TLDR DevOps 2025-10-27

When developers know what secure code looks like, tools become more effective, and vulnerabilities never reach production. The SANS Developer Security Playbook reveals how hands-on training reduces rework, protects velocity, and embeds secure coding into software lifecycles.

>> SANS Developer Training equips developers with the knowledge and skills to secure code at the source.

>> Explore the Demo to experience the real-world practice that builds muscle memory, not just checkboxes.

Calico v3.31 has been released, with the NFTables data plane now generally available, promising efficiency and performance improvements over IPTables by streamlining networking changes in the Linux kernel. Installation is now easier with a new template defaulting to the eBPF data plane, automatically disabling kube-proxy, and using bpfNetworkBootstrap to detect API server endpoints. The release also includes UI improvements for policy traces, new burst and peak rate controls for bandwidth and packet rate QoS, and finer control over NAT outgoing via natOutgoingExclusions.

Docker's Model Context Protocol (MCP) allows organizations to build their own MCP catalog to ensure appropriate guardrails are in place for AI tooling deployment. By using Docker's MCP Toolkit, Catalog, and Gateway, organizations can control the tools available to developers, customers, or AI agents, with the MCP Catalog hosting over 220+ containerized MCP servers.

This guide explains how to extend Amazon EKS with Hybrid Nodes using AWS IAM Roles Anywhere and HashiCorp Vault PKI to securely authenticate nodes outside AWS. It details how to configure Vault as a certificate authority, establish trust with IAM Roles Anywhere, and join external Linux servers to an EKS cluster for hybrid, compliant, and low-latency workloads.

Nanit replaced Amazon S3 as its primary video landing zone with a custom in-memory system called N3, built in Rust, to handle short-lived baby monitor video uploads. By offloading only overflow traffic to S3, it cut ~$500K per year in S3 request and storage fees while maintaining reliability and ordering guarantees through a two-tier fallback system, stress testing, and simple RAM-based storage.

More than 60% of Azure cores now run Linux. Whether you're dealing with aging infrastructure, rising costs or pressure to modernize, this free guide gives you a proven roadmap to migrate your Linux workloads to Microsoft Azure. Learn to reduce risk, control costs and get to value faster

Yaak, a fast and private offline-first API client built with Tauri, Rust, and React, was created for organizing and executing REST, GraphQL, WebSockets, Server Sent Events, and gRPC.

Google Research designed the Coral NPU, an open-source IP, as a machine learning accelerator core for energy-efficient AI at the edge in wearable devices. Based on the 32-bit RISC-V ISA, the Coral NPU includes matrix, vector (SIMD), and scalar processor components and is freely available for integration into ultra-low-power System-on-Chips (SoCs).

Fastly's September 2025 DDoS weather report highlights a record 15.5 million requests-per-second attack lasting over an hour against a media and entertainment enterprise, marking one of the most intense layer 7 incidents to date. Overall attack volume dropped to 61 percent of August's levels, but trends suggest higher activity during the school year, reinforcing the need for proactive DDoS protection and preparedness as attacks grow more sophisticated.

Developers are leveraging the Model Context Protocol to create AI-native workflows that connect agents with tools, codebases, and browsers, giving rise to a new generation of intelligent, agentic tooling. Supported by Microsoft's OSPO, GitHub Copilot, and VS Code, nine open source projects showcase framework integrations, AI-enhanced developer experience, and scalable automation to demonstrate how MCP is transforming open source development and productivity.

Marco Casalaina describes how he automated repetitive questionnaire tasks using a method called structured vibe coding, which treats AI agents like members of a software team guided by clear specifications. By integrating GitHub Copilot and Azure AI Foundry, he demonstrates that structured, spec-driven development enables AI agents to collaborate effectively under human oversight, improving productivity and scalability in software creation.

This live session, hosted by experts from GitKraken and GitClear, looks at three complementary approaches to measure AI-enabled dev productivity: longitudinal tracking, diagnostics, and benchmarking. Join live (10/29)

A collection of custom shell scripts that streamline everyday tasks across file management, networking, text processing, and system control.

Many engineers approach code review incorrectly in the LLM era, focusing too narrowly on the diff rather than understanding how the change fits into the overall system.

This project successfully modernized the Jenkins documentation platform by migrating legacy systems to a new dual-site architecture using Antora for versioned content and Vite.js for non-versioned content.