Newslurp

<< Stories

2025 Cloudflare Radar ☁️, MongoBleed 🥷, Year In LLMs ⌛

TLDR DevOps <dan@tldrnewsletter.com>

January 2, 12:10 pm

TLDR DevOps
Cloudflare Radar 2025 reported 19% internet traffic growth, Googlebot dominance, aggressive AI crawling with extreme crawl-to-refer ratios ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌  ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ 

TLDR

TLDR DevOps 2026-01-02

📱

News & Trends

The 2025 Cloudflare Radar Year in Review: The rise of AI, post-quantum, and record-breaking DDoS attacks (4 minute read)

Cloudflare Radar 2025 reported 19% internet traffic growth, Googlebot dominance, aggressive AI crawling with extreme crawl-to-refer ratios, post-quantum encryption securing about half of human web traffic, and Go-based API clients exceeding 20% adoption.
MongoBleed explained simply (7 minute read)

MongoBleed (CVE-2025-14847), a critical vulnerability in MongoDB's zlib1 message compression path, has allowed unauthenticated attackers to read arbitrary heap memory, including sensitive data, across most versions since 2017. Though a fix has been issued for supported versions, over 213,000 internet-exposed MongoDB databases remain vulnerable to this "dead-easy" exploit.
2025: The year in LLMs (28 minute read)

2025 was defined by reasoning-driven models and practical agents—especially coding agents and CLI workflows—unlocking longer autonomous tasks and widespread prompt-based image editing, while raising new safety risks around YOLO usage, AI browsers, and prompt injection. Meanwhile, Chinese open-weight models surged, OpenAI's lead narrowed as Gemini advanced, cloud models pulled ahead of local ones, AI “slop” went mainstream, and data centers drew increasing backlash.
🚀

Opinions & Tutorials

Observing and scaling MLOps infrastructure on Amazon EKS (7 minute read)

This post explains how to observe and scale MLOps infrastructure on Amazon EKS using Prometheus, Grafana, and Kubernetes autoscaling, with detailed guidance on monitoring GPUs, AWS accelerators, ML-specific metrics, and integrating open source and third-party observability tools.
Terraform Parallelism: How It Works, Tuning, & Best Practices (15 minute read)

This post explains Terraform parallelism, how concurrent resource operations affect provisioning speed, and how to configure and manage parallelism within Terraform and external systems, along with best practices to optimize infrastructure deployment time.
How to integrate Kairos architecturally into an edge AI platform (6 minute read)

Aurea Imaging, a Dutch agricultural tech startup, addressed the challenge of managing and remotely updating a global fleet of NVIDIA Jetson-powered remote sensing devices by adopting a cloud-native approach, including K3s and the CNCF Kairos project. This enabled atomic, image-based OS upgrades, eliminating inconsistent "snowflake" devices and significantly improving operational efficiency.
🧑‍💻

Resources & Tools

CertMate (GitHub Repo)

CertMate is a powerful SSL certificate management system for modern, distributed infrastructure. It supports 22 DNS providers with multi-account capabilities. CertMate features Docker containerization, a comprehensive REST API, and integrates with various enterprise storage backends like Azure Key Vault and AWS Secrets Manager.
react2shell-scanner (GitHub Repo)

react2shell-scanner is a command-line tool that can detect two critical RCE vulnerabilities: CVE-2025-55182 and CVE-2025-66478. These vulnerabilities affect Next.js applications that use React Server Components. The tool typically functions by sending a crafted RCE proof-of-concept payload, but a "safe-check" flag is available for detection via side-channel indicators without executing code.
🎁

Miscellaneous

Efficient image and model caching strategies for AI/ML and generative AI workloads on Amazon EKS (9 minute read)

This post details caching and storage strategies for AI and ML workloads on Amazon EKS. It covers container image caching, data loading, checkpointing, and storage services like Amazon S3, S3 Express One Zone, and FSx for Lustre to optimize performance and cost.
Optimizing Datadog at scale: Cost-efficient observability at Zendesk (19 minute read)

Zendesk engineers reduced Datadog observability costs by auditing metrics, traces, and logs, adopting single-span tracing, targeted sampling, and log deduplication, flattening spend while preserving visibility, performance insights, and engineering workflows.
⚡

Quick Links

Kubernetes v1.35: Introducing Workload Aware Scheduling (4 minute read)

Kubernetes v1.35 introduced significant workload-aware scheduling improvements, including the new Workload API (`scheduling.k8s.io/v1alpha1`) for defining multi-Pod application requirements and an initial implementation of gang scheduling for all-or-nothing placement.
Software taketh away faster than hardware giveth (12 minute read)

C++ and Rust have been the fastest-growing major languages because computing is constrained by power and chips, making performance-per-watt and performance-per-transistor efficiency increasingly critical as AI drives demand.

Love TLDR? Tell your friends and get rewards!

Share your referral link below with friends to get free TLDR swag!
https://refer.tldr.tech/fc7198a6/10
Track your referrals here.

Want to advertise in TLDR? 📰

If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.

Want to work at TLDR? 💼

Apply here, create your own role or send a friend's resume to jobs@tldr.tech and get $1k if we hire them! TLDR is one of Inc.'s Best Bootstrapped businesses of 2025.

If you have any comments or feedback, just respond to this email!

Thanks for reading,
Kunal Desai & Martin Hauskrecht


Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.