Read what ships.

21GitHub · architecture

Rendering huge pull requests in the GitHub Copilot app

Rendering extremely large pull requests with millions of lines and hundreds of comments requires separating deterministic code row geometry from unpredictable dynamic comment blocks. The team implemented an idle-gated measurement scheduler, separate height indices, and identity-based scroll anchoring to maintain smooth scrolling. As a result, the pull request view remains performant and responsive even under extreme loads.

DEPTH ■■■■■14 min read4 weeks ago

Sign in to save and rate

22Amazon Web Services · tutorial

Deploy Oracle Database step by step on Amazon EVS with FSx for ONTAP

This post provides a step-by-step guide to deploying Oracle Database 19c on Amazon Elastic VMware Service using Amazon FSx for NetApp ONTAP as an NFS datastore. It covers provisioning storage, mounting datastores, installing Oracle, configuring SnapMirror for cross-region disaster recovery, and outlining four migration paths. The result is a fully functional enterprise database deployment that preserves existing operational workflows.

DEPTH ■■■■■11 min read3 weeks ago

Sign in to save and rate

23Cloudflare · architecture

Cloudflare deploys protections against php2shell vulnerability

Recent disclosures revealed critical remote code execution and data exposure vulnerabilities in the PHP runtime. To mitigate the threat before public disclosure, Cloudflare developed full transaction detection to combine request and response signals within the WAF. This capability enabled automatic deployment of rules protecting customers against the php2shell exploits.

DEPTH ■■■■■6 min read5 days ago

Security

Sign in to save and rate

24Amazon Web Services · architecture

Architect highly available Oracle Database on Amazon EVS and FSx for ONTAP

Enterprises migrating Oracle databases to Amazon Elastic VMware Service face challenges with storage latency, disaster recovery, and operational consistency. The team designed a highly available architecture combining Amazon EVS bare metal instances with Amazon FSx for NetApp ONTAP NFS datastores and cross-region SnapMirror replication. The resulting setup delivers sub-millisecond storage latency, preserved VMware operational workflows, and robust disaster recovery capabilities.

DEPTH ■■■■■12 min read3 weeks ago

Sign in to save and rate

25Cloudflare · architecture

How Commerce.com and Cloudflare are getting storefronts ready for AI agents

Commerce.com and Cloudflare collaborated to enable WebMCP at the edge for nearly 100,000 storefronts, allowing AI agents to interact reliably with e-commerce sites using structured tools rather than fragile HTML scraping. The team implemented edge-level configuration rules using custom hostname metadata to provide individual merchants with a seamless opt-out mechanism and added support for custom MCP paths. This integration allows agents to execute shopping tasks directly within the active browser session while ensuring fallback safety and zero extra latency for opted-out stores.

DEPTH ■■■■■6 min read5 days ago

Machine Learning

Sign in to save and rate

26Amazon Web Services · tooling

Deploy open source Regional availability tools in your VPC

Engineering teams planning multi-Region architectures often struggle with evaluating AWS service availability and managing compliance risks. The team built and open-sourced two VPC-hosted solutions that deploy an automated Regional availability dashboard and a workload analysis pipeline using CloudTrail and CloudFormation. This setup allows organizations to securely filter and inspect the 20 to 30 services they actually use instead of hundreds.

DEPTH ■■■■■13 min read3 weeks ago

Sign in to save and rate

27Cloudflare · postmortem

8 eMudhra certificates are compromised. Here's what you need to know

Private keys associated with eight eMudhra intermediate certificates were compromised, allowing potential traffic interception. Cloudflare prioritized patching critical services, released client and tunnel updates, and deployed mitigations across its products. Customers are advised to upgrade affected software, update custom trust stores, and avoid disabling verification despite error messages.

DEPTH ■■■■■4 min read6 days ago

Security

Sign in to save and rate

28Amazon Web Services · migration

Accelerating airline retailing innovation: how Datalex modernized with AWS Experience-Based Acceleration and agentic AI

Datalex partnered with AWS for a three-day Experience-Based Acceleration workshop to modernize its mission-critical airline retail platform from Java 8 and EJB2 to Spring Boot on Java 21. The team used parallel workstreams and agentic AI to prove migration feasibility, implement automated CI/CD pipelines, and integrate generative AI capabilities without disrupting existing airline operations. This effort successfully established repeatable migration patterns, reduced memory usage by 35%, and accelerated the timeline for long-term platform evolution.

