IPIvan Portaintodea.hashnode.dev·Jul 14 · 5 min readService Mesh Explained: Why Modern Platforms Need ItA service mesh is an infrastructure layer that moves service-to-service concerns (mTLS encryption, retries, timeouts, and golden-signal metrics) out of application code and into proxies your platform 00
RPRalph Pecayoinmasteralph.hashnode.dev·Jul 10 · 3 min readBuilding a Private AI Memory OS for AndroidHave you ever remembered seeing a specific piece of information on your screen but completely forgot which app it was in? The standard industry solution to this involves sending your screen data to th00
KSKaustav Sarkarinblogs.kaustavsarkar.dev·Jul 9 · 13 min readSigning Mesh Tokens with VaultThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post traced one request's identity flo00
KSKaustav Sarkarinblogs.kaustavsarkar.dev·Jul 6 · 15 min readThe Identity Flow: From Gateway to DatabaseThis blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post laid out the five security layers22M
UMUttam Mahatainuttammahata.hashnode.dev·Jul 5 · 6 min readLocking Down a "Public" MongoDB Atlas Cluster Without Breaking Anyone's WorkflowI run a small K3s cluster spread across a handful of VPS nodes, plus a MongoDB Atlas cluster that several backend services talk to. At some point, Atlas's Network Access list had drifted to 0.0.0.0/0 00
BTBiz tech pulse hubinbiztechpulsehub.hashnode.dev·Jun 24 · 2 min readThe Shadow Perimeter: Eliminating Undocumented Access Paths in Corporate Clouds The accelerating complexity of enterprise cloud architecture has created a massive layout vulnerability that sits entirely unmonitored by standard firewalls. As software groups scale dynamic cloud pla00
DHDave Hartinblog.openziti.io·Jun 23 · 6 min readBake It In: Building Agent Runtimes on Zero Trust from Day OneIf you're building an agent harness, whether it's a product you sell or an internal runtime for your organization, architectural decisions you make early can be expensive to change later. Most teams f00
DHDave Hartinblog.openziti.io·Jun 16 · 7 min readYou Can't Govern What You Can't SeeWhat does it take to answer "what did agent X do yesterday?" in your environment? For most platform teams running AI infrastructure today, it means pulling up an LLM gateway dashboard, an MCP proxy lo53LQJ
IDIgboanugo David Ugochukwuindavidigboanugo.hashnode.dev·Jun 17 · 11 min readBeyond the Login: Why API Security Now Lives in Behavior, Not AuthenticationThere's a moment that keeps recurring in breach post-mortems over the last two years, and it's never the moment anyone expects. It isn't a cracked password. It isn't a phished MFA code. It's a token —20
RRRahul Ravindraninrahulr.cc·Jun 16 · 9 min readCloudflare Tunnel Advanced Guide: Docker, Zero Trust and HA SetupIn Part 1, we built a Cloudflare Tunnel capable of exposing multiple local services through a single secure connection. We successfully created: app.example.com api.example.com grafana.example.com wi00
