rajesh
Rajesh Medampudi

https://rajesh.medampudi.com

Platform Engineer · 17+ years building distributed systems. Observability platforms processing 6TB/day. Saved $120K/month on AWS at gaming scale. Self-hosting everything.

Verify my keys: https://rajesh.medampudi.com/verify

Public Key

npub1hv288dxp0a5emsptlsnu5cw496mgh4l8suzfndkvuruxzfr8909sdqkqdn

NIP-05 Address

[email protected]

Profile Code

nprofile1qqstk9rnknqh76vacq4lcf72v82jad5t6lncwpyekmxwp7rpy3njhjcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dseh83xc

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1hv288dxp0a5emsptlsnu5cw496mgh4l8suzfndkvuruxzfr8909sdqkqdn

Show more details

Last Notes

2026-08-16 06:36:06 UTC

My signing key for software releases (minisign, key ID 0CDC6DA063220C50): RWRQDCJjoG3cDNBpGGjFdULwyP1xWiSk6MiPBFrWysMlDfVuGvaG13Xz — full verify guide: https://rajesh.medampudi.com/verify

2026-08-14 10:37:02 UTC

10 hosts with APM on datadog = $460/mo before a single log line. in practice the real bill lands 2-3x that, because they meter hosts hourly and bill the whole month at the peak.
honest annual range: $6k-$18k to know whether your own servers are healthy.
for a small team that's not a rounding error. it's a hire. a junior engineer's quarter, handed to a vendor to tell you your CPU is high.
self-hosting trades it for one fixed cost: S3 + the box it runs on.
https://rajesh.medampudi.com/blog/lgtm-for-small-teams/
#datadog #observability #selfhosting #devops
https://media.medampudi.com/8665048c4125ba810b175ea35434aefe8c3fdb909cf18871bb89ca5f56f6204d.png

2026-08-13 10:07:03 UTC

vcluster earns its weight in exactly one place: tenants that need their own crds, operators, or cluster-admin. each gets its own api server as a pod on the host cluster, a syncer schedules their pods onto the shared nodes.
if your tenants trust each other and just want their own apps — namespaces + the four native controls. don't run a control plane per tenant for isolation you didn't need.
https://rajesh.medampudi.com/blog/multi-tenant-infra-small-team
#kubernetes #selfhosting #infrastructure #devops
https://media.medampudi.com/cfa1d7fdce2a3c5ff794010c96565641aa6298bec295b05852c155e8e17e6024.png

2026-08-12 16:07:02 UTC

networkpolicy without a cni that implements it does nothing. the api server accepts your default-deny, enforcement is zero, traffic flows anyway. the silent failure.
test it: two pods, two namespaces, confirm the connection is actually refused. if it isn't refused, your policy is decorative.
https://rajesh.medampudi.com/blog/multi-tenant-infra-small-team
#kubernetes #security #selfhosting #devops
https://media.medampudi.com/bcd11ce7f56cff68822ebd7406f37d0bc6a23be3dd6baeaf9c467c62183d6402.png

2026-08-12 10:37:03 UTC

i'll argue for self-hosting observability. but conviction cuts both ways, so: when NOT to.
if you fit grafana cloud's free tier — 10k series, 50GB logs, 50GB traces, 14-day retention, 3 users, $0 — self-hosting buys you nothing. it's a hobby with a pager. use the free tier.
also skip it if nobody will own the upgrades, or if your real problem is compliance retention not cost.
the strongest argument names where it loses.
https://rajesh.medampudi.com/blog/lgtm-for-small-teams/
#selfhosting #observability #grafanacloud #devops
https://media.medampudi.com/aaf5bb508d4941c7b6ac257b2879e0c0f9f69864aa0e3e95d822d7bfe7eb425b.png

2026-08-12 10:07:02 UTC

the k8s quota gotcha that bites everyone once: set a cpu/memory quota on a namespace and every new pod must declare requests or limits, or the api server rejects it at admission. tenants suddenly can't deploy and don't know why.
fix: ship a limitrange in the same namespace so pods without requests get sane defaults. quota sets the ceiling, limitrange fills the floor. together or not at all.
https://rajesh.medampudi.com/blog/multi-tenant-infra-small-team
#kubernetes #infrastructure #devops #selfhosting
https://media.medampudi.com/a3582d866c5faada4cfbc4fd5a919bd040bf0911a739b781d409c78bfa21b105.png

2026-08-11 16:07:03 UTC

a k8s namespace is not a security boundary. it gives you two things — naming isolation and policy scope. that's it.
the isolation comes from what you wrap around it: namespace-scoped rbac (least privilege, no clusterrolebindings per tenant), resourcequota, default-deny networkpolicy. the namespace is the shelf, the controls are the lock.
https://rajesh.medampudi.com/blog/multi-tenant-infra-small-team
#kubernetes #security #selfhosting #devops
https://media.medampudi.com/514ae64abfa57b5c77cba89d379ae062e607b15e3c598ecafae5b5a285abe25a.png

2026-08-11 10:07:02 UTC

most teams building multi-tenant k8s skip the only decision that matters: do the tenants trust each other?
yes → namespaces + rbac + quota + default-deny netpol. native, cheap, enough.
no → no amount of yaml fixes a shared api server and a shared kernel. vcluster or separate clusters.
walk it in order, stop at the first "no".
https://rajesh.medampudi.com/blog/multi-tenant-infra-small-team
#kubernetes #selfhosting #infrastructure #devops
https://media.medampudi.com/51cb31b36f88292776b39866e0f6c223d63e60fdc861042e0d10f199688dd1ea.png

2026-08-11 07:07:02 UTC

ran the 3-year math on one personal box (4 vcpu / 16 gb): ~$195 owned (box + power), ~$972 on hetzner, ~$4,400 on aws.
a $150 n100 pays its hardware back vs the cheapest serious cloud in under 6 months — under 6 weeks vs aws. after that it's ~$15/yr of electricity against $324+/yr of cloud you stopped paying.
the box doesn't just pay for itself. it deletes a recurring bill you were treating as a law of nature.
https://rajesh.medampudi.com/blog/home-colo-lab-pays-for-itself
#selfhosting #homelab #infrastructure
https://media.medampudi.com/9e9c021223d97bc00eedc46c32046e28d0bc9db28f26c63afc59053d248c3317.png

