Newslurp

<< Stories

Why WebAssembly ❓, Database Migrations At Scale 🪐, EC2 Network Throttling 🛜

TLDR DevOps <dan@tldrnewsletter.com>

May 16, 11:23 am

TLDR DevOps
WebAssembly enables powerful offline apps by running native code in the browser, reducing server needs and hosting costs ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌  ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ 

TLDR

Together With Chronosphere

TLDR DevOps 2025-05-16

[Manning Ebook] Effective Platform Engineering (Sponsor)

Want to design platforms that are powerful, sustainable, and easy to use? Grab a copy of Manning's Effective Platform Engineering ebook (brought to you by Chronosphere) to learn how to:

  • Build self-service platforms and developer portals
  • Enable teams to focus on delivering business value without getting bogged down by day-to-day operations
  • Drive developer autonomy and increase efficiency while avoiding chaos

Download your free copy

📱

News & Trends

Kubernetes v1.33: Updates to Container Lifecycle (4 minute read)

Kubernetes v1.33 introduces a zero sleep duration option for container lifecycle hooks via the enabled-by-default PodLifecycleSleepActionAllowZero feature gate. Alpha support for customizing the stop signal sent to containers is also included in v1.33 through the ContainerStopSignals feature gate, allowing users to specify a custom stop signal in the container spec provided the Pod has the operating system specified with spec.os.name.
Visualize Amazon Aurora, Zendesk, and more: What's new in Grafana data sources (4 minute read)

Grafana Labs has introduced new data sources for Amazon Aurora, Azure CosmosDB, CockroachDB, Drone, Netlify, and more. These data sources enhance observability by allowing users to query and visualize data from various systems within a centralized Grafana platform, with many available for free in Grafana OSS. The company also announced the release of Grafana 12.
🚀

Opinions & Tutorials

The pros and cons of Lambdalith (5 minute read)

Lambdaliths consolidate all API routes into a single AWS Lambda function, enabling easier migration from traditional apps, familiar developer experience, and cost-effective use of Lambda Function URLs. However, they can introduce slower cold starts, reduced observability, and scaling limitations compared to the function-per-endpoint approach.
Why I use WebAssembly (5 minute read)

WebAssembly enables powerful offline apps by running native code in the browser, reducing server needs and hosting costs. It can be used to share core logic across web and native apps, making tools like cross-platform DAWs easier to build and more accessible.
🧑‍💻

Resources & Tools

k0rdent (GitHub Repo)

k0rdent is designed to streamline the deployment and management of Kubernetes clusters at scale, acting as a "super control plane" for orchestrating multiple Kubernetes control planes. Built for platform engineering, k0rdent simplifies complex operations with centralized management and comprehensive lifecycle capabilities.
GitHub Actions Importer (GitHub Repo)

GitHub Actions Importer assists in planning, testing, and automating migrations to GitHub Actions from platforms like Azure DevOps, Bamboo, and Jenkins.
🎁

Miscellaneous

Handling Network Throttling with AWS EC2 at Pinterest (10 minute read)

Pinterest experienced severe performance degradation in critical storage systems due to undetected EC2 network throttling, particularly from microbursts that exceeded instance bandwidth limits. To address this, it deployed ENA metrics fleetwide for real-time monitoring and implemented techniques like fine-grained S3 rate limiting, staggered backup scheduling, and payload compression to mitigate throttling and improve reliability.
Kubernetes Powers Mastercard's AI-Workbench for Secure Innovation (5 minute read)

Mastercard developed a secure, scalable AI-Workbench on Red Hat OpenShift, enabling rapid experimentation, model training, and deployment in isolated, GPU-powered Kubernetes clusters. This platform streamlines collaboration and automation for data scientists while meeting strict data privacy and offline operation requirements.
Leveraging Change Data Capture For Database Migrations At Scale (3 minute read)

Squarespace migrated databases from PostgreSQL to CockroachDB using change data capture (CDC) to minimize downtime. A custom consumer using Apache Beam was written to process events and a fallback pipeline to mirror the process back to Postgres was created as a safety net. The migration allowed for horizontal scaling and improved resilience. Challenges like referential integrity were addressed by temporarily turning off constraints during the isolated migration process.

Quick Links

Kube-Policies: Guardrails for Apps Running in Kubernetes (17 minute read)

Kubernetes' default configurations prioritize speed over security, creating vulnerabilities that necessitate more adaptive, developer-friendly guardrails.
Use GCP Cloud Run with HAProxy to act like a serverless load-balancer service (6 minute read)

GCP's native HTTP(S) Proxy Load Balancer, while powerful, poses configuration and flexibility challenges, especially for multi-port services and non-HTTP traffic.
Forget IPs: using cryptography to verify bot and agent traffic (11 minute read)

Cloudflare has introduced HTTP message signatures and request mTLS as proposals for friendly bots to authenticate themselves, replacing less reliable methods like user agent headers and IP addresses.

Love TLDR? Tell your friends and get rewards!

Share your referral link below with friends to get free TLDR swag!
Track your referrals here.

Want to advertise in TLDR? 📰

If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.

Want to work at TLDR? 💼

Apply here or send a friend's resume to jobs@tldr.tech and get $1k if we hire them!

If you have any comments or feedback, just respond to this email!

Thanks for reading,
Kunal Desai & Martin Hauskrecht


Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.