Dynamic, identity-aware, and secure Sandbox auth

As AI Large Language Models and harnesses like OpenCode and Claude Code become increasingly capable, we see more users kicking off sandboxed agents in response to chat messages, Kanban updates, vibe coding UIs, terminal sessions, GitHub comments, and more.

The sandbox is an important step beyond simple containers, because it gives you a few things:

  • Security: Any untrusted end user (or a rogue LLM) can run in the sandbox and not compromise the host machine or other sandboxes running alongside it. This is traditionally (but not always) accomplished with a microVM.

  • Speed: An end user should be able to pick up a new sandbox quickly and restore the state from a previously used one quickly.

  • Control: The trusted platform needs to be able to take actions within the untrusted domain of the sandbox. This might mean mounting files in the sandbox, or controlling which requests access it, or executing specific commands.

Today, we’re excited to add another key component of control to our Sandboxes and all Containers: outbound Workers. These are programmatic egress proxies that allow users running sandboxes to easily connect to different services, add observability, and, importantly for agents, add flexible Continue reading

Ramla Baharuddin: Pahlawan Dayung Indonesia di SEA Games 2025

Prestasi Gemilang Ramla Baharuddin

Ramla Baharuddin adalah salah satu atlet dayung terbaik Indonesia yang menunjukkan prestasi luar biasa di SEA Games 2025. Bersama tim nasional, Ramla berhasil meraih medali emas pada nomor mixed kayak four 500m, membawa Indonesia ke puncak podium. Kemenangan ini menjadi bukti nyata dari kerja keras, disiplin, dan dedikasi tinggi yang dimiliki Ramla dan rekan-rekannya.

Selain itu, Ramla dikenal sebagai sosok yang inspiratif, selalu memberikan dukungan semangat kepada timnya. Banyak pengamat olahraga menilai bahwa kemampuan koordinasi dan strategi timnya menjadi faktor penting keberhasilan mereka. Tidak hanya fisik yang kuat, tetapi juga mental juara yang membuat Ramla Baharuddin menonjol dalam ajang internasional.

Perjalanan Karier dan Dedikasi

Sejak kecil, Ramla Baharuddin sudah menunjukkan bakat luar biasa dalam olahraga air. Ia mulai berlatih dayung secara intensif sejak usia dini, mengasah teknik, kecepatan, dan ketahanan tubuh. Berkat latihan disiplin dan komitmen tinggi, Ramla perlahan naik menjadi anggota tim nasional dayung Indonesia.

Selain latihan fisik, Ramla juga fokus pada strategi tim, belajar membaca arus air, dan menjaga sinkronisasi gerakan dengan rekan Continue reading

Lexus LBX: Mobil Compact Mewah dengan Performa Modern

Desain Eksterior yang Menawan

Lexus LBX menghadirkan desain eksterior yang modern dan sporty. Gril spindle yang khas Lexus tampak lebih agresif dibandingkan model sebelumnya. Selain itu, lampu LED tajam menambah kesan futuristik, sementara garis bodi yang dinamis memberikan aerodinamika optimal. Dengan ukuran compact, mobil ini mudah bermanuver di perkotaan. Bahkan, pengemudi akan merasa percaya diri saat melaju di jalan sempit.

Lebih lanjut, warna metalik dan aksen krom membuat tampilan mobil semakin premium. Di sisi lain, velg 18 inci menambah aura sporty, sementara atap hitam kontras memberi kesan elegan. Seiring tren SUV compact, LBX berhasil memadukan kenyamanan dan gaya dalam satu paket yang menarik.

Interior Lexus LBX: Nyaman dan Canggih

Masuk ke dalam, interior Lexus LBX menawarkan kombinasi kemewahan dan teknologi. Kursi berbahan kulit berkualitas tinggi membuat perjalanan lebih nyaman. Selain itu, dashboard digital 12,3 inci menghadirkan informasi dengan jelas dan mudah diakses. Pengemudi dapat memanfaatkan layar sentuh untuk navigasi, hiburan, dan kontrol mobil.

Selain itu, sistem audio premium menambah pengalaman berkendara. Lebih lanjut, ruang kabin yang lapang memungkinkan penumpang belakang duduk nyaman. Bahkan, bagasi Continue reading

netlab 26.04: EXOS, BGP Prefix Origination, More Static Routes

netlab release 26.04 is out. Here are the highlights:

  • Extreme Networks EXOS is supported as a Vagrant box or containerlab node with OSPF, VLAN, and VRRP configuration (by Seb d’Argoeuves).
  • The new bgp.advertise node attribute allows you to advertise networks in the IP routing table into BGP. It’s supported on most platforms.
  • The bgp.originate attribute is now dual-stack and VRF-aware, allowing you to originate IPv4 and IPv6 prefixes into per-VRF BGP instances.
  • New platforms with static route support: FortiOS (by Aleksey Popov), Nexus OS, Nokia SR OS, Nokia SR Linux. OpenBSD got discard static routes.
Read more …

Juniper Port Checker – Validate Port Speed Mappings Before You Deploy

If you work with Juniper hardware and have never used the Juniper Port Checker, you are missing out on a really useful tool. It is part of the Juniper Pathfinder suite and it gives you a visual representation of the front panel of a device and lets you configure port speeds to validate that your...

The post Juniper Port Checker – Validate Port Speed Mappings Before You Deploy first appeared on Fryguy's Blog.

Welcome to Agents Week

Cloudflare's mission has always been to help build a better Internet. Sometimes that means building for the Internet as it exists. Sometimes it means building for the Internet as it's about to become. 

Today, we're kicking off Agents Week, dedicated to building the Internet for what comes next.

