Newslurp

<< Stories

Internet Instability 🌐, IaC Complexity πŸ§‘β€πŸ’», GitHub MCP Exploit πŸ₯·

TLDR DevOps <dan@tldrnewsletter.com>

May 28, 11:09 am

TLDR DevOps
A malformed BGP Prefix-SID attribute triggered routing instability by causing Arista devices to reset sessions after receiving corrupted messages β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ  β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ 

TLDR

Together With Chronosphere

TLDR DevOps 2025-05-28

Ebook: Observability for AI-Driven Environments (Sponsor)

Traditional monitoring solutions weren't designed for modern AI-driven applications. This ebook will help you understand what's driving your observability debt, and how you can bring your systems up to speed with:

  • Hardware monitoring
  • Data pipeline monitoring
  • Model lifecycle visibility
  • Cost control requirements

Download it free from Chronosphere, here πŸ‘‡

πŸ“₯ Optimizing Observability for AI-Driven Environments: Challenges and Solutions

πŸ“±

News & Trends

What's New in PostgreSQL 18 - a DBA's Perspective (5 minute read)

PostgreSQL 18 beta 1 introduces an asynchronous I/O subsystem that promises to increase I/O throughput, especially for Linux users who leverage io_uring. Also included in the update are native support for UUIDv7, improvements to the EXPLAIN command, the ability to add NOT NULL constraints as NOT VALID, and a new syntax for INSERT ON CONFLICT.
BGP handling bug causes widespread internet routing instability (4 minute read)

On May 20, a malformed BGP Prefix-SID attribute triggered routing instability by causing Arista devices to reset sessions after receiving corrupted messages via Juniper routers, affecting major networks like Starlink and Disney. The incident exposed critical flaws in BGP error handling and highlighted the need for stricter validation and vendor accountability to prevent large-scale internet disruptions.
πŸš€

Opinions & Tutorials

Mastering Amazon Q Developer Part 1: Crafting Effective Prompts (8 minute read)

Effective communication with Amazon Q Developer significantly impacts the quality and usefulness of its responses, with structured, detailed prompts enabling faster task completion and more accurate results. Prompt engineering techniques, including providing specific technical context and requesting defined output formats, can dramatically improve developer productivity and reduce unnecessary clarification.
IaC Is Too Complicated. Where's That β€˜Easy Button'? (5 minute read)

Infrastructure as Code has grown more complex over the last two decades, with widespread adoption but only a small percentage of organizations fully codifying their cloud environments. There are persistent challenges like configuration drift, tool sprawl, and inconsistent practices. Only 17% of teams currently use AI to ease these burdens.
The two types of open source (6 minute read)

Open source projects should be judged by expectations, not just licensesβ€”distinguishing between high-expectation (e.g., TypeScript) and low-expectation (e.g., solo side projects). Users need to set realistic expectations and maintainers should be clear about support levels.
πŸ§‘β€πŸ’»

Resources & Tools

Meet Amp: The coding agent built for quality-obsessed devs (Sponsor)

Everything is changingβ€”and the way we build software is too. Amp is Sourcegraph's new coding agent, now available for everyone. It runs in VS Code and as a CLI, helping developers move faster, together β€” whether they're debugging, exploring, or collaborating across codebases. 

Read here to learn how engineers are getting the most from Amp. The best way to really understand it? Try it today.

FastMCP (GitHub Repo)

FastMCP is designed to simplify the creation of Model Context Protocol (MCP) servers and clients. It handles complex protocol details, enabling developers to focus on building tools with features like server proxying, composition patterns, and high-level Pythonic interfaces.
Taskmaster (GitHub Repo)

Taskmaster is an AI-powered task-management system for AI-driven development with Claude that integrates with Cursor AI.
🎁

Miscellaneous

Accelerate the modernization of Mainframe and VMware workloads with AWS Transform (7 minute read)

Generative AI and AWS Transform enable organizations to modernize legacy IT systems like mainframes and VMware by automating complex tasks such as code transformation, documentation, and migration planning. By using agentic AI, AWS Transform accelerates migration timelines and supports scalable, cloud-first infrastructure with minimal business disruption.
Linux cgroup from first principles (5 minute read)

This deep dive into Linux cgroup v2 demystifies how control groups work by walking through manual setup, process isolation, and resource constraints using a NixOS VM. Emphasizing the Unix philosophy of β€œeverything is a file,” the post demonstrates how to apply CPU and memory limits with raw file interfaces, highlighting both the power and quirks of cgroups without relying on systemd abstractions.
Pyrefly vs. ty: Comparing Python's Two New Rust-Based Type Checkers (11 minute read)

This post compares two new Rust-based Python type checkers: pyrefly (Meta) and ty (Astral). Pyrefly is stricter with aggressive inference, while ty is faster and emphasizes gradual typing and clearer errors.
⚑

Quick Links

Terraform + Ansible = Better IaC Orchestration (Sponsor)

Learn how to break down infrastructure siloes and extend IaC orchestration capabilities to the Ansible ecosystem with Spacelift. Watch the recorded webinar
Moving secure GitOps forward with Flux (3 minute read)

Flux emphasized its commitment to security at KubeCon + CloudNativeCon Europe, highlighting robust design principles such as SLSA Build Level 3 builds, scoped RBAC, in-cluster API state, and signed OCI artifact support.
GitHub MCP Exploited: Accessing private repositories via MCP (2 minute read)

A critical exploit in GitHub's Model Context Protocol (MCP) allows LLM agents to access, act on, and exfiltrate data from private repositories through prompt injection, triggered by malicious issues in public repos.

Love TLDR? Tell your friends and get rewards!

Share your referral link below with friends to get free TLDR swag!
Track your referrals here.

Want to advertise in TLDR? πŸ“°

If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.

Want to work at TLDR? πŸ’Ό

Apply here or send a friend's resume to jobs@tldr.tech and get $1k if we hire them!

If you have any comments or feedback, just respond to this email!

Thanks for reading,
Kunal Desai & Martin Hauskrecht


Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.