Fastly Staging Environment 🆕, Scaling Rate Limits 📈, AWS Zone Groups 🚀

Fastly's Staging Environment allows seamless testing of CDN and Compute configurations in a production-like environment ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌  ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ 

Sign Up |Advertise|View Online TLDR Together With TLDR DevOps 2025-01-31 DevOps Security Cheat Sheet by Wiz (Sponsor) Discover essential security practices, from input validation to zero-trust architecture, that can help you create a secure DevOps environment. This 12-page cheat sheet covers best practices for developing securely from code to cloud. Each section combines theoretical knowledge with hands-on tips for application. Topics covered include: Secure coding practices Infrastructure security Monitoring and response Get the Cheat Sheet 📱 News & Trends Introducing Fastly Staging Environment: Test with Confidence, Deploy with Ease (3 minute read) Fastly's Staging Environment allows seamless testing of CDN and Compute configurations in a production-like environment, ensuring smooth deployment with minimal risk or troubleshooting. Built on Fastly's core principles of speed and reliability, it offers instant, no-code staging capabilities for confident and efficient workflows. A new era for Helm (3 minute read) The Helm project revitalized contributor engagement by addressing maintainer challenges, speeding up feedback on pull requests, and encouraging testing to onboard new contributors. With clear timelines and actionable goals, such as preparing for Helm v4 development and releases aligned with major conferences, the project has attracted more contributors and maintained focus. Cloudflare meets new Global Cross-Border Privacy (CBPR) standards (6 minute read) Cloudflare has achieved global-first audits for the new Global CBPRs and Global PRP certifications, reinforcing its commitment to privacy-respecting data flows and adherence to international standards. These certifications provide Cloudflare customers with assurance that its privacy practices are recognized across 39 jurisdictions, with more regions set to join soon. 🚀 Opinions & Tutorials Access Azure from HCP Terraform with OIDC federation (5 minute read) This article explains how to securely access Azure from HashiCorp Cloud Platform (HCP) Terraform using OpenID Connect (OIDC) federation, which eliminates the need for long-lived credentials. It provides a tutorial on how to set up dynamic credentials for Azure via HCP Terraform to improve security and access management. The surprising way to save memory with BytesIO (4 minute read) Reading data from an in-memory file-like object in Python can unnecessarily double memory usage by creating extra copies. More efficient approaches allow for the access of data without additional allocation, which reduces memory overhead while maintaining performance. 🧑‍💻 Resources & Tools ParadeDB (GitHub Repo) ParadeDB is an Elasticsearch alternative built on Postgres that focuses on modernizing real-time search and analytics features. Tailpipe (GitHub Repo) Tailpipe is an open-source SIEM tool that enables instant log insights using DuckDB. It enables users to analyze millions of events in seconds directly from their terminal. 🎁 Miscellaneous Exploring Heap Exploitation Mechanisms: Understanding the House of Force Technique (15 minute read) The blog delves into heap exploitation, focusing on techniques such as the "House of Force," which leverages vulnerabilities in glibc's memory allocation to manipulate memory layouts and potentially execute arbitrary code. Scaling Our Rate Limits to Prepare for a Billion Active Certificates (8 minute read) Let's Encrypt scaled its rate-limiting system to handle billions of active certificates by replacing a database-intensive approach with a Redis-based solution using the Generic Cell Rate Algorithm (GCRA), significantly reducing latency and database load. This new system ensures fair usage, smoother request handling, and better scalability while maintaining free, automated certificate issuance for the growing web. ⚡ Quick Links AWS now supports Zone Groups for Availability Zones (1 minute read) AWS now supports Zone Groups for Availability Zones across all regions, simplifying the identification and differentiation of Availability Zones and Local Zones. Grafana 11.5 release: easily share Grafana dashboards and panels, secure frontend code for plugins, and more (6 minute read) Grafana 11.5 introduces enhanced sharing options for dashboards, streamlined filter creation, and a Plugin Frontend Sandbox for improved security. How to integrate performance testing and continuous profiling for deeper application insights (4 minute read) Grafana has announced a new integration between Grafana Cloud k6 and Grafana Cloud Profiles that enhances performance testing with continuous profiling capabilities. Love TLDR? Tell your friends and get rewards! Share your referral link below with friends to get free TLDR swag! https://refer.tldr.tech/3b85ceef/10 Track your referrals here. Want to advertise in TLDR? 📰 If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us. Want to work at TLDR? 💼 Apply here or send a friend's resume to jobs@tldr.tech and get $1k if we hire them! If you have any comments or feedback, just respond to this email! Thanks for reading, Kunal Desai & Martin Hauskrecht Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.