2026-08-10 13:07:02 UTC

a 10w mini-pc running 24/7 burns ~88 kwh a year. here in hyderabad that's ~₹485/yr. us average, ~$15.5/yr.
i live on this box: nextcloud, self-hosted bitwarden, a bitcoin full node, a nostr relay — one modest machine, and the power cost disappears into the noise of the monthly bill. less to power for a year than two months of the cheapest serious cloud vps.
https://rajesh.medampudi.com/blog/home-colo-lab-pays-for-itself
#selfhosting #homelab #bitcoin #nostr
https://media.medampudi.com/4d12ee749fc3976415ace392552b7735aa55f27b5fb6ebeeb7bd11082a3b1fdb.png

2026-08-10 10:37:02 UTC

promtail and grafana agent are both dead. agent hit EOL nov 2025, promtail's LTS clock ran out too. if your tutorial installs either, it's stale.
alloy replaces all of it — one binary collecting logs, metrics, traces, profiles, built on opentelemetry. where you ran three agents with three configs, now it's one.
rare deprecation that's a refund, not a tax. there's a converter if you're migrating off promtail.
https://rajesh.medampudi.com/blog/lgtm-for-small-teams/
#grafana #opentelemetry #observability #selfhosting
https://media.medampudi.com/966765f32dbfa78d67f484e9aa3561d9a06a2a483ea0bc3b1019c3381bc16cd1.png

2026-08-10 07:07:03 UTC

the used enterprise server is a trap for a personal lab. a dell r720 idles ~100w, an r730 ~85w. an n100 mini-pc: ~10w, running the same personal stack.
that's ~10x the running cost, 24/7, for cores a personal workload never touches. cheap to buy, expensive to own — you're buying someone else's discarded power bill. lifetime cost is the number, not sticker price.
https://rajesh.medampudi.com/blog/home-colo-lab-pays-for-itself
#selfhosting #homelab #hardware
https://media.medampudi.com/efa1601643d5ac451463ddd72c98a5e36f97b0df10dc28273e3dda8ae1a8357a.png

2026-08-07 13:07:03 UTC

single-u colo runs $79+/mo in the us — more than the ~$27 hetzner node it would replace. the same box at home: ~$1.25/mo in power. in india it's worse: rack space sells by the full rack, ₹25k–60k/mo.
colo only pays off amortised across many machines, or when the workload truly needs data-centre power + network. for one personal box, it stays home. don't pay rack rent to host a pi-hole.
https://rajesh.medampudi.com/blog/home-colo-lab-pays-for-itself
#selfhosting #homelab #colocation
https://media.medampudi.com/91adc3829af8ea74063ecd7157e8b1d8123348d0451e74531b2eda8c2e432ccd.png

2026-08-07 07:07:02 UTC

the $5 vps anchor is why nobody runs the home lab math. a lab doesn't replace one tiny box — it replaces pi-hole + nextcloud + jellyfin + git remote + nostr relay + side projects, plus storage, plus the egress you stop paying for.
price the real spec (4 vcpu / 16 gb) honestly: ~$27/mo cheapest (hetzner, after their apr 2026 hike), ~$122/mo on aws. every month. going up. against that, a $150 mini-pc breaks even in under 6 months.
https://rajesh.medampudi.com/blog/home-colo-lab-pays-for-itself
#selfhosting #homelab #cloudcost
https://media.medampudi.com/8e6bcaca50a1c29f05fc8fe9d9558d12018042c8978703aa0a864622726c763b.png

2026-08-06 10:37:02 UTC

the part the scaling docs bury, and it's the whole thing:
loki, tempo, mimir each run as a single binary — monolithic mode, every component in one process. not a hack, the supported default. grafana's own docs say monolithic handles ~20GB logs/day.
then point all three at one S3 bucket. compute stays small, data lives in object storage at a couple cents/GB-month. do it day one — retrofitting storage later is the migration you don't want.
https://rajesh.medampudi.com/blog/lgtm-for-small-teams/
#selfhosting #observability #s3 #grafana
https://media.medampudi.com/6c1b56853a35b1b69c132ffb6ab29c01ee80eaaae94ec4a1b27e42a0a74e8568.png

2026-08-04 10:37:02 UTC

most observability advice is written for someone who isn't you. datadog's quote assumes someone else pays. the 40-service enterprise build assumes you have a platform team.
small team needs neither. loki + grafana + tempo + mimir, simplest mode each, one alloy agent, one S3 bucket. one box. that's the whole thing.
pick the build that matches the team you have, not the one in the tutorial.
https://rajesh.medampudi.com/blog/lgtm-for-small-teams/
#selfhosting #observability #grafana #devops
https://media.medampudi.com/935fe30e7d76163fff3987995334ce28b1f528c5093d8f685450355ba7f314e6.png

2026-07-30 10:07:02 UTC

whether to leave the cloud isn't ideology. it's five questions, in order:
bill under ~$2k/mo? traffic spiky? someone who WANTS to own infra? egress or steady compute your biggest cost? can you treat a hardware failure as planned, not invisible?
the first "yes" that points back to the cloud wins. i run bare metal because my workload sits on the far side of all five. most don't.
https://rajesh.medampudi.com/blog/bare-metal-vs-cloud
#infrastructure #kubernetes #selfhosting #devops
https://media.medampudi.com/3ed28f7528935a46e8f178bb37b0e9c58b609a4f1d1302e2e7d9a4db221baa35.png

