Systems¶

Named systems referenced across sources: Kafka, Spanner, Envoy, TAO, Sitar, etc.

523 pages

Most-cited¶

Cloudflare Workers 16 sources — Cloudflare Workers is Cloudflare's
Amazon S3 (Simple Storage Service) 14 sources — Amazon S3 is AWS's foundational object storage service, launched March
AWS Lambda 12 sources — AWS Lambda is AWS's function-as-a-service compute platform, launched Nov 2014.
MongoDB Server 11 sources — The MongoDB server (the mongod process) is MongoDB's C++
DynamoDB 9 sources — Amazon DynamoDB is AWS's managed serverless key-value / document
Model Context Protocol (MCP) 9 sources — Model Context Protocol (MCP) is an open standard — published at
MongoDB Atlas 9 sources — MongoDB Atlas is MongoDB's managed cloud database service — a
AWS EKS (Elastic Kubernetes Service) 8 sources — Amazon EKS (Elastic Kubernetes Service) is AWS's managed
Cloudflare Durable Objects 8 sources — Durable Objects (DO) is Cloudflare's
Cloudflare R2 8 sources — R2 is Cloudflare's object-storage tier on
Figma Multiplayer + QueryGraph 8 sources — Multiplayer is Figma's real-time-collaboration server for design
Kubernetes 8 sources — Kubernetes is the dominant open-source container orchestrator (CNCF graduated, originally from Google's Borg lineage). Stub page — expand as…

All pages (A–Z)¶

ACT — Anonymous Credit Tokens — ACT (Anonymous Credit Tokens) is an IETF Privacy Pass draft —
Agent Lee — Agent Lee is Cloudflare's first-party
Agent Skills (standard) — Agent Skills is an emerging standard for publishing
Agentic Inbox — Agentic Inbox
AI Crawl Control — AI Crawl Control
Airbnb Destination Recommendation — Airbnb's Destination Recommendation system is a transformer-based
Airbnb observability platform — Airbnb's in-house metrics platform, built on Prometheus and PromQL,
Amazon API Gateway — Amazon API Gateway is AWS's managed API ingress — fronts a REST,
Amazon Athena — Amazon Athena is AWS's serverless SQL query engine over
Amazon Aurora — Amazon Aurora is AWS's cloud-native relational database
Amazon Bedrock Knowledge Bases — Amazon Bedrock Knowledge Bases is an AWS managed service for
Amazon Bedrock — Amazon Bedrock is AWS's managed foundation-model runtime — a
Amazon CloudFront — Amazon CloudFront is AWS's global content delivery network —
Amazon Cognito — Amazon Cognito is AWS's managed identity service — user directory +
Amazon ECS (Elastic Container Service) — Amazon Elastic Container Service (Amazon ECS) is AWS's
Amazon EMR — Amazon EMR (Elastic MapReduce) is AWS's managed Hadoop-ecosystem
Amazon EventBridge — Amazon EventBridge is AWS's managed serverless event bus:
Amazon EVS (Elastic VMware Service) — Amazon Elastic VMware Service (Amazon EVS) is AWS's managed
Amazon GuardDuty — Amazon GuardDuty is AWS's managed threat-detection service:
Amazon Inspector — Amazon Inspector is AWS's managed vulnerability-scanning
Amazon Ion — Amazon Ion (amazon-ion.github.io/ion-docs)
Amazon Key — Amazon Key is Amazon's physical-access-management product family —
Amazon Kinesis Data Streams — Amazon Kinesis Data Streams is AWS's managed durable
Amazon Managed Grafana — Amazon Managed Grafana (AMG) is AWS's fully managed Grafana
Amazon Managed Service for Prometheus — Amazon Managed Service for Prometheus (AMP) is AWS's managed
Amazon OpenSearch Service — Amazon OpenSearch Service is AWS's managed service for
Amazon QuickSight — Amazon QuickSight is AWS's managed business-intelligence + analytics
Amazon Redshift Spectrum — Amazon Redshift Spectrum is the query-against-S3 extension of
Amazon Redshift — Amazon Redshift is AWS's managed cloud data warehouse — a
Amazon Rekognition — Amazon Rekognition is AWS's managed computer-vision API —
Amazon Route 53 — Amazon Route 53 is AWS's managed DNS service. In the context of
Amazon SageMaker Unified Studio — Amazon SageMaker Unified Studio is the next-generation unified
Amazon Titan Text Embeddings — Amazon Titan Text Embeddings is AWS's family of first-party text
Amazon Verified Permissions — Amazon Verified Permissions (AVP) is AWS's managed
Android Earthquake Alerts System (AEA) — Android Earthquake Alerts (AEA) is Google's planet-scale
Anyscale Platform — Anyscale Platform is the commercial managed systems/ray
Apache Arrow — Apache Arrow is a language-agnostic in-memory columnar format
Apache Hive — Apache Hive is the Hadoop-era SQL-on-HDFS query engine + metastore
Apache Hudi — Apache Hudi (Hadoop Upserts Deletes and Incrementals) is one of
Apache Iceberg — Apache Iceberg is an open table format that sits above columnar
Apache Parquet — Apache Parquet (2013) is a columnar on-disk file format for tabular
Apache Spark — Apache Spark is the de-facto general-purpose distributed
API Catalog (RFC 9727) — API Catalog (RFC 9727,
ArangoDB — ArangoDB is an open-source multi-model database combining
ARC — Anonymous Rate-Limit Credentials — ARC (Anonymous Rate-Limit Credentials) is an IETF Privacy
ArgoCD — ArgoCD is a CNCF-graduated GitOps continuous-delivery
Armeria — Armeria is an open-source asynchronous microservice framework for the JVM (originally from LINE). Supports HTTP/1, HTTP/2, gRPC, Thrift, and…
Arpio — Arpio is a third-party SaaS product (AWS Resilience Competency
ArtifactFS — ArtifactFS (github.com/cloudflare/artifact-fs)
Atlas Global Clusters — Atlas Global Clusters is MongoDB Atlas's
Atlas Hybrid Search (MongoDB native hybrid search functions) — Atlas Hybrid Search is MongoDB's native hybrid-search primitive — a first-class MongoDB Query API…
Atlas Queryable Encryption — Atlas Queryable Encryption is MongoDB's industry-first
Atlas Vector Search — Atlas Vector Search is MongoDB's native
Aurora DSQL — Aurora DSQL is AWS's serverless distributed SQL database, announced at re:Invent 2024. It targets what prior generations of Aurora did not: …
Aurora PostgreSQL Limitless Database — Amazon Aurora PostgreSQL Limitless Database is AWS's horizontally-scaled, PostgreSQL-compatible offering within the Aurora family: a single …
AutoGen — AutoGen is Microsoft Research's open-source multi-agent
AWS App Mesh — AWS App Mesh is AWS's first-generation, Envoy-based service mesh
AWS AppSync — AWS AppSync is AWS's managed GraphQL + Pub/Sub API service.