DEPTH ■■■■■14 min read3 weeks ago

Sign in to save and rate

29GitHub · performance

How we make AI coding more cost efficient without sacrificing task quality

GitHub optimized GitHub Copilot to improve cost efficiency without sacrificing task quality by evaluating changes across the entire agentic workflow. The team implemented four targeted adjustments including selective output compression, removing unused line-number formatting, shortening prompts via meta-prompting with behavioral tests, and delivering background work completions directly. These modifications reduced token usage and model inference costs globally without causing task-success regressions.

DEPTH ■■■■■9 min read7 weeks ago

Machine Learning

Sign in to save and rate

30Cloudflare · architecture

A fully programmable secure web gateway

Cloudflare integrated its secure web gateway and data loss prevention services with its edge computing platform to allow customers to run custom code inline during policy evaluation. The team introduced a new Forward action for traffic transformation and Custom Functions for dynamic rule evaluation without requiring external proxy infrastructure. This enables complex security logic, real-time alerting, and dynamic header injection with zero network hop overhead.

DEPTH ■■■■■13 min read11 days ago

Sign in to save and rate

31Amazon Web Services · architecture

Running multi-day AZ evacuation drills with ARC Zonal Shift

This post explains how to run multi-day Availability Zone evacuation drills using ARC Zonal Shift to prove application resilience under sustained stress. The team details step-by-step procedures across ECS, EKS, and PostgreSQL databases to uncover hidden failure modes like unoptimized scaling and stale connections. The result is a practical framework for moving from theoretical multi-AZ architectures to proven operational resilience.

DEPTH ■■■■■19 min read3 weeks ago

Sign in to save and rate

32Amazon Web Services · architecture

How MHK built a HIPAA-eligible agentic AI solution on Amazon Bedrock

Healthcare technology company MHK faced fragmented AI infrastructure and lengthy development cycles while trying to process unstructured medical documents under strict HIPAA standards. To solve this, they built a multi-tenant, event-driven agentic workflow framework called the SmartProminence AI Orchestrator on AWS using Amazon Bedrock, ECS, and SQS. The new system reduced manual review effort by 90% and shortened AI feature deployment times from months to weeks.

DEPTH ■■■■■12 min read3 weeks ago

Sign in to save and rate

33Amazon Web Services · architecture

Build adaptive AI interfaces with the AG-UI protocol, agent swarms, and Nova Act on AWS

AI applications produce variable outputs that cannot be effectively handled by static user interfaces, leading to development friction and poor user experiences. The team implemented an adaptive interface pattern using the AG-UI protocol, the Strands Agents SDK Swarm pattern, and Amazon Nova Act on AWS to dynamically render components and automate legacy integrations. This architecture streams agent findings over Server-Sent Events, enabling real-time multi-agent consensus and reducing interface development overhead.

DEPTH ■■■■■22 min read3 weeks ago

Sign in to save and rate

34Cloudflare · practice

Localizing compliance at scale: achieving South Korea’s ISMS certification

To achieve South Korea's ISMS certification, Cloudflare had to modify its account sign-up flow to itemize required consents and disable third-party social logins that bypassed the form. By combining IP geolocation with user country selection, the team ensured localized compliance without breaking global functionality. The resulting certification provides a localized assurance benchmark for Korean users.

DEPTH ■■■■■8 min read4 days ago

Security

Sign in to save and rate

35Cloudflare · architecture

Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

Recent major vulnerabilities in Citrix NetScaler exposed public-facing authentication gateways to unauthenticated remote code execution. To prevent similar emergency patches, the team recommends placing an independent Zero Trust access layer, web application firewall, and strict origin connection controls in front of the application server. Implementing these defense-in-depth measures reduces exposure and ensures a single software flaw does not result in total system compromise.

DEPTH ■■■■■9 min read7 days ago

Security

Sign in to save and rate

36Amazon Web Services · practice

How Dynata scaled AI across the development lifecycle with AI-DLC and Kiro IDE

Dynata adopted the AI-Driven Development Lifecycle methodology using Kiro IDE and Amazon Q Developer to compress multi-sprint feature delivery into a single sprint. The team progressed from code generation to integrating knowledge ecosystems and conducting structured three-day feature workshops. As a result, requirements ambiguities surfaced early during planning and the team achieved faster, more aligned feature delivery.

DEPTH ■■■■■15 min read11 days ago

Sign in to save and rate