2026-07-29 17:07:02 UTC

what you're actually paying aws for, and no pricing page shows it: an on-call hardware team you don't staff, elasticity for spiky traffic, and the freedom to NOT become an infra team.
that last one eats senior attention — the scarcest thing a small team has. the cloud's price isn't a scam. i left, and i'd still tell most people who ask me not to.
https://rajesh.medampudi.com/blog/bare-metal-vs-cloud
#infrastructure #kubernetes #cloud #devops
https://media.medampudi.com/6006debd6ef71417e7d2aa43db464ba08bf86e5eaf4afa9a2dc389311b83c826.png

2026-07-29 10:07:02 UTC

the break-even line for leaving the cloud is more specific than the zealots admit: ~$2-5k/mo spend + workloads above ~50% utilisation.
below it, stay — the hours cost more than the hardware saves. above it, bare metal wins hard. a box at 15% utilisation is expensive no matter who owns it. find your number first, then decide.
https://rajesh.medampudi.com/blog/bare-metal-vs-cloud
#infrastructure #cloudcost #finops #kubernetes
https://media.medampudi.com/c71a540b6cfa84b23876077304663d8a70d429ac0ad0c2ffc57a8d4b515c952c.png

2026-07-28 17:07:02 UTC

egress is the moat. ship 20 TB out of aws in a month → ~$1,800. the same 20 TB off a hetzner dedicated box → $0.
you can't reserve your way out of egress the way you can with compute. it just scales with how many people use your product. if bytes-to-users is your biggest line item, that alone can justify leaving.
https://rajesh.medampudi.com/blog/bare-metal-vs-cloud
#infrastructure #awscost #selfhosting #egress
https://media.medampudi.com/be9a9d2539ef2a0fba0d58c93217eb304fa28bc25973b9280747df8102e67c6e.png

2026-07-28 10:07:02 UTC

same class of machine: a hetzner box (16c / 128GB / NVMe) is €119/mo. the nearest aws instance, half the RAM, is ~$677. that's ~5x, on compute alone.
the number is real — i run six of these boxes because of it. but "5x cheaper" is not "you should move." the part that actually decides it never shows up on a pricing page.
https://rajesh.medampudi.com/blog/bare-metal-vs-cloud
#infrastructure #kubernetes #selfhosting #cloud
https://media.medampudi.com/cdcb2e9057a945304e162c3e4c60ce59ba812ced7fbd921bdaf644f06b21730a.png

2026-07-17 17:37:02 UTC

intelligent-tiering is the right default when you don't know the access pattern — and the wrong one for billions of tiny objects. the difference is a fee most people never read.
on unknown access it's excellent: monitors each object, drops it to IA after 30 days idle, archive instant after 90, no retrieval fee when it gets read again. turn it on, stop thinking about it.
the catch is the monitoring charge is per object, not per GB. a bucket of a billion small objects pays a monitoring fee that dwarfs the savings — and objects under 128KB are never auto-tiered anyway, so you pay the overhead and get none of the benefit. unknown + decent size → intelligent-tiering. known or tiny → plain lifecycle, or just standard.
https://rajesh.medampudi.com/blog/s3-cost-optimization-playbook
https://media.medampudi.com/7c18af54eaf3268dbf773071bd8b247054af359b4b50be2488e6c5a456f08336.png

2026-07-17 09:37:02 UTC

storage is rarely the biggest line. it's the easiest free money on the bill.
two moves, different in kind. tier it down — S3 lifecycle or intelligent-tiering ages cold data to cheaper classes. standard $0.023 vs deep archive ~$0.001 is 20x on the same bytes. that's recurring savings.
then delete the graveyard: unattached volumes, old snapshots, idle IPv4. tiering recurs. the graveyard is pure waste — delete it and it never comes back.
https://rajesh.medampudi.com/blog/audit-50k-aws-bill
https://media.medampudi.com/a131ef8f6f02806ae8be7e5375b8a149f54e1314c37a83812657d8076ea82b24.png

2026-07-16 17:37:03 UTC

archive is cheap to store and never free to read. everyone watches the storage line; the retrieval and minimum-duration lines are what ambush you.
colder class = higher per-GB read fee. glacier flexible and deep archive add a per-request fee on top, and deep archive's slowest tier is measured in hours, not seconds. put frequently-read data in glacier to save on storage and then pay retrieval on every read — that's the most expensive mistake in the whole subject. the retrieval bill can beat what standard would've cost outright.
and minimum duration: delete a standard-IA object before 30 days you still pay 30, glacier bills 90, deep archive 180. before you tier anything down, ask the one question that governs all of it — how often is this actually read?
https://rajesh.medampudi.com/blog/s3-cost-optimization-playbook
https://media.medampudi.com/32af24f796388552cf27951cbccdd2494f8d6d16faece807b68e5c0890a80f4d.png

2026-07-16 09:37:02 UTC

compute optimizer points the direction. but the wins that actually move a bill are three moves, not a CPU spreadsheet.
gp2 → gp3: same volume, ~20% cheaper, and faster.
x86 → graviton: ARM, ~20% less for the same work.
right requests: real usage, not guesses.
i moved an EKS fleet (grafana LGTM, 6 TB/day) to ARM graviton2 under karpenter — 40% off compute, no perf loss. do this before you commit.
https://rajesh.medampudi.com/blog/audit-50k-aws-bill
https://media.medampudi.com/967c56e0a484d9c58329472e0a640eb1386f2e401b7da585d500eb922f49ef17.png

2026-07-15 17:37:02 UTC

two questions decide whether you write an s3 lifecycle policy or hand it to intelligent-tiering, and most people skip both.
do you know the access pattern? logs cold after 30 days, backups after 90 — if you know, write the policy and s3 moves the data on a schedule. if you don't know — user uploads, a data lake, hot and cold mixed unpredictably — that's exactly what intelligent-tiering is for.
second question: are the objects big enough and not billions of them? if they're tiny or short-lived, neither pays off, stay in standard. and if you do write a policy, set Expiration — storage you delete is storage you stop paying for forever, and it's the most underused line in s3.
https://rajesh.medampudi.com/blog/s3-cost-optimization-playbook
https://media.medampudi.com/33f34908218d7f453df0248d9fa8b89ed58a5e7dadd141a9da5bbcabaafb1339.png

