Allow loading remote contents and showing images to get the best out of this email.FAUN.dev's DevOps Weekly Newsletter
 
🔗 View in your browser.   |  ✍️ Publish on FAUN.dev   |  🦄 Become a sponsor
 
Allow loading remote contents and showing images to get the best out of this email.
DevOpsLinks
 
#DevOps #SRE #PlatformEngineering
 
 
📝 The Opening Call
 
 
Stuck between sessions that vanish and terminal scrollbacks that magically reappear, developers are refining their arsenals with innovative tools. From reinvented cloud migrations to tantalizing Graviton stories, there's a swirl of innovation and evolution begging for your attention.


🔗 alden: Seamless terminal sessions with full scrollback

🚀 Amazon VPC sets a new 500 routes/table standard

🔨 Automatic Rollbacks: More bane than boon

📈 AWS Lambda embraces Avro and Protobuf

👀 Data roles demystified: Analysts vs Scientists vs Engineers

🐋 Migrating EC2 to GCP's Compute Engine

🔧 jemalloc vs AddressSanitizer for Postgres

🌀 GitOps 2025: The pull-based future arrives

🎬 Graviton: Save 20% on AWS bills and supercharge performance

✨ Rethinking Clusters: Why Environments Win


Keep your toolbox sharp; innovation doesn’t wait.
Have a great week!
FAUN Team
 
 
⭐ Patrons
 
manageengine.com manageengine.com
 
Unify DevOps monitoring with end-to-end APM
 
 
See everything. Fix anything. Deliver more.Break down silos and gain deep visibility across your entire stack—from application code to infrastructure. ManageEngine Applications Manager empowers DevOps teams to detect issues faster, optimize performance, and deliver seamless digital experiences. Transform your operations Download now!
 
 
👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.
 
ℹ️ News, Updates & Announcements
 
aws.amazon.com aws.amazon.com
 
AWS Lambda announces native support for Avro and Protobuf formatted Kafka events
 
 
AWS Lambda now natively supports Avro and Protobuf formatted Kafka events, dancing through schema chaos with Glue and Confluent registries. Toss custom deserialization in the trash; plug in Powertools and let open-source Kafka consumer interfaces do the grunt work.
 
 
aws.amazon.com aws.amazon.com
 
Amazon VPC raises default Route Table capacity
 
 
AWS VPC lets your inner network architect cheer: 500 routes per table now. That’s a cool 10x boost from before, turning network scaling from a headache into a child's play. 🚀
 
 
siliconangle.com siliconangle.com
 
Lenovo introduces new AI-optimized data center systems
 
 
Lenovo's ThinkSystem SR680a V4 doesn't just perform—it explodes with AI power, thanks to Nvidia's B200 GPUs. We're talking 4nm chips with a mind-boggling 208 billion transistors. Boost? Try 11x.
 
 
hashicorp.com hashicorp.com
 
Terraform AWS provider 6.0 now generally available
 
 
Terraform AWS Provider 6.0 bursts onto the scene with multi-region support. Now, devs can tweak 32 config files in one shot, slimming down memory bloat. 🌍💻
 
 
👉 Enjoyed this?Read more news on FAUN.dev/news
 
🐾 From FAUNers
 
faun.pub faun.pub
 
Migrating to AWS Graviton in EKS: Challenges, Multi-Arch Setup, and Our Learnings
 
 
Graviton throws a wild price-performance party, but AWS CLI/API leaves you hanging on fallback strategies. So, we conjured a Terraform ASG stunt: dual launch templates that smoothly swap between ARM and AMD. Multi-arch Docker images save the day, grabbing the right variant and dodging cluster bedlam. Who knew code could dance?
 
 
faun.pub faun.pub
 
What is Observability 3.0?
 
 
Observability 3.0 charges headlong at the ballooning fees of system monitoring. Companies throw down more than $10M a year on this jungle. But this version doesn't settle for the old, bloated ways. Instead, it's a sniper: precise telemetry, clever data maneuvers, cost-cutting without skimping on insights, and none of that useless data clutter.
 
 
faun.pub faun.pub
 
How To Modify Span Attributes In OpenTelemetry Instrumentation Using Hooks and Span Processors
 
 
OpenTelemetry puts you in the driver's seat, letting you modify span attributes with custom processors or hooks. Need to slip in an S3 bucket name? Easy. It's almost like a secret handshake for data.
 
 
faun.pub faun.pub
 
AWS to GCP VM Migration using M2VM
 
 
Google Cloud's Migrate to Virtual Machines tool whisks away your Amazon EC2 instances to Compute Engine. It handles replication and the final cut-over like a seasoned magician—no fluff, just action.
 