AWS Auto Scaling Groups — AWS Auto Scaling Groups (ASGs) are the AWS-native primitive for
AWS Backup — AWS Backup is AWS's unified backup control plane — a single
AWS CDK — AWS Cloud Development Kit (CDK) is AWS's imperative IaC framework:
AWS Cloud Map — AWS Cloud Map is AWS's service-discovery registry: customers
AWS CloudFormation — AWS CloudFormation is AWS's native declarative
AWS CodePipeline — AWS CodePipeline is AWS's managed CI/CD-pipeline service —
AWS Config — AWS Config is AWS's resource-configuration tracking and
AWS Control Tower — AWS Control Tower is AWS's governance service on top of
AWS Cost Explorer — AWS Cost Explorer is AWS's cost-analysis UI + API over the
AWS Common Runtime (CRT) — The AWS Common Runtime (CRT) is a C-based library that implements
AWS DevOps Agent — AWS DevOps Agent is AWS's fully managed autonomous AI agent for
AWS Direct Connect — AWS Direct Connect is AWS's dedicated private network
Amazon EBS (Elastic Block Store) — Amazon Elastic Block Store (EBS) is AWS's network-attached block-storage service for EC2 instances — launched Aug 20, 2008, ~two years after…
Amazon EC2 (Elastic Compute Cloud) — Amazon EC2 (launched beta 2006) is AWS's virtual-machine compute service. Its runtime experience is tightly coupled to systems/aws-ebs f…
Amazon ECS Service Connect — Amazon ECS Service Connect is AWS's current-generation, fully
Amazon EFS (Elastic File System) — Amazon EFS (Elastic File System) is AWS's managed NFSv4 network
AWS EKS (Elastic Kubernetes Service) — Amazon EKS (Elastic Kubernetes Service) is AWS's managed
AWS Elastic Disaster Recovery (AWS DRS) — AWS Elastic Disaster Recovery (AWS DRS) is AWS's managed service
AWS ElastiCache — AWS ElastiCache is AWS's managed in-memory cache service,
AWS European Sovereign Cloud — AWS European Sovereign Cloud is AWS's EU-resident cloud
AWS Fargate — AWS Fargate is AWS's serverless container runtime — a compute
Amazon FSx — Amazon FSx is AWS's managed file-storage family for purpose-
AWS Glue for Ray — AWS Glue for Ray is AWS's managed serverless systems/ray
AWS Glue — AWS Glue is AWS's serverless ETL + data-catalog offering. It
AWS GovCloud (US) — AWS GovCloud (US) is AWS's US-public-sector
AWS Identity and Access Management (IAM) — AWS Identity and Access Management (IAM) is AWS's per-partition
AWS KMS — AWS Key Management Service (KMS) is AWS's managed key-management
AWS Lambda — AWS Lambda is AWS's function-as-a-service compute platform, launched Nov 2014.
AWS Network Firewall — AWS Network Firewall is a managed stateful network firewall
AWS Nitro SSD — AWS Nitro SSD is Amazon's in-house custom SSD, with its firmware/hardware stack tailored specifically to the needs of systems/aws-ebs (a…
Amazon CloudWatch Observability Access Manager (OAM) — Amazon CloudWatch Observability Access Manager (OAM) is AWS's
AWS Organizations — AWS Organizations is the AWS service that manages multiple AWS
AWS Systems Manager Parameter Store — AWS Systems Manager Parameter Store is the configuration-store
AWS policy interpreter (IAM / Cedar) — AWS's authorization engine — the component that evaluates whether a given principal is allowed to take a given action on a given resource un…
AWS Private CA (AWS Certificate Manager Private Certificate Authority) — AWS Private CA (AWS Certificate Manager Private Certificate
AWS PrivateLink — AWS PrivateLink exposes AWS services and customer-operated
AWS RDS — Amazon RDS (Relational Database Service) is AWS's managed-relational-
Amazon S3 (Simple Storage Service) — Amazon S3 is AWS's foundational object storage service, launched March
Amazon SageMaker AI — Amazon SageMaker AI is AWS's unified managed ML platform, launched in
Amazon SageMaker Batch Transform — Amazon SageMaker Batch Transform is AWS's managed batch-
Amazon SageMaker Endpoint — Amazon SageMaker Endpoint is AWS's managed model-serving surface
Amazon SageMaker Ground Truth — Amazon SageMaker Ground Truth is AWS's managed data-labeling
Amazon SageMaker HyperPod — Amazon SageMaker HyperPod is the large-scale distributed-training /
Amazon SageMaker AI Pipelines — Amazon SageMaker AI Pipelines is AWS's managed ML-workflow
AWS SAM (Serverless Application Model) — AWS Serverless Application Model (SAM) is AWS's open-source
AWS Secrets Manager — AWS Secrets Manager is AWS's managed service for storing,
AWS Security Hub — AWS Security Hub is AWS's security-posture aggregation service
Amazon SNS — Amazon SNS (Simple Notification Service) is AWS's managed
AWS SQS — Amazon SQS (Simple Queue Service) is AWS's managed message queue:
AWS CloudFormation StackSets — AWS CloudFormation StackSets is the CloudFormation feature that
AWS Step Functions — AWS Step Functions is AWS's managed serverless workflow /
AWS Security Token Service (STS) — AWS Security Token Service (STS) is the AWS service that mints
AWS Systems Manager (SSM) — AWS Systems Manager (SSM) is AWS's managed-instance control plane
AWS Transit Gateway — AWS Transit Gateway is AWS's regional network transit hub —
Amazon VPC Lattice — Amazon VPC Lattice is AWS's application-networking service
Amazon VPC Route Server — Amazon VPC Route Server is an AWS networking primitive that
AWS WAF (Web Application Firewall) — AWS WAF is AWS's managed web-application firewall. Inspects
AWS X-Ray — AWS X-Ray is AWS's managed distributed-tracing service —