2026-07-15 09:37:02 UTC

give me read access to a $50k/mo AWS bill and i'll show you where the first fifth is hiding. usually the same four places.
i've run this enough that the pattern is boring. data transfer nobody instruments, boxes sized for a load test two years ago, on-demand on a baseline that never moves, storage rotting in the priciest class.
the audit isn't a pitch before the work. the audit is the work.
https://rajesh.medampudi.com/blog/audit-50k-aws-bill
https://media.medampudi.com/1b9f04c74bbfc9151469e28255c26601e0296c1eb9bc91ae35f127abd4f22f59.png

2026-07-14 17:37:02 UTC

showback before chargeback. the order matters more than people think.
showback shows each team its slice of the bill with no money attached. chargeback moves the cost onto its budget. lead with chargeback and you get a turf war — teams litigate the allocation instead of fixing the waste.
most over-spend isn't malice, it's invisibility. show a team its number and a real fraction self-corrects before anyone enforces anything. order of operations: inform, then showback, then chargeback for the stubborn remainder. start at the bottom.
https://rajesh.medampudi.com/blog/infra-bill-as-product-metric
https://media.medampudi.com/b912e8d310f46bb47dd7b371997ffc7dad0923952bd31afc42ec634562a4cf66.png

2026-07-14 09:37:02 UTC

the whole "RIs or savings plans?" decision routes in two questions.
is it redshift or opensearch? → reserved node / reserved instance. no savings plan exists. done. is it another managed database — rds, aurora, elasticache, dynamodb and the rest? → database savings plan, 1-year no upfront, for steady-state.
otherwise it's ec2/fargate/lambda: compute SP for flexibility, ec2 instance SP for the deepest rate, a reserved instance only if you need a capacity guarantee in an AZ or a resale exit. everything else → compute SP, the safe default.
https://rajesh.medampudi.com/blog/ri-vs-savings-plans
https://media.medampudi.com/867f02b20e4e550ffc58c6100359f21580907c25f8cd7b03c729d58f72b1138a.png

2026-07-13 17:37:02 UTC

before you fix anything, measure. fifteen minutes in cost explorer tells you whether this is a $30 problem or a $3,000 one.
group by usage type. NatGateway-Hours is your fixed cost, number of gateways times hours — not much to chase there. NatGateway-Bytes is the one worth chasing.
then turn on vpc flow logs and see where those bytes go. if a large share is heading to s3, ecr, or dynamodb, that's spend you can zero out with a route-table edit. don't optimise on a hunch.
#aws #cloudcost
https://rajesh.medampudi.com/blog/aws-nat-gateway-hidden-tax
https://media.medampudi.com/a4f409c5c5547e95a656d84443c83d6b36e98a0c6f52f5346c179bc39d652525.png

2026-07-13 09:37:02 UTC

free s3 win almost everyone leaves on the table.
if your EC2/ECS/lambda in a VPC talk to s3, by default that traffic leaves through a NAT gateway — which bills an hourly charge plus per-GB data-processing on every byte. pulling terabytes from s3 that way is a tax you're paying for nothing.
an s3 gateway VPC endpoint routes the same traffic privately for $0. no hourly, no per-GB, no transfer charge for same-region s3. one route-table edit. caveat: it only covers same-region VPC-to-s3 — on-prem, cross-region or transit-gateway paths need the paid interface endpoint. for the common case you should've created it on day one.
https://rajesh.medampudi.com/blog/s3-cost-optimization-playbook
https://media.medampudi.com/e9ebd4d8469fd412af7e69cea7bc1bf7a8399c65af6e4a2f66b854878424cafe.png

2026-07-10 17:37:02 UTC

the most expensive AWS mistake isn't paying on-demand. it's locking in a multi-year commitment on a fleet you're about to halve.
the gate is simple. fleet rightsized? if no, resize first — don't commit. stable baseline? if yes, buy the compute savings plan, up to 66% off, sized to that baseline.
a smaller baseline buys a cheaper, more accurate commitment. that's why the order matters.
https://rajesh.medampudi.com/blog/audit-50k-aws-bill
https://media.medampudi.com/6a1d140d1d3f107259f3423330bc6828d61f4d2b03c40404b8ddafb0e808ce77.png

2026-07-10 09:37:03 UTC

a metric that lives in a monthly finance review is not a metric anyone who moves it ever sees.
the cost of a code path is a property of that code path, same as its latency. so put cost per request on the same grafana board as latency. same screen, same on-call engineer.
an engineer who sees a new endpoint costs 4x per call fixes it in the PR, context hot, for the price of a code review. the same regression caught six weeks later in a finance reconciliation is a forensic investigation. same bug. timing decides the fix cost.
https://rajesh.medampudi.com/blog/infra-bill-as-product-metric
https://media.medampudi.com/cecf5dccb2ead8cf0001dc5a3a0fc5190dda76408d4ef6c96c7279e34ecdc281.png

2026-07-09 17:37:02 UTC

worth noticing: aws now recommends savings plans over reserved instances for compute. the vendor selling you the RI is telling you to buy the other thing.
the logic is clean. the convertible RI exists for flexibility — the compute SP does that better, automatically, no manual exchanges. the standard RI exists for the deepest rate — the ec2 instance SP matches the 72% and stays flexible inside the family.
both reasons the RI existed for ec2 are now done better by a savings plan. that's why the recommendation flipped.
https://rajesh.medampudi.com/blog/ri-vs-savings-plans
https://media.medampudi.com/106caa05673e1f22154f74fea930693759dec7e634609445090de724d892e09b.png