 

👉 Got something to share? Create your FAUN Page and start publishing your blog posts, tools, and updates. Grow your audience, and get discovered by the developer community.

 
⭐ Sponsors
 
faun.dev faun.dev
 
🚀 Meet "This Week’s Human": A New Way to Celebrate Builders
 
 
Each week, we’ll spotlight one person from our community — a developer, DevOps engineer, SRE, AI/ML/data person, open source maintainer, or someone building cool things behind the scenes.

We’ll share who they are and where you can follow or connect with them. Not a sponsored feature. Just good people doing good work!

🔔 Read more!
 
 
👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.
 
🔗 Stories, Tutorials & Articles
 
enterprisedb.com enterprisedb.com
 
Debugging memory leaks in Postgres, jemalloc edition
 
 
jemalloc excels at sniffing out memory leaks compared to AddressSanitizer, especially when leaks ghost out at program exit. But here's the catch: to dig into profiling with jemalloc, like you're wrangling Postgres, you better cozy up to Linux.
 
 
codefresh.io codefresh.io
 
Why Environments Beat Clusters For Dev Experience
 
 
Developers chase promotions, not the tedium of deployments. Environments should reign supreme—not just a lone Kubernetes cluster hogging the spotlight. Real-time insights? They zoom past those outdated, siloed CI pipelines.
 
 
ansuz.sooke.bc.ca ansuz.sooke.bc.ca
 
alden: detachable terminal sessions without breaking scrollback
 
 
Tired of losing terminal sessions and scrollback with tools like tmux, screen, or mosh? A new tool called alden keeps your SSH shell alive after disconnects without breaking your native terminal scrollback. Unlike other solutions, it avoids emulating a terminal—so you get seamless reconnection and keep your scroll history intact.
 
 
medium.com medium.com
 
Load Testing with Impulse at Airbnb
 
 
Impulse lets Airbnb teams wreak havoc in the best way possible. It makes load testing in Java/Kotlin a breeze. No need to call in the cavalry. It just mocks what it needs to and spins up a frenzy of pseudo-real traffic.
 
 
cncf.io cncf.io
 
GitOps in 2025: From Old-School Updates to the Modern Way
 
 
GitOps has taken the throne, with Git as the undisputed oracle for configurations. Welcome to a world where Argo CD and Flux strut their stuff. By 2025, this lively dance of pull-based magic reshapes the landscape. GitOps isn't just a tool anymore—it's a full-blown, no-holds-barred platform transformation.
 
 
medium.com medium.com
 
How We Cut Our AWS Bill by Over 20% and Boosted Application Performance
 
 
Migrating to AWS Graviton with Java 21 didn't just pinch pennies—it saved 20% and cranked up performance. Why? The magic of ARM64 support and multi-arch CI/CD. They navigated the switch by harnessing dual-architecture EKS clusters and canary deployments. Result? A smoother path with zero hiccups. End users? Oblivious but delighted.
 
 
kobzol.github.io kobzol.github.io
 
Why doesn’t Rust care more about compiler performance?
 
 
Rust’s compiler speed has doubled in three years for some benchmarks. Remarkably efficient. But its intricate architecture still wrestles with progress. Stability hogs the spotlight, and new features waltz in, leaving optimizations to grab scraps. Volunteers—Rust’s lifeblood—fuel much of its growth. They crave evolution. Unfortunately, faster builds might require tossing old ways and betting on bold, sweeping changes. Stay tuned.
 
 
hashicorp.com hashicorp.com
 
Terraform security: 5 foundational practices
 
 
Lock down Terraform like Fort Knox. Verify your module origins. Guard sensitive state data like a nosy neighbor's business. And, please, no hardcoded credentials—rookie mistake. For ironclad security, pin those module versions, tap into private registries, and wield the power of dynamic provider credentials with OIDC like a pro.
 
 
boostsecurity.io boostsecurity.io
 
Weaponizing Dependabot: Pwn Request at its finest
 
 
GitHub bots like Dependabot might merge malicious code due to "Confused Deputy" attacks, escalating to command injection via crafted branch names. New TTPs reveal clever ways attackers exploit these issues.
 
