HNHacker News
TopNewBestAskShowJobs

kenrose

1,402 karma · joined March 17, 2012

CTO/Co-founder at OpsLevel (www.opslevel.com)

Previously at Shopify, PagerDuty, and Autodesk.

submissionscomments
kenrose··on QMD – Quick Markdown Search
Authored by Tobi, Shopify CEO.

An on-device search engine for everything you need to remember. Index your markdown notes, meeting transcripts, documentation, and knowledge bases. Search with keywords or natural language. Ideal for your agentic flows.

kenrose··on Scott Adams has died
At 10:25am ET, HN is more up-to-date than Wikipedia (article hasn't been updated yet to reflect his passing).
kenrose··on Self-hosting a NAT Gateway
We did this at OpsLevel a few years back. Went from AWS managed NAT gateway to fck-nat (Option 1 in the article).

It’s a (small) moving part we now have to maintain. But it’s very much worth the massive cost savings in NATGateway-Bytes.

A big part of OpsLevel is we receive all kinds of event and payload data from prod systems, so as we grew, so did our network costs. fck-nat turned that growing variable cost into an adorably small fixed one.

kenrose··on Mosh Mobile Shell
When mosh came out back in 2013, it solved a pretty real problem of ssh crapping out when you changed networks (like moving from in-office to home). It solves it at the app layer and uses UDP and is designed to work in high loss / latency environments. Very cool.

At the same time, in recent years, I've found that ssh running on top of Wireguard / Tailscale is way more usable than 2013 days. Those latter tools address the roaming IP issues directly at the network layer.

So while there are still issues with ssh / TCP if you're on a really crappy network (heavy packet loss, satellite link, etc), those have been less common in my experience compared to IP changes.

The “killer use case” for Mosh feels a lot less killer now.

kenrose··on Tailscale has raised $160M
Totally fair to bring up IPv6 vs. IPv4. However, I think Tailscale’s approach might sidestep some of that pain.

Avery (Tailscale CEO) has actually written about IPv6 in the past:

    - https://apenwarr.ca/log/20170810 (2017)
    - https://tailscale.com/blog/two-internets-both-flakey (2020)
IPv6 has struggled in adoption not because it’s bad, but because it requires a full-stack cutover, from edge devices all the way to ISP infra. That’s a non-starter unless you’re doing greenfield deployments.

Tailscale, on the other hand, doesn’t need to wait for the Internet to upgrade. Their model sits on top of the existing stack, works through NATs, and focuses on "identity-first networking". They could evolve at the transport or app layer rather than rip and replacing at the network layer. That gives them way more flexibility to innovate without requiring global consensus.

Again, I don’t know what their specific plans are, but if they’re chasing something at that layer, it’s not crazy to think of it more like building a new abstraction on top of TCP/IP vs. trying to replace it.

kenrose··on Tailscale has raised $160M
Can likewise confirm dblohm7 is a real human too :)
kenrose··on Tailscale has raised $160M
You're not wrong to think Tailscale is primarily a software company, and yes, salaries are a big part of any software company's costs. But it's definitely more complex than just payroll.

A few other things:

1. Go-to-market costs

Even with Tailscale's amazing product-led growth, you eventually hit a ceiling. Scaling into enterprise means real sales and marketing spend—think field sales, events, paid acquisition, content, partnerships, etc. These aren't trivial line items.

2. Enterprise sales motion

Selling to large orgs is a different beast. Longer cycles, custom security reviews, procurement bureaucracy... it all requires dedicated teams. Those teams cost money and take time to ramp.

3. Product and infra

Though Tailscale uses a control-plane-only model (which helps with infra cost), there's still significant R&D investment. As the product footprint grows (ACLs, policy routing, audit logging, device management), you need more engineers, PMs, designers, QA, support. Growth adds complexity.

4. Strategic bets

Companies at this stage often use capital to fund moonshots (like rethinking what secure networking looks like when identity is the core primitive instead of IP addresses). I don't know how they're thinking about it, but it may mean building new standards on top of the duct-taped 1980s-era networking stack the modern Internet still runs on. It's not just product evolution, it's protocol-level reinvention. That kind of standardization and stewardship takes a lot of time and a lot of dollars.