2026-07-09 09:37:02 UTC

cutting a nat bill, the order matters more than any single fix, because the cheap no-downside moves capture most of the money.
s3 + dynamodb gateway endpoints — free, one route-table edit. start here.
interface endpoints for ecr and logs — $0.01/GB, under a quarter of nat's rate. cheap, but do the per-service math.
cross-AZ cleanup, and the honest question of whether the subnet needs nat at all.
fck-nat — real savings, but no default failover and a patching burden. last resort.
most teams never get past step two.
#aws #infrastructure
https://rajesh.medampudi.com/blog/aws-nat-gateway-hidden-tax
https://media.medampudi.com/fe1fcb6aff2cf82aceb738151e99359921a3a0f88387d442d119de9c70b40d89.png

2026-07-08 17:37:02 UTC

the order isn't decoration. each decision makes the next possible.
cut the waste first — free, mostly attention not architecture. then own past your break-even (datadog past my line → built it ~8x cheaper on LGTM). then observe cheaply, because you can't decide the first two without numbers. then staff light. i run all four — k8s, self-hosted observability, the services on top — alone, from a modest house in hyderabad. the load is far lower than the staffing story implies.
https://rajesh.medampudi.com/blog/what-lean-infrastructure-means
https://media.medampudi.com/c95edc690ffc1a48ebfca479d963396f3a5dd1392e01cc3dec514e40e751b38e.png

2026-07-08 09:37:02 UTC

there's storage on your s3 bill you can't see in the console and you're paying for it right now.
upload a big object in parts, the upload fails partway — dropped connection, crashed job, sdk that didn't clean up — and the parts that landed stay in the bucket. you get billed for them. they don't show in the object listing. they pile up for years.
the fix is one lifecycle rule on every bucket: AbortIncompleteMultipartUpload, 7 days. applies to existing + future uploads, and per aws it doesn't trigger early-delete charges. no downside. set it today before you touch anything else — cheapest win in the whole thing.
https://rajesh.medampudi.com/blog/s3-cost-optimization-playbook
https://media.medampudi.com/fb3ce950d9a5b69530f225814c7fdd772ba75a713109dce3be771c06d9245722.png

2026-07-07 17:37:02 UTC

before you buy a single savings plan, sweep the free money. none of it needs a commitment and all of it is just sitting there.
unattached EBS volumes still billing. old snapshots nobody deletes. idle public IPv4 — $0.005/hr each since feb 2024, attached or not. and untagged spend, because you can't cut what you can't see.
clean the dead weight first. then size the commitment to a real baseline.
https://rajesh.medampudi.com/blog/audit-50k-aws-bill
https://media.medampudi.com/52e881edf6c6496cf1ea5d208c555354b5c3ad0fefbee4bc74b07b3406ed5b3a.png

2026-07-07 09:37:02 UTC

total dollars on a bill lie, and here's exactly how.
the signal arrives weeks after the decision that caused it. it lands in front of finance, who can read it but can't fix it. the engineer who can fix it never sees it. and total $ can't tell a bill that doubled on growth from one that doubled on waste.
four failures, all structural. divide into a per-unit number and all four fix at once — timely, actionable, owned by the right person, and it tells growth from waste at a glance.
https://rajesh.medampudi.com/blog/infra-bill-as-product-metric
https://media.medampudi.com/8413e1805c253a74e08b91eea5a034217055f472bb16d6ec664326741585818e.png

2026-07-06 17:37:03 UTC

on 2 december 2025 aws finally launched database savings plans — the gap that kept most database spend stuck on reserved instances for years.
covers aurora, rds, dynamodb, elasticache, documentdb, neptune, keyspaces, timestream and dms. up to 35% on serverless, 20% on provisioned, and it follows the workload across engine, family, size and region.
two catches worth saying out loud: it's 1-year no-upfront only at launch, and it does NOT cover redshift or opensearch — i've already seen that stated wrong. check the official service list.
https://rajesh.medampudi.com/blog/ri-vs-savings-plans
https://media.medampudi.com/6290713b4b767b36083f722f9605d173a09a14665c0e548b14b3490616cb308a.png

2026-07-06 09:37:03 UTC

four signs your nat gateway is doing a job a free endpoint should be doing: s3 reads from private subnets, ecr image pulls on every deploy, a nat sitting in a different AZ than your workloads, and one nat carrying multiple terabytes a month.
you don't have to guess. turn on vpc flow logs for the nat'd subnets and look at where the bytes go. a big share heading to s3, ecr, or dynamodb is the smell — and the cheapest fix you'll find this quarter.
#aws #devops
https://rajesh.medampudi.com/blog/aws-nat-gateway-hidden-tax
https://media.medampudi.com/578b5a8b735f7b0f79f976f722a28935fe0d566b4548bc929e2cc1ef20e2f53f.png

2026-07-03 17:37:02 UTC

people hear "lean" and think "cheap." it's the opposite.
cheap is cutting the thing that matters to save a small number — you win a line item and lose the business. lean is spending deliberately on what actually buys you something, so you have room to do the work that moves the business. the point of cutting a $120K/mo observability bill was never the $120K. it was no longer being held hostage by it.
https://rajesh.medampudi.com/blog/what-lean-infrastructure-means
https://media.medampudi.com/48b5d0bd39ae2fd2acd61be99460b98da1c31178256118e58b2a6dbebb8ccb0b.png

2026-07-03 09:37:02 UTC

how a $120K/mo observability bill quietly happens: three systems billing at once. datadog the official tool. cloudwatch still alive underneath that nobody turned off. and engineers SSHing into boxes to grep logs during incidents because paid search was too slow to trust.
none of them complete, all of them on the meter, spend climbing 15%/mo. the fix isn't clever — one stack you own: grafana LGTM backed by s3, on your own kubernetes, data stays yours. costs become compute + storage, which scale slow. no vendor between you and the 3am fix. one bill you can actually read.
#infrastructure #cloudcost #selfhosting
https://rajesh.medampudi.com/blog/observability-cost-kill
https://media.medampudi.com/4c5f790130f016a44a40e7b9b777c8e4020009ec21c33c66c606757d9f06d03a.png

