InfoQ - DevOps

Cloudflare Measures Origin TLS Preferences, Cutting Handshake Retries from 52% to 3.7%

Steef-Jan Wiggers — Sun, 20 Sep 2026 08:15:00 GMT

Cloudflare has replaced its static X25519 guess for origin TLS handshakes with per-origin measurement. HelloRetryRequests on scanned origins fell from roughly 52% to 3.7%, removing over 150 ms from p90 latency. Post-quantum connections completing in one round trip rose from 0% to 99.2%, though only 12.8% of origins support it.

By Steef-Jan Wiggers

DoorDash Uses Multi Agent LLMs to Clean up 60,000 Feature Flags

Leela Kumili — Fri, 18 Sep 2026 13:50:00 GMT

DoorDash built a multi-agent LLM system to automate stale feature flag cleanup across more than 60,000 flags and 623 repositories. The workflow combines live experimentation data through MCP, engineer approval, isolated Git worktrees, parallel agents, and automated validation. In an evaluation of 50 flags, 45 produced usable pull requests at an average of 13.8 minutes and $4.79 per cleanup.

By Leela Kumili

WSO2 Releases Agent Manager as Enterprises Look to Control Growing AI Agent Sprawl

Craig Risi — Fri, 18 Sep 2026 12:00:00 GMT

WSO2 has announced the general availability of WSO2 Agent Manager, an open-source platform designed to provide centralized governance, identity management, security controls, and operational oversight for AI agents running across different models, frameworks, and deployment environments.

By Craig Risi

Article: Architecting Secure and Scalable Facial Verification Systems

Praveen Kumar Gopalakrishnan — Fri, 18 Sep 2026 09:00:00 GMT

When three thousand employees verify at once, synchronous API calls collapse. This article presents a four-layer architecture for high-volume face verification: client-side filtering that cut cloud costs 30%, decoupled detection and verification enabling 10x scaling, risk-based dynamic thresholds, and zero-trust privacy with consent gates and automated data purging for GDPR and HIPAA.

By Praveen Kumar Gopalakrishnan

Kubernetes Multi-Cluster Project Karmada Reaches CNCF Graduation

Claudio Masolo — Thu, 17 Sep 2026 10:00:00 GMT

The Cloud Native Computing Foundation (CNCF) announced on September 2026 that Karmada, a multi-cluster and multi-cloud Kubernetes orchestration project, has graduated. This multi-cluster and multi-cloud Kubernetes orchestration project reached CNCF's highest maturity tier.

By Claudio Masolo

Presentation: When Incidents Refuse to End

Vanessa Huerta Granda — Thu, 17 Sep 2026 09:30:00 GMT

Vanessa Huerta Granda explains how marathon incidents expose the gap between work as imagined and work as done. Drawing from real-world scenarios, she shares how complex outages reveal organizational fragility, human limits, and system interdependencies—and why incident response requires structured endurance, humane rotations, and holistic cross-functional coordination.

By Vanessa Huerta Granda

Repeated VM Escapes By GPT-5.6-Cyber Based Agents Prove VMs and OS' Require Better Maintenance

Olimpiu Pop — Thu, 17 Sep 2026 07:07:00 GMT

Traditional virtual machines are inadequate for isolating cyber-capable autonomous agents. Tests using GPT-5.6-Cyber indicated multiple escape attempts due to kernel flaws. While Firecracker provided some containment, vulnerabilities remained. The study underscores the need for minimal attack surface virtualisation technologies and rapid, proactive patching strategies to safeguard host systems.

By Olimpiu Pop

GPT-6 Astra is the First Model OpenAI Classifies as Critical for Cybersecurity

Steef-Jan Wiggers — Thu, 17 Sep 2026 04:59:00 GMT

OpenAI has classified GPT-6 Astra at the Critical cybersecurity threshold under its Preparedness Framework, a first. In expert-led testing the model found previously unknown vulnerabilities in a browser and an OS kernel and built working exploits. The same system card reports a substantial decline in chain-of-thought monitorability.

By Steef-Jan Wiggers

Microsoft Open-Sources TauGrid to Simplify AI Workload Management on Kubernetes

Sergio De Simone — Wed, 16 Sep 2026 18:00:00 GMT

Microsoft has open-sourced TauGrid, a cloud-native platform designed to manage, schedule, and monitor AI workloads on GPU-enabled Kubernetes clusters.

By Sergio De Simone

Lyft Moves Streaming Fleet to Apache Flink Kubernetes Operator

Mark Silvester — Wed, 16 Sep 2026 11:00:00 GMT

Lyft has moved hundreds of production Flink jobs from a 2020 in-house Kubernetes operator to the Apache Flink Kubernetes Operator, unlocking last-state upgrades, in-place autoscaling and resource autotuning across the fleet.

By Mark Silvester

Dropbox Outlines How Focusing on Existing Infrastructure Efficiency Can Create Headroom for AI

Matt Foster — Wed, 16 Sep 2026 07:15:00 GMT

Dropbox has outlined how a decade of infrastructure optimization is helping it absorb growing demand from AI without treating new data-center capacity as the only answer. Its work spans forecasting, fleet utilization, storage density, hardware lifecycles, and rack-level power delivery, much of it predating the current AI boom.

By Matt Foster

AI-Assisted Discovery Helps Microsoft Patch More Than 1,000 Vulnerabilities in a Month

Sergio De Simone — Tue, 15 Sep 2026 17:00:00 GMT

With its latest September 2026 Patch, which addresses more than 950 vulnerabilities, Microsoft has patched about 2,750 vulnerabilities so far this year. While many attribute this surge to AI-assisted security research, organizations may struggle to keep pace and fully benefit from these advances, particularly when it comes to evaluating, prioritizing, and deploying patches.

By Sergio De Simone

Atlassian Automates Root Cause Analysis by Correlating Metrics, Logs and Traces

Craig Risi — Tue, 15 Sep 2026 12:00:00 GMT

Atlassian has outlined a new approach to automating root cause analysis for large-scale cloud-native incidents, using correlation across metrics, logs, distributed traces, and service topology to generate ranked hypotheses about where failures originate and how they propagate.

By Craig Risi

Amazon Linux 2027 Enters Public Preview with SELinux Enforcing by Default

Steef-Jan Wiggers — Tue, 15 Sep 2026 03:40:00 GMT

AWS has released Amazon Linux 2027 in public preview, built on the AL2023 baseline with kernel 7.1 and SELinux in enforcing mode by default. Applications that pass on AL2023's permissive mode may fail under enforcing. The announcement gives no AL2023 end-of-support date, no GA date, and no in-place migration path.

By Steef-Jan Wiggers

Agoda Replaces 72-Shard SQL Server Price Cache with DragonflyDB

Leela Kumili — Mon, 14 Sep 2026 13:48:00 GMT

Agoda migrated its 1.5 TB hotel Price Cache from 72 SQL Server shards to DragonflyDB to handle growing read and write volumes. The migration used staged dual reads, parity validation, gradual traffic shifting, and decentralized failover detection. Agoda reports an approximately eightfold reduction in P99 read latency, with two DragonflyDB clusters providing high availability.

By Leela Kumili