#sre

• 

  The Network Was Never the Boundary: What mTLS Actually Buys Service-to-Service Traffic

  Every internal service already treats "it's on the same network" as proof enough. mTLS replaces that assumption with a certificate check on every connection — which is exactly why it works, and exactly why a bad rotation can take down more at once than an attacker ever could.

  July 28, 2026 · 8 min read
  Security
• 

  The Front Door Won't Close: What a DDoS Attack Actually Does to Production

  DDoS isn't about traffic volume — it's about bottlenecks, capacity, and how well you can tell attackers apart from real users at 3am.

  July 26, 2026 · 9 min read
  Security