$160M is a big number. But scaling a category-defining infrastructure company isn't cheap and it's about more than just paying engineers.

kenrose··on Ask HN: Would you still choose Ruby on Rails for a startup in 2025?
I’m the CTO at OpsLevel, where we’ve been running a Rails monolith for ~6 years. We started on Rails 5, upgraded to 7, and are currently moving to 8. Before this, I worked on Rails at PagerDuty (including splitting a monolith into microservices) and on Shopify’s “majestic” monolith.

The best thing about Rails is its strong, opinionated defaults for building web applications. It handles HTTP request routing, data marshalling, SQL interactions, authentication/authorization, database migrations, job processing, and more. That means you can focus on business logic instead of wiring up the basics.

Rails isn’t as fast or lightweight as Go, but they solve different problems. For most web apps, the bottleneck is I/O, not CPU. Rails optimizes for developer productivity, not raw performance, and that tradeoff is often worth it, especially when speed of iteration matters more than squeezing out every last cycle.

kenrose··on We need more calm companies
Fair enough, but the system isn’t set up to optimize for the happiness of founders and employees. It’s set up to maximize returns, which agreed ends up concentrated in a very few rich outcomes.

(btw, big fan of Lost and Founder).

kenrose··on Never Ship on Fridays
Dilbert... or any place that practices continuous delivery?

Sounds like your current/previous companies have heavier weight release processes that reduces how often releases go out?

kenrose··on Have a complaint about CVS? So do pharmacists: Many just walked out
I thought Subversion was the answer to complaints about CVS? Then git followed afterwards.

/s

kenrose··on jq 1.7
It's great to see jq get some releases again.

It's a big part of our check evaluation infra at OpsLevel.

kenrose··on No-more-secrets: recreate the decryption effect seen in the 1992 movie Sneakers
I have to ask: how are you using this in prod?
kenrose··on Waterloo Style
BMath 2005 here.

I worked with a bunch of smarter-than-me UW grads after graduating.

My “how to write large systems” takeaway from that early point in my career was to focus on the interfaces between various parts. What I’d never thought about until now is that is a very data centric viewpoint.

- What system has what data?

- In what shape?

- What shape does the next system need its data in?

- Are the interfaces between these orthogonal? Shallow? Easy to grok? Tight (as opposed to leaky)?

Great article.

kenrose··on TSA now wants to scan your face at security. Here are your rights
Same here re: opt out.

You tell the agent you want to opt out. They scream “Opt out!” at the top of their lungs.

Then another agent takes you through the plexiglass door beside the metal detector.

That agent recites a brief script about how they’ll pat you down and then do so.

Pat down complete, they check their gloves for residues in a machine. Once that’s done, you’re free to go.

It generally adds 5-10 mins to the security line. Sometimes, if they really backed up and you say opt out early enough, it can actually be faster.

You have the right to opt out and can exercise it.

kenrose··on Tailscale Funnel
In addition to the "show your dev work to the CEO" use case, tunnels (ahem, "funnels") like this are useful when you're building functionality that requires pointing webhooks at your devlocal environment.

e.g., if you're building an integration with any of the myriad of SaaS tools that fire webhooks, you can test in devlocal and have a URL of whatever.tunnel.com.

There are tools like ngrok and localtunnel that exist to do just this. I'm looking forward to replacing those with TS Funnels.

kenrose··on Splunk IP suit against Cribl
“You either die a hero or you live long enough to see yourself become the villain”
kenrose··on I spent two years trying to do what Backstage does for free
Thanks for that feedback re: pricing and demo.

It's always a tricky balance, but I definitely sympathize with the feeling of just getting started without having to talk to a salesperson.

kenrose··on I spent two years trying to do what Backstage does for free
Thanks Andrew. (Disclosure: I'm a founder/CTO).

Backstage is super configurable, but requires that you build your own developer portal. That generally requires a dedicated team of people at your company to think about dev workflows to support, building plugins, plus hosting/maintenance.

