine connection begins with clear prioritization. Each day, I assess what needs my focused attention most urgently. Sometimes work demands take precedence, and other days family clearly needs to come first. The key is being fully present wherever I am. When I’m leading my team, I’m fully engaged with them. And when I’m home, I try to be completely present with my children rather than constantly checking emails.

    Building strong support networks has been absolutely essential for maintaining these connections. At work, this means developing relationships of trust with colleagues who can step in when family needs arise. At home, I’ve learned that asking for help actually strengthens rather than weakens connections. My sister and mother have been incredibly supportive with childcare, and we’ve utilized services to manage some household responsibilities.

    Perhaps most crucial to maintaining connection in both spheres is nurturing my partnership with my husband. We approach parenting and household management as a united team, regularly checking in with each other about needs and challenges. This strong foundation at home gives me the emotional resilience to connect authentically at work, and the leadership skills I develop professionally often strengthen how I relate to my family.

  • What is Chaos Engineering and how Netflix uses it to make its system more resilient?

    Ever wondered how big platforms consumed by most of the world’s population manage to stay online, flawlessly, despite outages, or even disasters?

    They break their own systems on purpose!

    Yeah, that’s right!

    It might be hard for you to believe, but companies like Netflix practice something called Chaos Engineering, which is a proactive strategy of injecting failures deliberately into the systems to test how they behave under stressful conditions. The idea might look simple but it’s extremely powerful.

    Based on simple concept; if you can prepare for failure, you can survive it!

    What is Chaos Engineering?

    Before diving deeper, let’s quickly break down what Chaos Engineering means.

    Chaos Engineering is a disciplined approach to identifying a system’s ability to withstand turbulent conditions. By intentionally introducing failures into a system, businesses can literally test their system’s resilience under stressful conditions.  

    Instead of waiting for something to break unexpectedly, engineers simulate real-world problems like server crashes, network delays, or entire region outages to observe how the system responds. The goal is to identify weaknesses and fix them before they impact users.

    Key Principles of Chaos Engineering

    • Build a hypothesis – Predict how the system should behave under failure.
    • Simulate real-world conditions – Introduce disruptions (e.g., latency, dropped packets, server shutdowns).
    • Run experiments in production – Or as close to production as safely possible.
    • Monitor and measure – Analyze how the system reacts.
    • Learn and improve – Use the findings to strengthen system architecture and recovery processes.

    Breaking with Purpose: The Philosophy Behind Chaos Engineering

    You could predict how your systems will behave under stress, before the stress hits with Chaos Engineering. It’s not about breaking systems recklessly, it’s about introducing controlled failure to expose weaknesses and strengthen a system’s ability to withstand and recover from disruption. Think of it as a business fire drill for a technology stack, controlled, intelligent, and immensely valuable.

    With DRaaS and Chaos Engineering combined, organizations can prepare for disaster. These methodologies validate real-world readiness and uncover vulnerabilities before they can impact operations.

    Why It Matters

    • Prepares systems for the unexpected
    • Uncovers hidden bugs and vulnerabilities
    • Improves reliability, availability, and user trust
    • Helps teams build confidence in their systems

    The Secret Behind Netflix’s Smooth Streaming: Controlled Chaos

    Netflix, one of the pioneers in the OTT streaming service, doesn’t wait for a system to fail in the wild due to server crashes, network delays, or entire region outages. Instead, it leverages tools like Chaos Monkey, which randomly shuts down services in production to test the system’s resilience against unexpected instances and ensure graceful recovery without affecting user experience.

    In simple terms, Chaos Monkey is like a mischievous virtual monkey that randomly causes disruptions in Netflix’s computer systems. It sounds counterintuitive, but the purpose of Chaos Monkey is to intentionally create controlled failures to test the resilience of Netflix’s infrastructure.

    For example, they might randomly disconnect a server or overload a system, just to see if everything keeps running smoothly. If it does, awesome! If not, the engineers can swoop in, figure out what went wrong, and make it even stronger for next time.

    This way, Netflix ensures your binge-watching never gets interrupted, even when things break behind the scenes.

    Next time your favorite show streams seamlessly, remember; Netflix breaks things first, on purpose!

    Ready to build chaos-proof systems? Connect with us to explore how Chaos Engineering and DRaaS can future-proof your infrastructure.

  • Two Decades of Progress: Raluca Rusu’s Perspective on Women’s Leadership in Tech

    As more women forge paths in technology, they must embrace growth, seek support, build resilience, and ultimately trust their abilities

    It’s exciting to see the growing interest among women in exploring and pursuing careers in technology, especially compared to when I first entered the field over 20 years ago. I started as a software developer for a media company, and there weren’t many other women in the same shoes as me at the time. I had to learn, test boundaries, and grow over the years to become CEO of R Systems’ European operations.

    My experience has taught me that building a successful career in the technology industry requires dedication, confidence, and a willingness to learn from new experiences and others. That’s why I love encouraging women who may want to follow in my footsteps or chart their own path in the technology industry to always seek growth opportunities, find supportive mentors and allies, build their resilience, and most importantly, trust themselves and their abilities. They belong in the industry and deserve their seat at the table, creating the innovations that will drive our world forward.