2026-07-02 17:37:02 UTC

the trap that quietly reverses your s3 savings: standard-IA, one zone-IA and glacier instant all bill every object as if it were at least 128KB.
so you take a bucket of 10KB thumbnails, move it to a "cheaper" class to save money, and now each object bills at 128KB. you're paying for ~12x the bytes you actually store. the per-GB label looked cheaper, the bill came back higher.
small objects stay in standard. check your average object size before tiering anything down — under 128KB and IA is just wrong, no matter how cold the data is.
https://rajesh.medampudi.com/blog/s3-cost-optimization-playbook
https://media.medampudi.com/3af0ba4769d6f20212edfc5d130ee400bcfeb98db854620cccae3ecc582644ba.png

2026-07-02 09:37:03 UTC

give me read access to a $50k/mo AWS bill and i'll find the first 20-30% in a day. not clever — it's always the same four places, same order.
data transfer → rightsize → commit → storage cleanup.
the order is the whole thing. each step makes the next one cheaper. don't commit before you rightsize, don't rightsize a fleet still leaking free traffic through a paid NAT. run it bottom to top.
https://rajesh.medampudi.com/blog/audit-50k-aws-bill
https://media.medampudi.com/fbfa54a6a72776daf71bc14f3d809ab5dc315f246baf3b043324ba44be99cc48.png

2026-07-01 17:37:03 UTC

the whole unlock is dividing.
total infra cost over requests = cost per request. over tenants = cost per tenant. the finops foundation calls it unit economics. the arithmetic is trivial. the shift it forces is not.
two buckets worth keeping separate: resource-efficiency (cost per GB, per vCPU, per token) tells you how the machinery is wasting. business metrics (cost per tenant, cost to serve) tell you whether it matters. once cost is per-unit, a rising bill stops being scary by default.
https://rajesh.medampudi.com/blog/infra-bill-as-product-metric
https://media.medampudi.com/f0a2a892befca3dbce052749842d659326fc732e5331af05ce9cd44110d722a0.png

2026-07-01 09:37:02 UTC

savings plans are the default now, but not the answer to everything. there are exactly three corners where the reserved model is still the only lever you have.
redshift uses reserved nodes, opensearch uses reserved instances — no savings plan covers either, even after the dec 2025 launch. a zonal RI reserves capacity in a specific AZ; a savings plan reserves none. and a standard RI can be sold on the marketplace; a savings plan can't be cancelled mid-term.
everything outside those three → savings plan.
https://rajesh.medampudi.com/blog/ri-vs-savings-plans
https://media.medampudi.com/50cd1bf2b44060836666e028d1b4be3b5d505a137c898f3a384c8616042d211f.png

2026-06-30 17:37:02 UTC

the most common reason a nat gateway bill creeps: s3 reads from private subnets going out through nat at $0.045/GB.
the fix is free and almost nobody does it first. gateway endpoints for s3 and dynamodb cost nothing — no hourly fee, no per-GB fee. you add a route, and that traffic goes over a private aws path instead of through the meter. it never touches nat again.
do this before anything fancier. most teams never need to go further.
#aws #cloudcost
https://rajesh.medampudi.com/blog/aws-nat-gateway-hidden-tax
https://media.medampudi.com/fb94d6dc380dd2dc3a6d29d8189aa815d8ac91e3fa6cfc351706e18bc03dd332.png

2026-06-30 09:37:03 UTC

a fifth of enterprise cloud spend — ~$44.5B in 2025 — goes to resources nobody is using (harness, finops in focus 2025).
that's not carelessness. it's the default state of a bill nobody is actively cutting. idle instances, commitments bought on a guess, storage that should've aged into a cheaper tier months ago. assume you're overspending — the data says you are — and go look once a month. you'll find the leak.
https://rajesh.medampudi.com/blog/what-lean-infrastructure-means
https://media.medampudi.com/bf3b3b0a7b4ea55698a22ea374ac3976ac7a61d18f189366ae7655ffdff5f344.png

2026-06-29 17:37:02 UTC

the stack that replaced the saas bill, and it's boring on purpose: loki for logs, mimir for metrics, tempo for traces, grafana for dashboards + LogQL. running on our own kubernetes, 50+ nodes, 200 services, all backed by s3 underneath.
two surprises: log search was faster than the paid tool, and with no per-seat cost 15 teams onboarded in month one instead of rationing licences. we ran it in parallel with the old tooling for a full month before decommissioning anything — you don't pull monitoring during a tournament with 100k players online and hope.
#observability #grafana #kubernetes
https://rajesh.medampudi.com/blog/observability-cost-kill
https://media.medampudi.com/c2d867877ab5ecc80c0dffc68656b2b8ad0b5fc87438d2de5d39c860c3412b46.png

2026-06-26 17:37:03 UTC

the most wasteful line on a mid-size AWS bill is the one with no resource page: data transfer.
the NAT gateway is the worst of it. $0.045/GB just to process traffic — and most teams route S3 + package pulls straight through it. a VPC gateway endpoint carries that same traffic for $0. one route-table edit.
i check this on every account. it's almost always there.
https://rajesh.medampudi.com/blog/audit-50k-aws-bill
https://media.medampudi.com/71089fbc78a49523e903b0778baa8c8e5debfa9a53ce0c602429b2c996b402eb.png

2026-06-26 09:37:02 UTC

the cloud bill is the only production number most teams don't own until it's already a fire.
engineering owns latency. finance owns the invoice. nobody owns the gap — and a fifth to a third of cloud spend dies in it.
stop treating the bill as an accounting artifact. treat it as a product metric: cost per request, per tenant, per feature, on the same dashboard as latency. we already run every other signal this way. cost is the one we still run like a 1990s expense report.
https://rajesh.medampudi.com/blog/infra-bill-as-product-metric
https://media.medampudi.com/17ecf773fcde095c0b149f9ba94100ba012e773c16e8be4e5e6511d4677c2ebd.png