Azure Key Vault — Azure Key Vault is Microsoft Azure's managed secrets, keys, and
BastionZero — BastionZero was a zero-trust infrastructure-access company
bazel-remote — bazel-remote is an OSS implementation of the Bazel remote
Bazel — Bazel (Google-originated, OSS) is a hermetic, content-addressed,
Bedrock AgentCore — AWS's agent-runtime service for deploying agentic AI systems inside mechanically-enforced capability envelopes. AgentCore mediates agent act…
Bedrock Guardrails — automated reasoning checks — A 2025/2026-era capability within Amazon Bedrock Guardrails that lets customers formally verify the correctness of AI outputs against a spec…
BGPKIT monocle — monocle is an open-source BGP command-line tool from
Bits AI SRE evaluation platform — The Bits AI SRE evaluation platform is the offline, replayable
Bits AI SRE — Bits AI SRE is Datadog's
BM25 — BM25 (Best Matching 25, Okapi BM25) is the standard lexical
BoltDB — BoltDB (github.com/boltdb/bolt)
Borg — Borg is Google's large-scale cluster-management system —
Bottlerocket — Bottlerocket is AWS's open-source, container-optimised Linux
Buildkite — Buildkite is a commercial hosted CI orchestrator: the
Cadence (Uber) — Cadence (cadenceworkflow.io) is
CanopyCheck — CanopyCheck is Dropbox's narrowly-scoped randomized property-based
Canva CI — Canva CI is Canva's internal continuous-integration system: a
Canva Print Routing Engine — Canva Print Routing Engine decides, for every Canva Print checkout,
Canva Usage-Counting Pipeline — Canva's usage-counting pipeline tracks content-usage events
Cap'n Proto — Cap'n Proto (capnproto.org) is an RPC
Cap'n Web — Cap'n Web is a pure-TypeScript [[concepts/object-capability-rpc|
Cascade ASR — Cascade ASR is Google Research's label for the production-standard
Cedar (policy language) — Cedar is AWS's open-source policy language for fine-grained
Centrifuge (Microsoft) — Centrifuge is Microsoft's cloud-service partitioning / lease-management system, published at NSDI 2010 (Adya, Dunagan, Wolman). Title: Integ…
Certificate Transparency — Certificate Transparency (CT, RFC 6962)
cf CLI (next-generation Wrangler, Technical Preview) — cf is the Technical Preview of the next-generation
Chrome DevTools Protocol (CDP) — Chrome DevTools Protocol (CDP) is the wire protocol
Cilium — Cilium is a widely-adopted Kubernetes CNI
Claude Code — Claude Code is Anthropic's coding-agent CLI, one of the
CLIP (Contrastive Language-Image Pretraining) — CLIP (Contrastive Language-Image Pretraining) is OpenAI's
Cloudflare 1.1.1.1 Resolver — 1.1.1.1 is Cloudflare's free public DNS Resolver service,
Cloudflare Access — Cloudflare Access is Cloudflare's identity-aware
Cloudflare Agent Memory — Agent Memory is Cloudflare's managed memory service for AI agents, announced in private beta on 2026-04-17 ([blog.c…
Cloudflare Agents SDK — The Cloudflare Agents SDK (@cloudflare/agents) is Cloudflare's TypeScript / JavaScript SDK for b…
Cloudflare AI Code Review — Cloudflare AI Code Review is Cloudflare's internal CI-native AI code-review orchestration system, shipped as a GitLab CI component ($CISERVE…
Cloudflare AI Gateway — AI Gateway is Cloudflare's LLM proxy tier
Cloudflare AI Search — AI Search (formerly AutoRAG) is Cloudflare's managed search primitive for AI agents: hybrid BM25 +…
Cloudflare Artifacts — Cloudflare Artifacts (blog.cloudflare.com/artifacts-git-for-agents-beta, [deve…
Cloudflare Browser Rendering — Browser Rendering is Cloudflare's managed
Cloudflare Cache — Cloudflare Cache is the HTTP cache layer embedded in every
Cloudflare Containers — Cloudflare Containers is Cloudflare's
Cloudflare D1 — D1 is Cloudflare's serverless SQLite
Cloudflare Data Localization Suite — Data Localization Suite (DLS) is the Cloudflare product line
Cloudflare Developer Documentation — developers.cloudflare.com
Cloudflare Durable Objects — Durable Objects (DO) is Cloudflare's
Cloudflare Email Service — Cloudflare Email Service is Cloudflare's
Cloudflare FL1 proxy — FL1 is Cloudflare's legacy front-line edge HTTP proxy —
Cloudflare FL2 proxy — FL2 is Cloudflare's newer Rust-based front-line edge HTTP
Cloudflare Flagship — Flagship is Cloudflare's native
Cloudflare Workers KV — Workers KV is Cloudflare's
Cloudflare Local Explorer — Local Explorer is an open-beta introspection UI + API layer
Cloudflare Managed Ruleset — Cloudflare Managed Ruleset is the Cloudflare-maintained
Cloudflare One (SASE) — Cloudflare One is Cloudflare's SASE (Secure Access Service
Cloudflare R2 — R2 is Cloudflare's object-storage tier on
Cloudflare Radar — Cloudflare Radar (radar.cloudflare.com)
Cloudflare rulesets engine — Cloudflare's rulesets engine is the edge component that
Cloudflare Sandbox SDK — Sandbox SDK is Cloudflare's higher-level
Cloudflare Shared Dictionaries — Cloudflare Shared Dictionaries is Cloudflare's edge
Cloudflare Transform Rules — Cloudflare Transform Rules
Cloudflare Universal SSL — Cloudflare Universal SSL (September 2014) is the Cloudflare
Cloudflare URL Scanner — Cloudflare URL Scanner
Cloudflare Vectorize — Vectorize is Cloudflare's managed vector database on the Workers developer platform — the vector-index substrate fo…
Cloudflare Vite Plugin — The Cloudflare Vite plugin lets Vite-powered web-app
Cloudflare WAF — Cloudflare WAF (Web Application Firewall) is Cloudflare's edge
Cloudflare Workers — Cloudflare Workers is Cloudflare's
Cloudflare Workflows — Workflows is Cloudflare's