 
octopus.com octopus.com
 
Automatic rollbacks are a last resort
 
 
Throw automatic rollbacks out the window. You don't need them. Continuous Delivery partnered with human-driven resilience sharpens up your software. When things go sideways, a speedy roll forward with a clever fix beats a blind retreat. Automatic rollbacks? They skip the surprises and rob you of learning moments, not to mention the backward compatibility headaches they might unleash.
 
 
grafreak0.medium.com grafreak0.medium.com
 
Clarifying Roles in Data and Engineering: Why Specialization Matters
 
 
Data Analysts sift through the past using SQL and BI tools. Their goal? Unearthing insights. Meanwhile, Data Scientists harness the power of Python and R to gaze into the future—predicting trends like data-driven oracles. On another front, Data Engineers craft pipelines. Think Apache Spark—the stage manager for data's grand entrance, ensuring it marches smoothly. Then there's DevOps, the maestros of app delivery. Pitching them into MLOps and expecting perfection? Asking a fish to climb trees sounds equally plausible.
 
 
lexneva.name lexneva.name
 
On Azure’s new SRE Agent
 
 
Microsoft's shiny SRE Agent wades into network snafus with swagger but makes some bold, perplexing claims—like leaning on faulty data insights for fixes. Slick demos dazzle, yet its "approve and act" zeal might lure newbies into rash decisions. Handle with care!
 
 

👉 Got something to share? Create your FAUN Page and start publishing your blog posts, tools, and updates. Grow your audience, and get discovered by the developer community.

 
🎦 Videos, Talks & Presentations
 
youtube.com youtube.com
 
Let's all write good software
 
 
Will's BugBash talk explored how engineers can build better software by combining testing and observability. While testing finds issues before deployment and observability monitors live systems, Will asks: what if you could simulate production chaos without real-world fallout?
 
 
 
⚙️ Tools, Apps & Software
 
github.com github.com
 
Linbreux/FlockRunner
 
 
YAML command executor
 
 
github.com github.com
 
tooka-org/cli
 
 
A fast, rule-based CLI tool for organizing files.
 
 
github.com github.com
 
ServBay/ServBay
 
 
ServBay is an all-in-one localized web development environment that simplifies and accelerates your web projects.
 
 
github.com github.com
 
paloaltodatabases/sequor
 
 
Build complete API integrations with YAML and SQL. Rapid development without vendor lock-in and per-row costs.
 
 

👉 Spread the word and help developers find and follow your Open Source project by promoting it on FAUN. Get in touch for more information.

 
🤔 Did you know?
 
 
GitHub’s main Rails monolith—run by tens of thousands of tests—relies on its open‑source Scientist gem (introduced around 2014–2016) for safe production-level refactoring. Rather than swapping code wholesale, Scientist executes both old and new code paths in production, silently comparing results under real load. Only when the candidate code matches in output and performance does GitHub fully adopt it—mitigating risk in critical system updates without disrupting developer workflows.
 
 
🤖 Once, SenseiOne Said
 
 
"In software, speed is a feature, but too often we trade clarity for velocity without understanding it means sacrificing tomorrow's simplicity."
— Sensei
 

(*) SenseiOne is FAUN.dev’s work-in-progress AI agent

 
😂 Meme of the week
 
 
 
 
❤️ Thanks for reading
 
 
👋 Keep in touch and follow us on social media:
- 💼LinkedIn
- 📝Medium
- 🐦Twitter
- 👥Facebook
- 📰Reddit
- 📸Instagram

👌 Was this newsletter helpful?
We'd really appreciate it if you could forward it to your friends!

🙏 Never miss an issue!
To receive our future emails in your inbox, don't forget to add community@faun.dev to your contacts.

🤩 Want to sponsor our newsletter?
Reach out to us at sponsors@faun.dev and we'll get back to you as soon as possible.
 

DevOpsLinks #482: Weaponizing Dependabot Attacks, GitOps 2025 Transformations & Rethinking Automatic Rollbacks
Legend: ✅ = Editor's Choice / ♻️ = Old but Gold / ⭐ = Promoted / 🔰 = Beginner Friendly

You received this email because you are subscribed to FAUN.dev.
We (🐾) help developers (👣) learn and grow by keeping them up with what matters.

You can manage your subscription options here (recommended) or use the old way here (legacy). If you have any problem, read this or reply to this email.