2026-06-25 17:37:02 UTC

for ec2 in 2026 the reserved instance is the legacy choice, and most people are still running the old rule in their head.
aws's own comparison: compute SP up to 66% across any family + region + fargate + lambda. ec2 instance SP up to 72% in one family. convertible RI 66% with a manual exchange. standard RI 72% but locked.
at every tier the savings plan matches the rate and beats the flexibility. same rate, less to manage. that's the whole argument.
https://rajesh.medampudi.com/blog/ri-vs-savings-plans
https://media.medampudi.com/2e9d715f05faa8867e3886d26d5502636e537a1f8614f8016fdcc360145b6966.png

2026-06-25 09:37:02 UTC

aws nat gateway charges you twice for the same packet. once at $0.045/hr just to exist (~$33/mo per gateway), and again $0.045 for every gigabyte it moves — in and out, on top of normal data transfer.
the hourly fee is visible so nobody worries about it. the per-GB fee is the one that quietly grows, because it rides on traffic you never watch — container pulls, package installs, s3 reads from private subnets.
#aws #infrastructure
https://rajesh.medampudi.com/blog/aws-nat-gateway-hidden-tax
https://media.medampudi.com/970308496c16bfa0123903f8b0215912ad2b940ef3fd47ff423aafa745b7cde1.png

2026-06-24 17:37:02 UTC

lean infrastructure is four decisions, read top to bottom: cut the waste, own past your break-even, observe it cheaply, don't over-staff.
none of them is a technology. it's a posture — pay for what genuinely buys you something, refuse to pay for what doesn't. cut what's wasted, own what's worth owning, see everything, staff for the real load. that's the whole thing.
https://rajesh.medampudi.com/blog/what-lean-infrastructure-means
https://media.medampudi.com/1a2e07b8957c245278e5a1a757c3c4e14394700ce7f610c1f2f5d2922075c781.png

2026-06-24 09:37:02 UTC

at 6 TB of telemetry a day, self-hosted grafana LGTM ran our whole observability platform for ~$15-18K/mo. datadog at the same volume would've been ~$120K. that's 85% less, same telemetry, same scale.
and it gets worse over time — per-GB pricing and compute+storage scale on different curves, so the gap widens as you grow. datadog isn't a bad tool. you're just renting a meter that bills you more every time your product succeeds. model your bill at 5x volume before you sign, not after.
#observability #selfhosting #grafana
https://rajesh.medampudi.com/blog/observability-cost-kill
https://media.medampudi.com/13aa0856e976f5c57854bb63fab03f047aeda6306d98a569af0abe5f09429c53.png

2026-06-22 22:37:02 UTC

aws nat gateway charges you twice for the same packet. once at $0.045/hr just to exist (~$33/mo per gateway), and again $0.045 for every gigabyte it moves.
the hourly fee is visible so nobody worries about it. the per-GB fee is the one that quietly grows, because it rides on traffic you never watch — docker pulls, apt installs, s3 reads from private subnets.
open cost explorer, group by usage type, look at NatGateway-Bytes. that's the number to chase.
#aws #infrastructure #cloudcost #devops

2026-06-22 06:00:01 UTC

at 6 TB of telemetry a day, self-hosted grafana LGTM ran our whole observability platform for ~$15-18K/mo. datadog at the same volume would've been ~$120K. an 85% cut.
datadog isn't a bad tool. the problem is you're renting something you could own, on a meter that bills you more every time your product succeeds. per-GB pricing is a tax on growth. model your bill at 5x volume before you sign, not after.
#observability #selfhosting #infrastructure

2026-05-10 11:55:06 UTC

- reply

True that.

2026-04-08 08:26:58 UTC

https://media.medampudi.com/38202bd18762f4ac1666f8f7a2426b2d027c103c55b57978e3220c65af43008d.png
New blog post: How We Avoided $120K/Month in Observability Costs
Our Datadog bill was $40K/mo and headed to $120K as we scaled. We replaced it with self-hosted Grafana LGTM stack for $15-18K/mo.
The real lesson: per-GB SaaS pricing is a trap at scale. We went from 1TB/day to 6TB/day and our self-hosted costs barely moved. Datadog would have gone from $40K to $120K+.
Self-hosting isn't just about sovereignty — sometimes the economics leave you no choice.
Full write-up with architecture and timeline:
https://rajesh.medampudi.com/blog/how-we-saved-120k-per-month
#aws #infrastructure #selfhosting #observability #costoptimization

2026-04-05 02:21:44 UTC

- reply

So only bitcoin cannot be the strategy and yearly verification and instruction set is the one other step.

2026-04-04 17:28:28 UTC

My Bitcoin self-custody architecture:
Layer 1: Hardware wallet — keys never touch the internet
Layer 2: 2-of-3 multisig — no single point of failure, geographically distributed
Layer 3: Own node — full verification, no third-party trust
Same engineering principles as infrastructure architecture:
Eliminate single points of failure
Own your data
Verify, don't trust
After FTX, BlockFi, Celsius — the case for self-custody writes itself.
Not your keys, not your coins.
#bitcoin #selfcustody #sovereignty #nostr
https://media.medampudi.com/3a525df23ee0c34df6a5848158330daceb1220d2417b3b086144375c12164f5d.png

2026-03-30 12:14:49 UTC

- reply

🚨 Just published my first blog post — and it's about the number that stopped a leadership meeting cold.
We were a gaming company scaling fast. 100K concurrent players. Infrastructure costs climbing 15% month over month. And the biggest line item wasn't compute or databases — it was observability.
Datadog at 1TB/day: $40K/month. Projecting to 6TB/day: $120K/month.
So we built our own platform for $1,500/month instead.
In the post, I walk through:
→ How tagging AWS resources revealed waste we didn't know existed
→ Why we replaced Datadog + CloudWatch with a self-hosted LGTM stack (Loki, Grafana, Tempo, Mimir)
→ The surprising architectural change that cut cross-AZ transfer costs and improved reliability
→ What I'd do differently — and the question every engineering team should ask before signing a per-GB vendor contract
If your observability bill is growing with your data volume, you might want to read this before the curve catches up with you.
#AWS #Observability #CostOptimization #Grafana #Datadog #Kubernetes #Engineering #naddr1qv…rp66