Cloudflare Zero Trust Access — Zero Trust Access is Cloudflare's identity-
Cluster Autoscaler — Cluster Autoscaler (CA) is the CNCF Kubernetes node-level
CO-RE (Compile Once – Run Everywhere) — CO-RE (Compile Once – Run Everywhere) is the
Code Mode (Cloudflare) — Code Mode is Cloudflare's approach to
Codex CLI — Codex CLI is OpenAI's coding-agent CLI, one of the tools
Confluence Streaming SSR — Atlassian Confluence's server-side rendering tier, rebuilt in 2025–26 on
containerd — containerd (containerd.io,
Coral NPU — Coral NPU is Google Research's reference neural-processing-unit
CoreDNS — CoreDNS is the default DNS server for Kubernetes clusters (CNCF graduated, replaced kube-dns as the default). It resolves service names like…
Corrosion / corrosion2 (Fly SWIM-gossip CRDT-SQLite database) — Corrosion (and its successor corrosion2) is Fly.io's
criterion (Rust) — criterion (crates.io/crates/criterion)
Crossplane — Crossplane is a CNCF project that turns Kubernetes into a
Crush (Dropbox 7th-gen compute platform) — Crush is Dropbox's 7th-generation compute platform, replacing the
cryptsetup — cryptsetup is the Linux userland bridge between
Cursor — Cursor is a commercial AI-native code editor / coding-agent
DABStep — DABStep is a public benchmark for data-science agents, hosted as a
Daft — Daft (github.com/Eventual-Inc/Daft)
Dash Feature Store — Dash Feature Store is Dropbox's internal ML
Dash MCP Server — Dash MCP Server
Dash Relevance Ranker — Dash Relevance Ranker is the learning-to-rank model that
Dash Search Index — Dash Search Index (referred to in the post as the "Dash universal
Databricks Asset Bundles (DABs) — Databricks Asset Bundles (DABs) are a YAML-driven packaging and
Databricks Endpoint Discovery Service (EDS) — Databricks' in-house xDS control plane for Kubernetes service discovery and load balancing. A lightweight server that watches the Kubernetes…
Databricks Foundation Model API — Databricks Foundation Model API is the Databricks-hosted
Databricks — Databricks is a managed lakehouse / data-+-AI platform combining
Datadog Agent — The Datadog Agent is the on-host telemetry collector + forwarder
Datadog MCP Server — Datadog MCP Server is Datadog's official
Datadog Workload Protection — File Integrity Monitoring — Datadog Workload Protection File Integrity Monitoring (FIM) is
Datadog Workload Protection — Datadog Workload Protection is Datadog's Linux runtime-security
Datadog — Datadog is a SaaS observability platform covering infrastructure
Dawn — Dawn is the open-source WebGPU implementation
DBProxy (Figma) — DBProxy is Figma's in-house Go service interposed between the application layer and PGBouncer to enable [[concepts/horizontal-sharding|horiz…
DBT (data build tool) — DBT (data build tool) is the transformation layer of modern ELT
DDX (Dynamic Data eXchange) Orchestrator — DDX (Dynamic Data eXchange) is Mercedes-Benz's internal
Debezium — Debezium is an open-source [[concepts/change-data-capture|Change
Delta Lake — Delta Lake is an open-source concepts/open-table-format built
Delta Sharing — Delta Sharing is an open protocol (originated at Databricks, 2021)
DeltaCAT — DeltaCAT is an open-source Ray project (ray-project/deltacat)
Dexter (Dropbox 7th-gen database platform) — Dexter is Dropbox's 7th-generation database platform, rolled out in
Dicer (Databricks auto-sharder) — Dicer is Databricks' open-sourced auto-sharder: a control plane that continuously and asynchronously updates a service's shard assignment in…
dictionary-worker — dictionary-worker
DIWYDU (Don't Include What You Don't Use) — DIWYDU (Don't Include What You Don't Use) is Figma's internal static-
dm-clone (Linux Device Mapper) — dm-clone is a Linux kernel
dm-crypt + LUKS2 — dm-crypt is the Linux kernel's
Docker — Docker is the container platform
DoLa (Decoding by Contrasting Layers) — DoLa (Decoding by Contrasting Layers,
dosd (denial-of-service daemon) — dosd (denial-of-service daemon) is [[companies/cloudflare|
Dropbox Dash — Dropbox Dash is Dropbox's universal-search and
Dropbox Nucleus — Nucleus is Dropbox's rewritten sync engine — the process that
Robinhood (Dropbox in-house load balancing service) — Robinhood is Dropbox's in-house load balancing service for internal traffic. Deployed in 2020 to unify routing across Dropbox services and d…
Dropbox server monorepo — Dropbox server monorepo is the single Git repository that holds
Dropbox Sync Engine Classic — Sync Engine Classic is Dropbox's original sync engine — the
DS-STAR — DS-STAR (introduced by Google Research, 2025-11-06) is a versatile
DsPy — DsPy (originally from Stanford NLP, now Databricks-sponsored) is a
Dynamic Workers — Dynamic Workers is Cloudflare's
DynamoDB Local — DynamoDB Local is AWS's downloadable emulator of
DynamoDB — Amazon DynamoDB is AWS's managed serverless key-value / document
Dynovault — Dynovault is Dropbox's in-house DynamoDB-compatible key-value
e-Llama — e-Llama is eBay's family of Llama-3.1-derived 8-billion and 70-billion parameter LLMs, adapted to the e-commerce domain via [[concepts/conti…
EAGLE-3 (drafter model) — EAGLE-3 (Extrapolation Algorithm for Greater Language-model Efficiency, version 3) is NVIDIA's [[concepts/drafter-expert-split|drafter model…
ebpf-manager — ebpf-manager is Datadog's open-source Go library
eBPF — eBPF (extended Berkeley Packet Filter) is a Linux kernel
