How to Rollout an Update for a CNI Without Breaking the World Wide Web
Discover how Project Calico implements feature flagging for safe CNI updates, exploring real-world examples like the Reddit Pi Day incident and best practices for maintaining stable cloud networking operations.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant architecture, and robust traffic monitoring for enhanced network security.
Your Cheat Code for API Authorization - From OpenAPI to Fine-Grained Access Control
Discover how to implement fine-grained API authorization using Topaz, an open-source service compatible with Open Policy Agent and Google Zanzibar ReBAC model, to manage complex microservices security effectively.
Enabling OpenTofu for the Enterprise - Building an Infrastructure as Code Platform
Discover how to scale OpenTofu across enterprise teams, implement security and compliance measures, and create a developer-centric ecosystem for Infrastructure as Code while ensuring seamless migration from Terraform.
Writing Memory with eBPF - Implementing W3C Trace Context Propagation
Explore advanced eBPF memory writing techniques for W3C trace context propagation, examining available APIs, security implications, and practical solutions for protocol stack implementation.
Reinventing Seccomp with eBPF and KRSI for Enhanced Kernel Security
Explore how eBPF and KRSI can enhance Linux kernel security beyond traditional Seccomp capabilities, with practical demonstrations for implementing advanced syscall filtering in containerized environments.
Live Migrating Production Clusters From Calico to Cilium
Discover how to perform live migrations of Container Networking Interface (CNI) from Calico to Cilium in production environments, exploring methodologies, procedures, and valuable lessons learned.
Scaling Network Policy Enforcement Beyond the Cluster Boundary with Cilium
Dive into advanced network policy enforcement across Kubernetes clusters using Cilium, exploring solutions like Clustermesh and KVstoremesh for efficient multi-cluster management and scalability.
How to Use XDP and eBPF to Accelerate IPSec Throughput by 400%
Discover how to dramatically boost IPSec network performance using XDP and eBPF techniques, with practical implementation steps and benchmark analysis for achieving up to 400% throughput improvement.
Hubble Beyond Cilium - Network Observability for Any Kubernetes CNI
Discover how to leverage Hubble as a versatile observability platform independent of Cilium, enabling network monitoring and metrics collection with any custom data plane or CNI in Kubernetes environments.
Confluent's Multi-Cloud Journey to Cilium - Pitfalls and Lessons Learned
Discover the challenges and solutions in migrating Kubernetes clusters to Cilium across multiple cloud providers, focusing on security features, performance optimization, and maintaining connectivity during transition.
Making Envoy Resilient to Sudden Increases in Load
Discover practical strategies for protecting Envoy against load spikes and DDoS attacks, including HTTP/2 'Rapid Reset' mitigation and advanced overload management techniques for enhanced system resilience.
Building Zero Trust with Envoy - Implementing Enterprise-Grade ZTNA Proxy
Discover how to build enterprise-grade Zero Trust Network Access using Envoy, covering implementation challenges, architecture decisions, and scaling strategies for handling multiple data centers and high-bandwidth connections.
Decentralized Federated Machine Learning: Empowering Edge Devices with Kubernetes
Discover how to implement Federated Machine Learning with Kubernetes for privacy-preserving model training across edge devices, enabling efficient image classification and scaled computations.
Secure Your Systems Using Policy-as-Code
Discover how policy-as-code bridges the gap between development and security teams, improving developer experience while maintaining robust system security. Learn implementation best practices and overcome common challenges.
7 Common Cyber Attacks and How to Prevent Them
Explore seven major cyber attack methods and learn effective defense strategies for authentication systems, from credential stuffing to injection attacks and real-world prevention techniques.
Building Multi-tenant Applications with Vercel and Auth0
Learn how to implement multi-tenant authentication in B2B applications using Auth0's sample app and deploy seamlessly with Vercel's integration for secure, scalable user management.
Deploy Laravel to Shared Hosting with DreamHost - Using Composer and Git
Master the process of deploying Laravel applications to shared hosting platforms using DreamHost, with practical guidance on SSH, Composer, Git integration, and essential server configurations.
Introduction to AI - Understanding Core Technologies and Implementation Best Practices
Gain insights into AI fundamentals, from NLP and machine learning to ethical considerations, while exploring real-world applications, security practices, and implementation strategies.
Credential Management Strategies and Obstacles During Password Manager Setup
Explore user behaviors and challenges in password manager adoption, focusing on setup strategies, security implications, and recommendations for improving credential management systems.
Where to Recruit for Security Development Studies: Comparing Six Software Developer Samples
Explore findings from a comprehensive study comparing six recruitment platforms for security development research, examining developer experience, skills, and platform effectiveness.