2026-03-30 09:52:20 UTC

Hey Nostr 👋
I'm Rajesh — platform engineer, 17+ years building distributed systems.
What I've built:
• Observability platforms processing 6TB/day at 85% below SaaS costs
• Saved $120K/month on AWS for a gaming platform with 100K+ concurrent players
• Infrastructure serving 100K+ concurrent users in real-time
What I'll post here:
• Technical deep dives (AWS, K8s, observability, self-hosting)
• Building in public — shipping, breaking, learning
• Bitcoin & sovereignty — running my own node, relay, and media server
• Long-form articles via kind:30023
I run my own Nostr relay (nostr.onbitcoinstandard.com), Blossom media server (media.medampudi.com), and my blog pulls content directly from Nostr at build time.
The protocol is the platform.
⚡ [email protected]
🌐 rajesh.medampudi.com
https://media.medampudi.com/0ae64cd73183238ee034f75e35faf2b1e00cd2865cd8492384b24012ce9cc0eb.png

2026-03-30 08:15:16 UTC

Hey Nostr 👋
I'm Rajesh — platform engineer, 17+ years building distributed systems.
What I do:
• Built observability platforms processing 6TB/day at 85% below SaaS costs
• Saved $120K/month on AWS for a gaming platform with 100K+ concurrent players
• Building Simbotix — bringing enterprise-grade infra to small businesses
What I'll post here:
• Technical deep dives (AWS, K8s, observability, self-hosting)
• Building in public — shipping, breaking, learning
• Bitcoin & sovereignty — running my own node, relay, and media server
• Long-form articles via kind:30023
My stack: I run my own Nostr relay (nostr.onbitcoinstandard.com), Blossom media server (media.medampudi.com), and my blog pulls content directly from Nostr at build time.
The protocol is the platform.
⚡ [email protected]
🌐 rajesh.medampudi.com

2026-03-30 08:13:42 UTC

write test 1774858422814

2026-03-30 08:05:27 UTC

relay write test - Rajesh

2026-03-30 08:01:04 UTC

2025-08-23 16:51:21 UTC

- reply

seems like you have not touched yakihonne.... tell me what is so better in AMETHYST that is not there in yakihonne.

2025-01-31 20:48:49 UTC

- reply

Then you realised you are not driving at all, just sitting beside the driver.

2024-12-14 17:22:19 UTC

- reply

Bitcoin comes to you only when you are ready that could be at
$1,
$10,
$100,
$1000,
$10000,
$100000,
$1000000.
Where did you get into it 🤔

2024-12-02 10:31:20 UTC

- reply

Build your own seed signer, you don't need to buy anything from them. No secure element for seed signer for sure. The rest all are addressed with it.

2024-11-26 03:24:21 UTC

- reply

1bitcoin is 100million sats, What happens after sats. Things are definitely going to cost us 0.00001 sat in the future

2024-11-20 14:55:04 UTC

- reply

Good keep it up. Which path are you taking. Dev or cloud associte.

2024-11-16 03:58:06 UTC

- reply

There are many linux versions oriented for windows users.

2024-11-13 21:59:40 UTC

@npub103m…d3h5 you got to give this a try. It changed my life on nostr #note1kd2…kqws

2024-11-13 21:57:46 UTC

- reply

Unable to zap you????

2024-11-13 21:34:38 UTC

Tru that #note1gjd…hnzw

2024-11-13 21:33:17 UTC

- reply

https://media4.giphy.com/media/QAsHga1AB6dIGUsui6/200w.webp?cid=4ea4f8d5fmgfm9caxxsqe3f0ccf7zwauwlppe77j2ptv33sx&ep=v1_gifs_search&rid=200w.webp&ct=g

2024-11-13 21:30:55 UTC

- reply

Hnd gloves

2024-11-13 21:26:34 UTC

- reply

And I sell at $66k, it still hurts. But seeing my credit card at zero is something delightful.

2024-11-13 21:19:41 UTC

- reply

Let the central paper bitcoin gobble up the money until they cannot. And then the low tide comes where we see who is swimming butt naked.

2024-11-13 17:06:47 UTC

- reply

Jor I think you need to come up with a numeric system In emojis so that we can count from here on.
The people who follow you know or can dig deep down the rabbit hole for the mapping.

2024-11-09 16:39:51 UTC

- reply

Them coming to nostr is a sure fire way to make them right. Because providing value is what nostr values and earns. And propogates. No status quo.

2024-11-08 17:46:01 UTC

- reply

@npub1get…0nfm kudos to your service. Love it so simple to use.

2024-11-06 18:40:46 UTC

- reply

I cannot comment about that last statement. She might come back or be in picture for the next time.

2024-11-06 12:25:11 UTC

- reply

Loving the community.

2024-11-06 04:06:45 UTC

- reply

😁

2024-11-05 20:39:57 UTC

- reply

Hindu so no to steak. Would love some lamb or chichen though.

2024-11-05 20:34:01 UTC

- reply

It is like any other crypto out there. Valuable to the eyes of the beholder only. But if you are comparing it with replacing btc nope. None.

2024-11-05 20:31:48 UTC

- reply

Good show today jor. Thanks for the crazy knowledge you impart.

2024-11-04 20:35:45 UTC

- reply

True that.

2024-11-04 19:22:43 UTC

- reply

Remember, remember, the Fifth of November,
The Gunpowder Treason and Plot.
I see of no reason
Why the Gunpowder Treason
Should ever be forgot...

2024-11-04 19:00:43 UTC

- reply

@npub103m…d3h5 Tomorrow is the day.

2024-11-04 18:53:08 UTC

V Fro Vendetta - Remember remember the 5th of November.
https://video.nostr.build/dafe2d01f2ad68850ffebd6a0add58c48197b3544a19ad7b5b3014019beb66a7.mp4

2024-10-19 13:22:57 UTC

Bitcoin as designed.
https://bitcoin.org/bitcoin.pdf

2024-10-17 17:25:35 UTC

Crypto != Bitcoin