Amazon EKS Auto Mode — Amazon EKS Auto Mode is a variant of [[systems/aws-eks|Amazon
EKS MCP Server — EKS MCP Server (awslabs.github.io/mcp/servers/eks-mcp-server/)
Elasticsearch — Elasticsearch is the Apache-Lucene-based distributed search
Emacs Tramp — Tramp (Transparent Remote Access, Multiple Protocols) is GNU
Emscripten — Emscripten is a compiler toolchain that translates C and C++
Elastic Network Adapter (ENA) Express — ENA Express is AWS's guest-networking feature that runs guest-originated TCP traffic over systems/srd on the underlying network. Announc…
Envoy — Envoy is an open-source L7 proxy originally developed at Lyft, now a CNCF graduated project. It's the canonical data-plane component of side…
Erlang VM (BEAM) — BEAM is the virtual machine that runs Erlang and Elixir. On the
esbuild — esbuild is an extremely fast JavaScript/TS
ESPHome — ESPHome is an open-source firmware / system for ESP-family
etcd — etcd is a strongly consistent, distributed key-value store (CNCF
Expedia Embedding Store Service — Expedia Embedding Store Service is Expedia Group ML Platform
Expedia Lodging Ranker — The Expedia Lodging Ranker is the ranking algorithm behind the
External Secrets Operator (ESO) — External Secrets Operator (ESO) is a CNCF Kubernetes operator
Feast — Feast (feast.dev) is an open-source
FigCache — FigCache is Figma's in-house stateless, horizontally-scalable,
Figma AI Search — Figma AI Search is Figma's AI-powered search feature (shipped at
Figma Commit Signature Verification (GitHub App + Lambda) — Commit Signature Verification is Figma's internal security system
Figma Instance Updater (retired 2026) — Instance Updater was Figma's 2016-era runtime responsible for
Figma Materializer — Materializer is Figma's generic client-runtime framework (shipped
Figma Multiplayer + QueryGraph — Multiplayer is Figma's real-time-collaboration server for design
Figma Parameter Runtime — Figma Parameter Runtime is the unified substrate (2024–2026)
Figma Permissions DSL — Figma's in-house authorization engine (rolled out from early 2021 on),
Figma RenderServer — RenderServer is a server version of the Figma editor —
Figma Response Sampling — Figma's in-house security-detection system for sensitive data
FigTag — Figma's internal data-categorization tool — a metadata layer
Firecracker — Firecracker is AWS's open-source KVM-based micro-VM monitor, used under
firejail — firejail is a SUID
FLAME (Elixir) — FLAME is an Elixir framework — introduced in Fly.io's [Rethinking
flaps (Fly Machines API gateway) — flaps is the API server behind [Fly.io's Machines
FlashAttention-2 — FlashAttention-2 (Dao 2023) is the IO-aware attention kernel that cuts transformer attention memory from O(N²) to O(N) by tiling the softmax…
Fluent Bit — Fluent Bit is a CNCF-graduated open-source telemetry processor
flyctl — flyctl is Fly.io's official CLI and "lovable, sprawling"
Fly gateway — Fly gateways are a fleet of dozens of servers around the
Fly GraphQL API — The Fly GraphQL API is Fly.io's customer-facing control plane
Fly init (Fly Machines init binary) — Fly init is the Rust-written process-zero binary that every
Fly Kubernetes (FKS) — Fly Kubernetes (FKS) is Fly.io's managed
Fly Machines — Fly Machines are Fly.io's universal compute
pilot (Fly Machines next-generation init) — pilot is Fly.io's next-generation init binary for Fly
Fly Proxy — Fly Proxy is Fly.io's in-house proxy — the
Fly Volumes — Fly Volumes are Fly.io's local-NVMe block
Fly WireGuard mesh (6PN) — Fly.io runs an internal IPv6 WireGuard mesh — referred to
flycast — flycast is Fly.io's private-network
flyd — flyd is Fly.io's in-house scheduler / orchestrator for
FoundationDB — FoundationDB (FDB) is an open-source, strictly serializable,
Gemini CLI — Gemini CLI is Google's coding-agent CLI, one of the tools
Generali Malaysia EKS platform — Generali Malaysia's EKS platform is the multi-tenant,
Git — Git is the dominant distributed version control system (origin:
GitHub Apps — GitHub Apps are GitHub's first-class extension mechanism for
GitHub Enterprise Server — GitHub Enterprise Server (GHES) is GitHub's self-hosted
GitHub GraphQL API — GitHub GraphQL API (https://docs.github.com/en/graphql) —
GitHub Issues (search) — GitHub Issues is one of the oldest and most-used surfaces on
GitHub Pull Requests (Files changed tab) — GitHub Pull Requests is the code-review surface built on top of
GitHub Releases — GitHub Releases is GitHub's tagged-artifact distribution surface
GitHub REST API — GitHub REST API (https://docs.github.com/en/rest) —
GitHub — GitHub is the dominant managed SaaS for hosting
GitLab — GitLab is a self-hostable Git-based version-control and CI/CD platform. The sysdesign-wiki references it primarily as the VCS substrate that…
GLIGEN (Grounded Language-to-Image Generation) — GLIGEN (Grounded Language-to-Image Generation) is a
GLSL — GLSL (OpenGL Shading Language) is the shading language shipped
Go compiler — The Go compiler (go build front-end, cmd/compile) compiles
Go linker — The Go linker (cmd/link) joins compiled package artifacts
go-size-analyzer — go-size-analyzer (github.com/Zxilly/go-size-analyzer)
goda — goda (github.com/loov/goda) is
Godzilla (Dropbox 7th-gen dense multi-GPU platform) — Godzilla is Dropbox's 7th-generation dense multi-GPU platform,
Google Cloud KMS — Google Cloud KMS is Google Cloud's managed key-management service.
