ContentPosts from @vfrank..
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

What’s New in Networking for Kubernetes in the Isovalent Platform 1.17

The Isovalent Platform 1.17 release brings major upgrades to Kubernetes networking, including a new standalone Egress Gateway, dynamic BGP features, enhanced multi-tenant security policies, and smoother Calico-to-Cilium migrations. This version also introduces easier observability with integrated Ti.. read more  

Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

The Risk of Default Configuration: How Out-of-the-Box Helm Charts Can Breach Your Cluster

Apache Pinot's Helm setup is a welcome mat for troublemakers.It throws the doors open to critical services without bothering to ask, "Who goes there?" It's the kind of oversight attackers savor.Meshery and Selenium join the party too.Their default settings flirt with disaster, leaving the gates ajar.. read more  

The Risk of Default Configuration: How Out-of-the-Box Helm Charts Can Breach Your Cluster
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

AI Runs Best On Cloud Native—Who's Managing the Kubernetes Platform?

AI workloads thrive on cloud-native platforms like Kubernetes because they offer the scalability, portability, and speed needed for modern machine learning—but building and running this infrastructure is highly complex and distracts from core AI work. The post argues that unless your business is inf.. read more  

Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Deep Dive: Amazon EKS Dashboard for Visibility into Multi-Cluster Operations and Governance

Amazon EKS Dashboardtames the Kubernetes chaos with finesse. It brings all your clusters into one sharp, centralized view on AWS. Sprawl, security snags, ballooning support costs—gone in a flash. Assess upgrade needs, peek into cost forecasts, and manage add-ons without breaking a sweat. Wave farewe.. read more  

Deep Dive: Amazon EKS Dashboard for Visibility into Multi-Cluster Operations and Governance
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Securing Kubernetes: Integrating AKS with Tetragon for eBPF-Powered Observability

Tetragontaps into the kernel usingeBPF, giving containers an all-access pass without the agent baggage. When you pair Tetragon with AKS, you unlock crystal-clear views of process executions and system calls. Security teams revel in this treasure trove, primed for spotting and squashing threats swift.. read more  

Securing Kubernetes: Integrating AKS with Tetragon for eBPF-Powered Observability
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Building Kubernetes Controllers in Node.js

Kubenodeis the secret weapon forNode.jsdevelopers diving intoKubernetes. Forget about wrestling with Go—this tool empowers you to wield custom resources and automate like a boss... read more  

Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Introducing Gateway API Inference Extension

Gateway API Inference Extensiontakes AI workload routing on Kubernetes and infuses it with model-savvy powers. It slices latency on GPU clusters like a samurai. Meanwhile, theEndpoint Selection Extensionacts like a traffic cop on caffeine, using live metrics to steer pods and trim those nagging tail.. read more  

Introducing Gateway API Inference Extension
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

We saved 30% on Kubernetes by switching to 70% more expensive VMs

Omio swapped Spot VMs for standard ones in a single region and unearthed a shocker. Costs didn't skyrocket; they actually dropped. Network glitches? Gone. They braced for a70% budget implosionbut emerged with a grin. Standardizing on 16-core, 1:4 RAM machines cranked up performance and dialed down c.. read more  

We saved 30% on Kubernetes by switching to 70% more expensive VMs
Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Tracing Syscalls with eBPF in Docker: A Practical Example

This post walks through an example of combining a FastAPI service with an eBPF tracer to monitor syscalls. It covers common pitfalls encountered during development on macOS, the shift to containerizing the environment, and how the author ultimately succeeded in capturing the desired syscalls—a hands.. read more  

Link
@faun shared a link, 5 months, 3 weeks ago
FAUN.dev()

Gateway API v1.3.0: Advancements in Request Mirroring, CORS, Gateway Merging, and Retry Budgets

Gateway API v1.3.0lands with a killer feature:percentage-based request mirroringthat makes traffic handling a whole lot savvier. Fancy a peek at the cutting-edge? Dive into theCORS filtersandretry budgets, all shiny and experimental. Just a heads-up: these feature names sport an "X" at the front—mea.. read more  

Gateway API v1.3.0: Advancements in Request Mirroring, CORS, Gateway Merging, and Retry Budgets