At OpsLevel, we're focused on a much more turnkey solution. We want to get you up and running in under an hour, not weeks / months.

kenrose··on I spent two years trying to do what Backstage does for free
> So when I had questions, I needed to track down who owned the service, where their code lived, where their Jira ticket project was, which Slack channel they lived in, and where in the wiki their internal documentation was. Keeping track of this for 100+ services was a pain, so I ended up creating a spreadsheet. It turns out that everyone else in the org needed this information, so this spreadsheet that I created for myself became the document of record for services.

100%.

Solving this problem is why I started OpsLevel [1] a few years back. Everyone always starts with a spreadsheet because they're flexible.

But spreadsheets quickly fall apart because they're not complete / up-to-date, automated, or really scalable.

We figured we could automate a whole lot of collecting service info from different places (Git, k8s, other deployment streams) and keeping it up-to-date.

[1] - https://www.opslevel.com

kenrose··on I spent two years trying to do what Backstage does for free
Agreed. We've seen this with our customers at OpsLevel who lean away from Backstage. Installing (and updating) Backstage is painful.

One of our team members who previously ran a Backstage instance at $OldJob wrote about that pain:

https://www.opslevel.com/blog/hands-on-backstage-learnings

kenrose··on Ask HN: What cool things would you add to your home renovation?
Other things:

- tankless water heater

- if you want motorized blinds, have wiring go right to the window frame. You can do a battery otherwise, but you’ll have to recharge it every month.

- solar cells and battery pack

- home automation system (if you’re into that kind of thing)

- timer switches on bathroom fans

- bathroom fan in your laundry room

- hidden safe that’s built in (eg in wall or in floor)

kenrose··on Ask HN: What cool things would you add to your home renovation?
Related, network jacks.

Not one or two, but any place you think you’ll ever need one. It’s much easier to wire these before you have drywall up.

I did this in a basement reno at my old place. Square room, had one on each wall plus one in the extra bedroom. No wifi dead zones, Xbox and TV had no latency.

kenrose··on The Rsync Algorithm (2016)
See also: "The rsync algorithm" (1998) https://rsync.samba.org/tech_report/

(and also https://rsync.samba.org/how-rsync-works.html)

The great innovation with rsync was the idea of having a rolling checksum. It allows:

  - quickly identifying which parts of a file have changed
  - efficient computation (because the checksums are incremental / rolling)
kenrose··on Israeli rules say West Bank visitors must declare love interest
By that argument, the State of Israel is not a state? Since those same countries (Iran, Pakistan, Bangladesh, etc) do not in fact recognize Israel’s existence.

The recognition you point to from other countries, is, at its heart, political. Those other countries are Muslim majority and vehemently anti-Israel. Ignoring that political and religious bias is intellectually dishonest.

But, if you still maintain Palestine is indeed a state, please answer the following:

- when was its independence? - who is the leader? - what is its currency? - who are its main trade partners?

kenrose··on Israeli rules say West Bank visitors must declare love interest
It depends on both sides to show genuine willingness of the rights of the peoples on both sides.

Absolutely, Israel still has more steps to take towards peace (eg, removing settlements).

Historically though, PA leadership has rarely demonstrated any honest desire for compromise or peace. Hamas, currently the government in Gaza, literally calls for the “obliteration” of the State of Israel as part of its charter.

kenrose··on Israeli rules say West Bank visitors must declare love interest
Citation for that stat?

Like it or not, 30% of the world’s countries identify as Muslim majority and part of the Organization of Islamic Cooperation.

None of those countries recognize Israel as a state.

Just because a bunch of countries believe (or don’t believe) something doesn’t make it a fact.

kenrose··on Run Stable Diffusion on Your M1 Mac’s GPU
This worked for me too.
kenrose··on DevOps: An idea so good, no one admits they don’t do it
Yeah, iterate quickly, learn from your customers usage, repeat.

You're right, total rubbish. /s

kenrose··on Oven (Bun)'s first employee will “grind” for nine months with poor WLB
Bun. Oven. Nine months.

Perhaps?

Page 1 of 6Next →