Google Maps — Google Maps is Google's consumer mapping, routing, navigation, and
Google TPU — Google TPU (Tensor Processing Unit) is Google's custom ASIC family for
GoogleSQL — GoogleSQL is the SQL dialect shared across Google's data systems —
Grafana — Grafana is an open-source metrics-visualization platform — dashboards,
gRPC — gRPC is Google-originated (now CNCF) high-performance RPC framework built on HTTP/2 with Protocol Buffers as the default serialization. The …
Gumby (Dropbox 7th-gen flexible GPU platform) — Gumby is Dropbox's 7th-generation flexible GPU platform — a
gVisor — gVisor is a Google-originated open-
Heirloom — Heirloom is Dropbox's test suite for Nucleus's real client-server
Helm — Helm is the Kubernetes package manager (CNCF). A Helm chart is
Himeji (Airbnb authorization) — Airbnb's in-house centralized authorization system. Enforces access
Home Assistant — Home Assistant is a free, open-source home-automation platform
html/template — html/template is Go's HTML-safe templating stdlib package
Hugging Face Inference — Hugging Face Inference (HF Inference / transformers-based
Husky — Husky is Datadog's distributed observability event store,
Cloudflare Hyperdrive — Hyperdrive is Cloudflare's database
Imagen (Google DeepMind) — Imagen is Google DeepMind's text-to-image diffusion model
Include What You Use (IWYU) — Include What You Use (IWYU)
includes.py (Figma transitive-byte CI counter) — includes.py is Figma's internal CI tool that measures the number of
InfiniBand — InfiniBand is a low-latency, high-bandwidth inter-node RDMA fabric widely used for HPC and large-scale AI training. It provides RDMA (remote…
Infire (Cloudflare inference engine) — Infire is Cloudflare's proprietary inference engine written in Rust, announced at Birthd…
Intel Cloud Hypervisor — Cloud Hypervisor is an open-source Rust-written KVM-based
iSCSI (Internet Small Computer Systems Interface) — iSCSI is a network block-device protocol that encapsulates SCSI
isitagentready.com — isitagentready.com is Cloudflare's
Istio — Istio is the reference sidecar-based service mesh: an systems/envoy proxy injected into every pod intercepting all traffic, with a centr…
K3s — K3s is a lightweight, CNCF-hosted Kubernetes
Kafka Connect — Kafka Connect is the Apache Kafka-native
Kafka Schema Registry — Kafka Schema Registry is a separate service in the
Kafka Streams — Kafka Streams is a JVM client library for building stream-processing
Apache Kafka — Distributed, partitioned, replicated append-only log; the canonical
Karpenter — Karpenter is an open-source (CNCF) Kubernetes node auto-scaler
Keda (Kubernetes Event-Driven Autoscaler) — Keda is an open-source (CNCF graduated) event-driven Kubernetes
Kimi K2.5 — Kimi K2.5 is Moonshot AI's large language model — >1 trillion parameters (~560 GB of weights) — served by Workers AI …
Kiro — AWS's specification-driven development tool — a customer-facing surface where engineers author specifications as first-class artifacts and u…
KOKO Networks — KOKO Networks operates an IoT-backed bioethanol cooking-fuel
kube-proxy — kube-proxy is the Kubernetes node-level component that implements the default Service load balancing. It watches the Kubernetes API for Serv…
Kubernetes — Kubernetes is the dominant open-source container orchestrator (CNCF graduated, originally from Google's Borg lineage). Stub page — expand as…
Kyverno — Kyverno is a CNCF Kubernetes-native policy engine — an admission
Lakebase — Lakebase is Databricks' serverless, Postgres-compatible OLTP
LAVA / NILAS / LARS (VM scheduler) — LAVA is a trio of lifetime-aware VM-allocation
Lean — Lean is an open-source interactive theorem prover and functional programming language. Founded and led by Leo de Moura (now at Amazon). Byro…
Linux Device Mapper (DM) — The Linux Device Mapper is the kernel block-layer proxy
Linux Netlink — Netlink is the Linux kernel's user-space-to-kernel RPC
Live Coder — Live Coder is Dropbox's on-the-fly erasure-coding service
Livebook — Livebook is an Elixir notebook environment —
LiveGraph — LiveGraph is Figma's real-time data-fetching service: a
Llama 3.1 — Llama 3.1 is Meta's 2024 open-weights foundation-model family (8B, 70B, 405B parameters). In the context of this wiki it is notable as the a…
LMCache — LMCache (github.com/LMCache/LMCache) is an open-source KV-cache layer for LLM-serving engines that pro…
Looker — Looker is a commercial business-intelligence / dashboarding
LSVD (Log-Structured Virtual Disk) — LSVD is a log-structured virtual disk architecture in
Apache Lucene — Apache Lucene is the Java full-text search library that
Magic Pocket — Magic Pocket is Dropbox's in-house block-storage system — the
Magic Transit — Magic Transit is Cloudflare's IP-network-
MCP Server Card (standard) — MCP Server Card is a draft standard for describing a
Megatron-LM — Megatron-LM is NVIDIA's open-source, highly-optimised framework for training transformer-based LLMs at multi-node scale. Its defining featur…
Mercedes-Benz Data Mesh — Mercedes-Benz's internal cross-cloud data-sharing backbone, built on
Merkle Tree Certificates (MTC) — Merkle Tree Certificates (MTC) is a TLS certificate-issuance
Metabucket (S3 Bucket Metadata Store) — Metabucket is S3's internal bucket-metadata system — the store
Miniflare — Miniflare is Cloudflare's local
ML-DSA (Module-Lattice Digital Signature Algorithm) — ML-DSA is the NIST-standardised post-quantum digital signature
MLflow — MLflow is an open-source ML lifecycle platform originated at
MobileNet — MobileNet is Google's family of efficient CNN architectures
Model Context Protocol (MCP) — Model Context Protocol (MCP) is an open standard — published at
Moltbot — Moltbot (formerly Clawdbot; renamed OpenClaw as of
Moltworker — Moltworker (github.com/cloudflare/moltworker)
MongoDB Application Modernization Platform (AMP) — The MongoDB Application Modernization Platform (AMP) is MongoDB's strategic investment in agentic tooling + AI-based frameworks for migratin…
MongoDB Atlas — MongoDB Atlas is MongoDB's managed cloud database service — a
MongoDB Community Edition — MongoDB Community Edition is MongoDB's self-managed,
