Operations | Monitoring | ITSM | DevOps | Cloud

It was surprisingly hard to break CloudNativePG replication

I wanted a Postgres replica that falls behind its primary. Sounds easy. It wasn't. Every time I cut the replica off from the primary, its lag jumped for a moment and then dropped right back to zero. It just would not stay behind. Chasing down why turned into a fun little tour of how a Postgres standby keeps itself alive, and what CloudNativePG quietly sets up behind the scenes.

Firewall High Memory Usage: How to Troubleshoot and Fix It

A firewall running low on memory rarely fails all at once. It degrades first. Connections drop intermittently, policies take longer to process, and by the time the device becomes unresponsive, the problem has been building for days or weeks. This article walks through what firewall memory usage actually means, what causes it to climb, how to spot the symptoms early, and how to troubleshoot and fix it before it takes your network down with it.

Supply chain hit: the first hours are about "am I affected?"

The first two to three hours after a supply chain compromise aren't about remediation – they're about figuring out whether you're affected at all. That requires two things: a feed of compromised packages you can cross-reference against what you're using, and an audit trail showing which developers pulled which packages and when. Teams that can answer "are we affected?" in 30 minutes have that data pre-built into their platform. Teams that don't are still piecing it together at hour three. Protect your supply chain with Cloudsmith.

Why eBPF Is Useful for Watching and Sandboxing AI Agents

Most of our runtime security habits were built for deterministic workloads. A service does what its code says: review the code, sign the image, and its behavior is bounded. Agents are different. An agent’s behavior emerges from a model reasoning over whatever lands in its context window, and some of that context comes from places we don’t fully control — a retrieved document, a tool’s output, a user’s prompt.

DNS Alerts over Syslog: TLS, CEF, and a Straight Line to Your SIEM

Enterprise teams can now add a Syslog alert channel: every DNS Spy alert delivered as an RFC 5424 message over TLS (or TCP/UDP), formatted as JSON or ArcSight CEF, with syslog priorities mapped from real alert severity. All deliveries originate from one documented static IP, so getting through your collector's firewall is a single allowlist rule.

What's New in DX NetOps Topology: Summer 2026

Your enterprise network is more distributed, diverse, and complex than ever before. Your campus, WAN, data center, and SD-WAN environments span multiple technologies and vendors. Now more than ever, the complex relationships between devices, interfaces, and network layers are critical to your day-to-day operations. When an issue arises, knowing that something is wrong is only the beginning.