Duck Cloud Blog

Practical guides for Duck Cloud tools, security, and workflows

Tutorials, SEO-friendly explainers, and step-by-step articles that link directly to the tools they describe.

Read Duplicate Query Parameters: Define One API Policy

Web Platform

Duplicate Query Parameters: Define One API Policy

Handle duplicate URL query parameters consistently across proxies, signatures and application code, with explicit rules for repeated filters and scalar fields.

Oct 7, 2026

Read now
Read Metric Cardinality: Keep Labels Within a Budget

Engineering Performance

Metric Cardinality: Keep Labels Within a Budget

Control metric cardinality with bounded labels, route templates and per-metric budgets, while moving user-specific detail into appropriately protected logs.

Oct 7, 2026

Read now
Read Traceparent Debugging: Connect Distributed Request Spans

Engineering Performance

Traceparent Debugging: Connect Distributed Request Spans

Trace missing distributed spans by checking traceparent propagation, proxy boundaries and sampling decisions without treating trace IDs as authentication.

Oct 7, 2026

Read now
Read Python Microbenchmarks: Separate Speed from Noise

Engineering Performance

Python Microbenchmarks: Separate Speed from Noise

Design Python microbenchmarks with repeatable inputs, controlled setup, realistic workloads and honest timing reports before choosing a faster implementation.

Oct 7, 2026

Read now
Read Null vs NaN in Polars: Avoid Silent Data-Cleaning Errors

Data Engineering

Null vs NaN in Polars: Avoid Silent Data-Cleaning Errors

Distinguish absent values from floating-point NaN in Polars, test filtering and replacement rules, and preserve meaningful zero values in data pipelines.

Oct 7, 2026

Read now
Read Polars Lazy CSV Scans: Reduce Work Before Collecting

Data Engineering

Polars Lazy CSV Scans: Reduce Work Before Collecting

Use Polars lazy CSV scans to inspect query plans, select columns early and validate results before treating a faster data pipeline as a correct one.

Oct 7, 2026

Read now
Read Mailbox Forwarding Rules: Review After Account Compromise

Security Operations

Mailbox Forwarding Rules: Review After Account Compromise

Review hidden and visible mailbox forwarding after account compromise, preserve evidence and confirm recovery beyond a password change or successful login.

Oct 7, 2026

Read now
Read Archive Extraction: Prevent Path Traversal Writes

Security Operations

Archive Extraction: Prevent Path Traversal Writes

Extract ZIP and other archives safely with destination containment checks, link policies, resource limits and isolated staging before files reach production.

Oct 7, 2026

Read now
Read Stored XSS in Markdown CMS Previews: A Review Guide

Security Operations

Stored XSS in Markdown CMS Previews: A Review Guide

Protect Markdown previews and rendered articles with safe HTML handling, URL validation and separate editor tests that catch stored XSS before publication.

Oct 7, 2026

Read now
Read SSH Agent Forwarding: Safer Bastion Connections

Security Operations

SSH Agent Forwarding: Safer Bastion Connections

Understand SSH agent-forwarding risks on jump hosts, compare ProxyJump and forwarding, and verify a connection without exposing private-key material.

Oct 7, 2026

Read now
Read SSH Host Key Changed: Verify Before Reconnecting

Security Operations

SSH Host Key Changed: Verify Before Reconnecting

Resolve SSH host-key warnings by checking fingerprints through a trusted channel, identifying legitimate changes and updating only the verified host entry.

Oct 7, 2026

Read now