field-cage: a local-first alternative for GitHub Actions egress control
I built field-cage , an MIT-licensed eBPF agent that monitors and restricts outbound connections from Linux GitHub Actions runners. It overlaps with…
Tech news from the best sources
I built field-cage , an MIT-licensed eBPF agent that monitors and restricts outbound connections from Linux GitHub Actions runners. It overlaps with…
I Replaced kube-proxy with eBPF in Production (And Why My Monitoring Went Blind for 6 Hours) From a "simple" Cilium upgrade to a 6-hour outage where…
Native XDP and generic SKB-mode XDP are not the same thing in practice. The same BPF program can pass the verifier and still behave differently depe…
TL;DR A GPU shows 97% utilization in nvidia-smi , but training throughput is a fraction of what benchmarks promise. The GPU is not computing; it is…
TL;DR 3am page: GPU training pipeline missed its SLA. Datadog shows 95% GPU utilization. nvidia-smi agrees. Everything looks green, but the job is 3…
Service mesh adoption in Kubernetes hit a wall in 2025. Not because teams stopped wanting visibility, but because the bill arrived. Every pod in an…
SunnyDayBPF: Post-Syscall User-Buffer Telemetry Deception with eBPF Security tools do not observe reality directly. They observe telemetry. And tele…