MongoDB Mobile SDK — The MongoDB Mobile SDK was a mobile-local document database that
MongoDB Search Nodes — Search Nodes are dedicated Atlas compute nodes that run search and vector-search workloads independently of the co…
MongoDB Server — The MongoDB server (the mongod process) is MongoDB's C++
mongosync — mongosync is MongoDB's official continuous-replication tool for
Mooncake Store — Mooncake Store (github.com/kvcache-ai/Mooncake) is the cold / warm tier of [Moonshot AI's](https:/…
Mooncake Transfer Engine — Mooncake Transfer Engine (github.com/kvcache-ai/Mooncake) is an open-source high-performance data-…
M-Pesa — M-Pesa is Safaricom's mobile-money platform, first launched in
MXFP microscaling formats — MXFP (Microscaling Formats) is an
MySQL — MySQL is a widely deployed open-source relational database, typically
naga — naga is the shader translation library used by the Rust wgpu
NATS — NATS (nats.io) is an open-source messaging
NBD (Network Block Device) — NBD is the Linux kernel's native network block-device protocol
new-streams — new-streams (github.com/jasnell/new-streams)
Next.js — Next.js is a Vercel-backed React application framework
AWS Nitro — AWS Nitro is the family of dedicated hardware (offload cards + security chip) + lightweight hypervisor that underpins modern EC2. Nitro move…
Node.js — Node.js (nodejs.org) is the
Nomad (HashiCorp) — Nomad is HashiCorp's workload orchestrator — an alternative to
nsjail — nsjail (github.com/google/nsjail)
NVIDIA A10 — The NVIDIA A10 is an Ampere-generation data-centre GPU (released
NVIDIA A100 — The NVIDIA A100 (Ampere architecture, 2020) is the
NVIDIA H100 — The NVIDIA H100 (Hopper architecture, 2022-2023) is the data-centre-class GPU that has become the default substrate for frontier LLM trainin…
NVIDIA L40S — The NVIDIA L40S is the AI-optimized variant of the L40, which
NVIDIA MIG — NVIDIA MIG (Multi-Instance GPU) is the hardware-level
NVIDIA Tensor Core — NVIDIA Tensor Cores are dedicated matrix multiply-accumulate
NVLink — NVLink is NVIDIA's high-bandwidth, low-latency intra-node GPU-to-GPU interconnect. It is the communication substrate that makes [[concepts/t…
Nx (Elixir AI/ML stack) — The Nx stack is how Elixir does
oidc.fly.io (Fly.io OIDC IdP) — oidc.fly.io is Fly.io's in-house OpenID Connect identity provider.
Okta — Okta is an enterprise identity provider (IdP) — external SaaS
Open Policy Agent (OPA / Gatekeeper) — Open Policy Agent (OPA) is a CNCF-graduated general-purpose
OpenCode — OpenCode is an open-source coding agent whose distinguishing property is its server-first architecture — the CLI, TUI…
OpenFeature — OpenFeature (openfeature.dev)
OpenJDK java.util.Arrays.binarySearch — java.util.Arrays.binarySearch is the standard-library binary-search routine in the Java Development Kit (JDK / OpenJDK), authored by Joshua …
OpenNext — OpenNext (opennext.js.org) is an
OpenPubkey — OpenPubkey is an open protocol (github.com/openpubkey/openpubkey,
OpenSSH — OpenSSH is the dominant free implementation of the SSH
OPKSSH (OpenPubkey SSH) — OPKSSH (OpenPubkey SSH) is an open-source tool (Apache 2.0,
Pageserver + Safekeeper (Lakebase / Neon storage tier) — Pageserver and Safekeeper are the two server components of
Panda (Dropbox metadata stack) — Panda is Dropbox's petabyte-scale transactional key-value
parslet — parslet (https://github.com/kschiess/parslet) is a Ruby library
Pay Per Crawl (Cloudflare) — Pay Per Crawl is a Cloudflare feature (announced 2025-07-01 in
Physalia — Physalia is EBS's configuration / control-plane subsystem. Public reference: "Millions of Tiny Databases" (USENIX NSDI 2020) by Brooker et a…
pingora-origin — pingora-origin is one of Cloudflare's
Pingora — Pingora is Cloudflare's in-house
PlanetScale — PlanetScale (planetscale.com) is
PostgreSQL — PostgreSQL ("Postgres") is an open-source object-relational database system, first released in 1986 and continuously developed since. As of …
PQ HSTS — PQ HSTS (Post-Quantum HTTP Strict Transport Security) is a
Presto — Presto is the original distributed SQL query engine from
Privacy Pass — Privacy Pass is the IETF-standardized anonymous-credential
ProGlove Insight — ProGlove Insight is ProGlove's AWS-hosted SaaS platform that
Programming Pearls (Jon Bentley, 1986 / 2000) — Programming Pearls is a 1986 algorithms book (Addison-Wesley; 2nd edition 2000) by Jon Bentley, derived from his "Programming Pearls" column…
Project Suncatcher — Project Suncatcher is Google Research's moonshot programme (announced
Project Think — Project Think (published 2026-04-15 as cloudflare/think) is
QEMU — QEMU (Quick EMUlator) is the long-standing open-source
QuiCK (queuing model) — QuiCK is the queuing model described in Apple's FoundationDB-
RabbitMQ — RabbitMQ is an open-source message broker implementing AMQP
RaftMongo.tla — RaftMongo.tla is the MongoDB-specific TLA+ spec
Ray — Ray is an open-source distributed compute framework out of UC
React — React is Meta's open-source front-end UI framework. Component-
Redirects for AI Training — Redirects for AI Training
Redis — Redis is an in-memory data-structure store — key-value on the
regress-lm — regress-lm is Google DeepMind's open-source library
Regression Language Model (RLM) — A Regression Language Model (RLM) is a language model
Replicate Cog — Cog (cog.run, github.com/replicate/cog)
ResPC — ResPC (portmanteau of RESP — Redis Serialization Protocol —
RFC 9842 — Compression Dictionary Transport — RFC 9842: Compression Dictionary Transport
Rudolph — Rudolph is Airbnb's open-source Santa sync
runC — runC is the OCI-
Amazon S3 Express One Zone — S3 Express One Zone (launched 2023) is S3's first SSD-backed,
Amazon S3 Files — S3 Files (launched 2026-04-07) is an S3 feature that makes any S3
Amazon S3 Tables — S3 Tables (GA Dec 2024, re:Invent) is Amazon S3's first-class
Amazon S3 Vectors — Amazon S3 Vectors is a first-class S3 data primitive for storing
SageMaker HyperPod Inference Operator — SageMaker HyperPod Inference Operator is the Kubernetes
Salesforce — Salesforce is surfaced in the wiki as the customer in AWS's