    Since I joined R Systems nearly 23 years ago, addressing gender bias has been a critical priority for the company. Our team has always aimed to ensure that women have a seat at the table – especially in leadership roles and our projects – making this a key focus for the organization. There are many benefits from having women at the leadership level in our industry. From my experience, women leaders are specifically recognized for creating growth opportunities, offering strong mentorship, and fostering an inclusive and supportive environment for their teams. That leads to increased creativity, productivity, and good customer relationships.

    Critical Steps for Tackling Gender Bias in the Technology Industry

    Gender bias remains a critical issue in the technology industry and has been since I joined the field more than 20 years ago.

    There is still often the tendency to consider women less skilled for technical roles, which is why women feel the need to work more to prove themselves. Organizations must provide clear feedback and recognition for their contributions, ensuring that both their achievements and their peers’ awareness of those accomplishments are amplified.

    As a result of this, however, women tend to exclude themselves from growth opportunities. I have seen and experienced firsthand how women often feel the need to prepare more and gather more experience before they ask for promotions.

    To help overcome gender bias and the self-perception gaps women face, organizations and managers in the technology industry must:

    • Clearly communicate role expectations and have open discussions about where they can enhance their skills or gain new experiences
    • Openly encourage women to apply for new positions even if they don’t feel fully there
    • Regularly offer  mentorship opportunities and training programs so that women can easily obtain new skills and expertise

    Each of these steps ensures that an organization benefits from the diversity of perspective, approach, and creativity brought to the teams by including women.

    The Need to Strengthen Maternity Leave, Offering A Better Process for Confident Transitions and Returns

    Many women are delaying maternity for career progression. However, these do not need to be mutually exclusive. Years ago, we examined maternity leave at R Systems to ensure that our team could help facilitate a seamless transition for women within the organization as they take leave and enable them to effortlessly resume their roles upon their return.

    At R Systems, we aim to support women throughout their maternity journey. This involves open discussions about their plans for absence and what they hope to do upon their return. We emphasize timely handovers before maternity leave and maintain continuous communication and dialogue during their absence regarding organizational changes that might affect their roles. Finally, we ensure a gradual integration and handover of responsibilities to be assumed after maternity leave.

    I encourage other companies in the technology industry to review their career path, evaluation, and maternity leave processes and assess how these practices affect women in their organizations. This is a critical – and, frankly, straightforward – starting point for companies to ensure that they can continue to benefit from the experience, expertise, and leadership that women bring. More importantly, it helps eliminate biases and barriers that may hinder career growth, ensuring that women not only have a seat at the table but also thrive in their careers.

  • From Specs to Self-Healing Systems – GenAI’s Full-Stack Impact on the SDLC

    From Insight to Action: What This POV Delivers – 

    • A strategic lens on GenAI’s end-to-end impact across the SDLC ,  from intelligent requirements capture to self-healing production systems.
    • Clarity on how traditional engineering roles are evolving and what new skills and responsibilities are emerging in a GenAI-first environment.
    • A technical understanding of GenAI-driven architecture, code generation, and testing—including real-world patterns, tools, and model behaviors.
    • Insights into building model-aware, feedback-driven engineering pipelines that adapt and evolve continuously post-deployment.
    • A forward-looking view of how to modernize your tech stack with PromptOps, policy-as-code, and AI-powered governance built into every layer.

  • OptimaAI AptivLearn

    What OptimaAI AptivLearn Does

    • Adapts learning to each student’s pace, style, and knowledge level.
    • Automates content creation using Generative AI for quizzes, summaries, and interactive modules.
    • Provides 24/7 support with conversational AI (AptivChat) for academic, time management, and emotional wellness assistance.
    • Integrates seamlessly into existing LMS, SIS, and institutional tech stacks—no rip-and-replace required.

    Transforming Outcomes at Scale

    • Closes engagement gaps through contextual nudges and multimodal content.
    • Empowers educators with predictive insights for early interventions.
    • Boosts institutional ROI through better learner retention, faster content production, and optimized resource allocation.
  • Beyond One-Size-Fits-All: Inside the Era of AI-Personalized Learning

    In this POV, you’ll discover how AI is redefining education through personalized, adaptive learning experiences. Learn how intelligent systems like OptimaAI AptivLearn are reshaping engagement for every stakeholder.

    1. The Shift to Intelligent Learning

    • Traditional digitization isn’t enough—education needs real-time adaptability.
    • AI transforms static platforms into responsive, personalized learning environments.
    • The global EdTech market is moving towards immersive, emotionally aware ecosystems.

    2. Impact Across Personas

    • Educators: Gain real-time insights, reduce admin workload, and dynamically adjust instruction.
    • Learners: Experience adaptive paths, voice-enabled support, and gamified engagement.
    • Administrators & Parents: Access predictive dashboards, behavioral insights, and 24/7 visibility.

    3. The OptimaAI AptivLearn Advantage

    • Delivers a unified, AI-powered ecosystem tailored to each stakeholder.
    • Enables hyper-personalized content, real-time feedback, and intelligent nudging.
    • Seamlessly integrates with existing LMS, SIS, and analytics tools to future-proof learning.