The Internet wasn't built for the age of AI. Neither was the cloud.

The cloud, as we know it, was a product of the last major technological paradigm shift: smartphones.

When smartphones put the Internet in everyone's pocket, they didn't just add users — they changed the nature of what it meant to be online. Always connected, always expecting an instant response. Applications had to handle an order of magnitude more users, and the infrastructure powering them had to evolve.

The approach the industry converged on was straightforward: more users, more copies of your application. As applications grew in complexity, teams broke them into smaller pieces — microservices — so each team could control its own destiny. But the core principle stayed the same: a finite number of applications, each serving many users. Scale meant more copies.

Kubernetes and containers became the default. They made it easy to spin up instances, Continue reading

NZNOG 2026

NZNOG 2026 was held in Christchurch in March 2026. The NZ national community has a long track record of innovation, both in technology and in the underlying investment models for its network infrastructure. Here's a summary of some of the sessions that I found to be of interest.

NZNOG 2026

NZNOG 2026 was held in Christchurch in March 2026. The NZ national community has a long track record of innovation, both in technology and in the underlying investment models for its network infrastructure. Here's a summary of some of the sessions that I found to be of interest.

UniFi UTR Initial Impressions, Setup and Review

UniFi UTR Initial Impressions, Setup and Review

Even though UniFi released the UTR (UniFi Travel Router) a while back, I've been researching it and trying to find a use case for myself. Fast forward to today, and even though I still don't have a clear use case for it, I bought it purely based on vibes.

It was out of stock pretty much all the time in the UK store, and even when it came back in stock, it would sell out within minutes. I happened to be checking their site one day and noticed it was available, so I ordered it right away. It costs £90 including delivery.

UniFi UTR Initial Impressions, Setup and Review
utr arrived

So, what is it?

The UTR is a small (like very tiny), portable router that you can take anywhere with you. It fits in your pocket. It supports both 2.4GHz and 5GHz bands and can connect to an upstream network via Wi-Fi or Ethernet. If you are into the UniFi ecosystem, in a nutshell, it can extend your home network wherever you go.

It is a small device, measuring 95.95 x 65 x 12.5 mm and weighing just 89g, so it genuinely fits in your pocket. It runs WiFi 5 with 2x2 MIMO Continue reading

Rustradio – SDR framework now also in the browser, with Wasm

I’ve previously blogged about RustRadio, my GNU Radio like framework for writing software defined radio applications in Rust. And now there’s more progress of an interesting kind.

Anything that tries to do something similar to GNU Radio needs a few things:

  • Core framework.
  • SDR components (filters, clock recovery, multipliers, etc).
  • A user interface.

In addition to these, GNU Radio also has the excellent GNU Radio Companion for interactive creation of flowgraphs, but I’m not tackling that yet.

I have a core framework, and some components (blocks). But the UI has been a bit lacking.

I’ve played around with TUI applications, but I always knew I also wanted to support having a UI in the browser. I’m not as interested in adding support for QT or Windows native UI. The browser will do fine.

There are two ways to get the UI in the browser:

  1. Have the browser talk to a backend that’s running the actual DSP.
  2. Running the DSP in the browser, with no need for a backend.

While I’ll want (1) eventually, and have some ideas about that, this post is about running everything in the browser, using Wasm.

I know that this is just scratching the surface Continue reading

500 Tbps of capacity: 16 years of scaling our global network

Cloudflare’s global network and backbone in 2026.

Cloudflare's network recently passed a major milestone: we crossed 500 terabits per second (Tbps) of external capacity.

When we say 500 Tbps, we mean total provisioned external interconnection capacity: the sum of every port facing a transit provider, private peering partner, Internet exchange, or Cloudflare Network Interconnect (CNI) port across all 330+ cities. This is not peak traffic. On any given day, our peak utilization is a fraction of that number. (The rest is our DDoS budget.)

It’s a long way from where we started. In 2010, we launched from a small office above a nail salon in Palo Alto, with a single transit provider and a reverse proxy you could set up by changing two nameservers.

The early days of transit and peering

Our first transit provider was nLayer Communications, a network most people now know as GTT. nLayer gave us our first capacity and our first hands-on company experience in peering relationships and the careful balance between cost and performance.

From there, we grew city by city: Chicago, Ashburn, San Jose, Amsterdam, Tokyo. Each new data center meant negotiating colocation contracts, pulling fiber, racking servers, and establishing peering through Continue reading

TNO060: Think Like an Architect

Today we welcome Damien Garros, Co-Founder and CEO of OpsMill, to discuss how network automation is creating the need to redefine roles beyond traditional engineers, including network automation architects, software developers, and operations specialists. We hone in on the concept of mechanics, who focus on implementation, and architects who see the bigger picture. We also... Read more »

HN822: Now I Understand. You Mean an AI-Safe Zero-Trust Network Automation Approach (Sponsored)

On today’s sponsored episode we talk with David Gee, CEO at Curvium, a systems integrator and VAR. David holds thoughtful opinions about network automation and orchestration, how such platforms are to be built, and the impact AI is having on network automation. We dig into how AI fundamentally changes how we interact with systems, and... Read more »

Public Videos: Docker 101

While according to the GIFEE True Believers™, Docker is dead and Kubernetes rules the world, people who want to have a bit of life might be perfectly happy running “obsolete” stuff like Docker on their laptops or Linux VMs.

If you happen to be one of the latter, you might like the Introduction to Docker webinar I put together a few years ago. It’s now public; you can watch it with an ipSpace.net account.

Explore

Looking for more binge-watching materials? You’ll find them here.

1 … 43 44 45 46 47 … 3,908