Blog

Featured

PageHits Middleware: Minimal-Allocation Request-Counting Pipeline in ASP.NET Core 10

Take the ASP.NET Core 10 middleware that writes a dbo.PageHits row per request and drive its allocation profile near zero: Span<char> for path/UA parsing, IMemoryCache 30-second dedup, fire-and-forget Task.Run INSERT. Under a synthetic 50K req/minute load, Gen0 GC drops from 15% to 2% and P99 latency goes 12ms → 3ms. Full code, dotnet-counters measurements, Span optimization traps and fire-and-forget gotchas all in one — straight from the live bilalkose.com.tr system.

0 comments 723 views

  • Cloudflare Edge Security with .NET: WAF + IP Blocklist on Kubernetes

    0 comments 864 views

    If you're running a .NET 10 service on Kubernetes, most attacks can be stopped at the Cloudflare edge before they ever reach your origin. With WAF API integration, IP blocklist push, ASN-based bot detection and a UFW second line, we caught 100% of 157 attack probes at the edge in 24 hours. This post covers architecture, real production code and live metrics — 33% real visitors vs 67% datacenter/VPN/null ASN, 15 auto-blocked IPs, 61% origin CPU drop.

    Read more

  • Origin-Side Security Telemetry with .NET and Kubernetes: Real Visitor Detection

    0 comments 786 views

    If your analytics dashboard shows 100 visitors a day, your real human count is roughly 33. The remaining 67% is datacenter, VPN and null ASN traffic. I'm running a live production system that separates bot from human using PageHits + AttackProbes + IsSuspectNetwork, auto-blocks via a MERGE+OUTPUT sliding-window burst counter, and stores it all with a KVKK-compliant PII-free design for 90 days. Full SQL schema, code and real 24-hour production measurements inside — 246 PageHits backfill, 503 AttackProbes ETL, 9 attack categories.

    Read more

  • Şimşek's 20-Year Corporate Tax Exemption: A Call to Google/Microsoft/Apple for IFC and HIT-30's \.5 Billion Data Center Push (May 2026)

    0 comments 948 views

    On May 6, 2026, Treasury and Finance Minister Mehmet Şimşek made a direct appeal to global technology giants on TRT Haber: relocate your regional management centers to Türkiye. In the Istanbul Finance Center, companies that derive 80% of their revenue from abroad receive 20 years of 0% corporate tax; for non-IFC companies, a 95% reduction. In the same framework, the HIT-30 High Technology Investment Program targets a $10 billion digital infrastructure investment by 2030 with a $1.5 billion data center call and a $1.6 billion AI call. A field note with comparisons to Singapore, Netherlands, Ireland, and Dubai DIFC, in numbers.

    Read more

  • AlphaEvolve: DeepMind's Gemini Agent Optimizing Google's Own Infrastructure — One-Year Production Field Notes (May 2026)

    0 comments 1449 views

    DeepMind published AlphaEvolve's one-year production retrospective on May 7, 2026: 0.7% of Google's global compute continuously recovered, 23% speedup on a Gemini training kernel, 32.5% on FlashAttention, 20% reduction in Spanner LSM-tree compaction, cache replacement policy discovered in 2 days instead of months, and the first AI contribution to a TPU Verilog circuit integrated into upcoming hardware. Strassen's 4×4 matrix-multiplication record broken after 56 years. From an engineer's perspective: what changed, what didn't — with the actual numbers.

    Read more

  • OPEC at 36-Year Low + UAE Exit: The Oil Cartel's Unraveling and Hormuz's Million Toll Regime (May 2026)

    0 comments 972 views

    According to a Bloomberg survey, OPEC production fell to 20.55 million barrels per day in April — the lowest since 1990. The United Arab Emirates announced its exit from OPEC and OPEC+ on April 28, effective May 1; a 59-year membership ended. The same week, Iran created a new authority called the Persian Gulf Strait Authority and began charging $2 million per vessel for transit through Hormuz (CNN: $600-800 million monthly revenue). The structural unraveling of the oil cartel is the most significant of its kind since the 1970s — a neutral field note based on the evidence.

    Read more

  • CrowdStrike 2026 Global Threat Report: 27-Second Breakout, Stryker's Intune Disaster, and Turkey's Healthcare Front

    0 comments 1040 views

    CrowdStrike's February 24, 2026 report announced a 27-second breakout record, 89% AI-adversary increase, and the era of identity weaponization. On March 11, Stryker had 80,000 devices wiped via a single Microsoft Intune account (zero malware). On April 7 the FBI/CISA/NSA Iran ICS/PLC alert dropped. In Turkey Q1 2026: Medical Park BLACKWATER 3.3 TB claim + 4 KVKK healthcare ransomware notifications. The full picture from a Turkish engineer's perspective.

    Read more