The 'Wait a Patch Cycle' Doctrine Is Dead, and Most SREs Haven't Noticed

SREs split into two camps, and neither one is fully right. The first camp matured out of operational IT. They’ve lived through a bad patch Tuesday, a driver update that bricked a fleet, a vendor hotfix that took down a cluster. Their instinct: let a patch cycle pass before you touch it. Let someone else find the landmine. This dates me, but is the world I learned in myself. The second camp never did operational IT work. They came up through cloud-native, IaC, CI/CD. They don’t have the scar tissue, but they inherit the doctrine anyway, because the first camp is louder and… has tenure. ...

July 2, 2026 · 5 min · Zac Lohrenz

Re-reading The Phoenix Project in 2026: The CEO Constraint the Book Missed

Re-reading The Phoenix Project in 2026: The CEO Constraint the Book Missed The Phoenix Project has become canonical for SREs and ops engineers: required reading for understanding DevOps, Theory of Constraints, and why IT organizations fail under their own weight. But re-reading it in 2026, a decade after publication, reveals a critical structural blindspot that undermines its core thesis: the book identifies constraints everywhere except where the real one sits. ...

May 15, 2026 · 8 min · Zac Lohrenz

Google Workspace to Microsoft 365 Migration: Two Weeks of Pilot Migration Stories

Two weeks into a Google Workspace to Microsoft 365 pilot migration for a mid-size org. Thirteen mailboxes in the pilot batch. What should have been a straightforward cutover turned into a deep education in Exchange migration edge cases, MRS throttling behavior, and the gap between what Microsoft documents and what actually happens in production. The Setup The architecture: phased cutover with Mimecast coexistence routing, GAM-managed forwarding during the transition window, and batch migration via Exchange Online migration endpoints backed by a GCP service account. A verified alias subdomain (o365.[domain]) serves as the target delivery domain, with workspace.[domain] as the coexistence routing domain pointing back to Google. ...

March 24, 2026 · 8 min · Zac

What a Google Workspace to M365 Migration Actually Looks Like Mid-Flight

Most migration guides describe the happy path. This isn’t that. This is what you actually find when you inherit a migration in progress and start pulling on threads. The Setup Mid-flight GWS to M365 migration. Test batches already running. Domain setup incomplete. Multiple migration endpoints in Exchange Online pointing at a GCP service account that nobody can confirm ownership of. This is a fairly normal state for an org-scale migration that started before all the architecture decisions were locked in. ...

March 11, 2026 · 6 min · Zac Lohrenz

CDN Architecture: Design Patterns for Global Scale

Content Delivery Networks (CDNs) are fundamental to modern web architecture. Let’s explore key design patterns and implementation strategies for optimal content delivery. CDN Architecture Fundamentals Edge Location Strategy Effective CDN implementation requires careful planning of edge locations: Geographic Distribution Place edge nodes near user concentrations Consider regional traffic patterns Account for network topology Cache Strategy Static content: Aggressive caching Dynamic content: TTL-based invalidation API responses: Selective caching Implementation Patterns 1. Origin Shield Configuration # Nginx origin shield configuration location / { proxy_cache_use_stale error timeout http_500 http_502 http_503 http_504; proxy_cache_valid 200 302 1h; proxy_cache_valid 404 1m; proxy_cache my_cache_zone; proxy_cache_key $scheme$proxy_host$request_uri; } 2. Cache Control Headers Implement proper cache control headers: ...

June 20, 2025 · 2 min · Me