Santa — Santa is an open-source macOS [[concepts/binary-authorization|binary
Santander Catalyst — Catalyst is Santander's in-house internal developer platform
scientist (github/scientist) — scientist (https://github.com/github/scientist) is GitHub's
SDCH (Shared Dictionary Compression for HTTP) — SDCH — Shared
SGLang — SGLang (Structured Generation Language) is an open-source LLM
Shard Manager (Meta) — Shard Manager is Meta/Facebook's generic shard-management framework for geo-distributed applications, published at SOSP 2021 (Lee, Guo, Sune…
ShardStore — ShardStore is the bottom-most layer of Amazon S3's storage stack — the per-disk software that manages data on each individual hard drive. A …
Sigstore — Sigstore is an open-source, CNCF-hosted software-signing
Sitar (Airbnb dynamic configuration platform) — Sitar is Airbnb's internal dynamic configuration platform. It manages
Skew — Skew is a compile-to-JavaScript
SLED (Self Logits Evolution Decoding) — SLED is a Google Research
Slicer (Google auto-sharder) — Slicer is Google's internal auto-sharding system for datacenter applications, published at OSDI 2016 (Adya, Myers, Howell, Elson, Meek, Khem…
smimesign-figma — smimesign-figma is Figma's minimally-modified fork of GitHub's
smimesign — smimesign is GitHub's open-source S/MIME signing utility for
SMR drives (Shingled Magnetic Recording) — Shingled Magnetic Recording (SMR) is a hard-drive recording format
Snowflake — Snowflake is a cloud OLAP data warehouse. Its defining property for
Softstore (Databricks distributed KV cache) — Softstore is Databricks' distributed remote KV cache for services that aren't themselves sharded. It is built on systems/dicer and is th…
Sonic (Dropbox 7th-gen storage platform) — Sonic is Dropbox's 7th-generation storage platform — the chassis
Speculative cascades — Speculative cascades is a Google-Research-proposed
Speech-to-Retrieval (S2R) — Speech-to-Retrieval (S2R) is Google Research's name for a voice
SQLite — SQLite is a widely-used embedded, file-backed relational
SRD (Scalable Reliable Datagram) — SRD (Scalable Reliable Datagram) is AWS's data-center transport protocol — designed to replace TCP on internal paths where TCP's general-int…
Storex (Databricks internal AI debugging platform) — Storex is Databricks' internal AI-agent platform for database fleet
Strands Agents SDK — Strands Agents SDK (strandsagents.com)
StyleCLIP — StyleCLIP is a 2021 technique
StyleGAN2 — StyleGAN2 is NVIDIA's 2019 GAN architecture for high-fidelity
SVQ (Simulated Voice Queries) dataset — SVQ (Simulated Voice Queries) is a multilingual voice-search
Tableau — Tableau is a commercial business-intelligence / dashboarding
TanStack Virtual — TanStack Virtual is an open-source headless virtualization library
Temporal — Temporal is a durable workflow-orchestration engine — write
Terraform — Terraform (HashiCorp) is an infrastructure-as-code tool: declare
TestContainers — TestContainers is an OSS library (Java first, now many
text/template — text/template is Go's standard-library templating package
Tigris — Tigris (Tigris Data, Inc.) is a globally distributed,
TLA+ — TLA+ is Leslie Lamport's specification language for describing
TLC Model Checker — TLC is the explicit-state finite-state model-checker for
trie-hard — trie-hard is Cloudflare's open-source
Trinity — Trinity is Dropbox's end-to-end randomized testing framework for
Trino Gateway — Trino Gateway is an open-source proxy / load balancer in front
Trino — Trino is an open-source distributed SQL query engine — "a fork
TypeScript — Microsoft's typed superset of JavaScript (2012→), industry-standard
UNet (Encoder-Decoder Architecture) — UNet is a convolutional encoder-decoder architecture
Unity AI Gateway (Databricks) — Unity AI Gateway is Databricks' productised instance of the
Unity Catalog (Databricks) — Unity Catalog (UC) is Databricks' unified governance solution for
unweight-kernels — unweight-kernels
Unweight — Unweight is Cloudflare's lossless LLM weight compression
USSD (Unstructured Supplementary Service Data) — USSD (Unstructured Supplementary Service Data) is a real-time,
V8 JavaScript Engine — V8 is Google's open-source JavaScript and WebAssembly engine,
Vector (log / metrics pipeline) — Vector is a CNCF open-source log/metric/event forwarder. Deploys
VideoPrism (Google) — VideoPrism is a video foundation model (ViFM) published by
vinext — vinext (github.com/cloudflare/vinext,
Virtual Kubelet — Virtual Kubelet is an
Vitess — Vitess (vitess.io) is an open-source
vLLM — vLLM is an open-source high-throughput, low-latency inference
vmagent (VictoriaMetrics) — vmagent is the
VMware — VMware (ESXi / vSphere) is the canonical proprietary
voyage-3 / voyage-3-large — The voyage-3 family is Voyage AI's
Voyage AI — Voyage AI is MongoDB's embedding-and-reranking model line,
VSCode Remote-SSH — VSCode Remote-SSH is Microsoft's remote-editing feature for
Web Bot Auth (Cloudflare) — Web Bot Auth is Cloudflare's proposal for cryptographically
Web PKI — The Web PKI (public-key infrastructure) is the governance-
Web Streams API — Web Streams (MDN)
WebGL — WebGL is a browser graphics API originally based on OpenGL ES 2.0
WebGPU — WebGPU is the modern browser graphics API standardized at the W3C,
wggwd — wggwd is the Fly.io-authored daemon that runs on every
WGSL — WGSL (WebGPU Shading Language) is the shading language defined
whydeadcode — whydeadcode (github.com/aarzilli/whydeadcode)
WiredTiger — WiredTiger is the B-tree-based storage engine MongoDB has used
WireGuard — WireGuard is a modern VPN protocol + Linux kernel subsystem
Workers AI — Workers AI is Cloudflare's managed LLM + embedding + reranker inference platform on the developer platform — models…
Wrangler CLI — Wrangler is Cloudflare's official
Xen (hypervisor) — Xen is a general-purpose open-source hypervisor originating at the University of Cambridge. Until late 2017, every EC2 instance ran on Xen. …
YOLO (You Only Look Once) — YOLO (You Only Look Once) is a family of single-stage
YouTube Real-Time Generative AI Effects — YouTube Real-Time Generative AI Effects is the product surface