2 Hidden Bottlenecks in Large-Scale Azure Migrations
(Wed, 28 Jan 2026)
“Lift and Shift” (or cloud lift) is often sold as the path of least resistance for migrating legacy systems to the cloud. The theory is simple: take your on-premises virtual machines (VMs), copy them to an
IaaS provider like Azure, and enjoy immediate scalability.
However, when dealing with large-scale, mission-critical systems, the physics of the cloud are different from an on-premises data center. Assumptions made about network adjacency and connection
limits can lead to catastrophic performance failures that only appear during full-load testing.
>> Read More
AI-Powered DevSecOps: Automating Security with Machine Learning Tools
(Wed, 28 Jan 2026)
The VP of Engineering at a mid-sized SaaS company told me something last month that stuck with me. His team had grown their codebase by 340% in two years, but headcount in security had increased
by exactly one person. "We're drowning," he said, gesturing at a dashboard showing 1,847 open vulnerability tickets. "Every sprint adds more surface area than we can possibly audit."
He's not alone. I've had nearly identical conversations with CTOs at three different companies in the past quarter. The math doesn't work anymore. Development velocity has exploded — partly due
to AI coding assistants, partly due to pressure to ship faster — but security teams are still operating with tools and workflows
designed for a slower era. Something has to give, and increasingly, that something is machine learning.
>> Read More
From Monolith to Modular Monolith: A Smarter Alternative to Microservices
(Wed, 28 Jan 2026)
Somewhere around 2015, microservices became gospel. Not a pattern — gospel. You decomposed or
you died, architecturally speaking. The pitch was seductive: independent scaling, polyglot persistence, team autonomy that meant engineers could ship without waiting on Gary from the payments
team to merge his pull request. Entire conference tracks emerged. Consultants got rich. And a lot of systems got worse.
Not all of them. Some genuinely needed the distributed model — genuine scale pressures, organizational boundaries that mapped cleanly to service boundaries, teams mature enough to eat the
operational cost without choking. But most? Most were mid-sized SaaS platforms or internal tools that adopted microservices because the narrative was so ubiquitous it felt like technical
malpractice not to.
>> Read More
Zero Trust for Agents: Implementing Context Lineage in the Enterprise Data Mesh
(Wed, 28 Jan 2026)
Challenge: When Agentic Bots Become Primary Data Reader
In large data platforms, AI agents now execute more data queries than human users. For teams that are
running thousands of internal services, it is very common to have hundreds or thousands of agentic bots querying data: a "Supply Chain Optimizer" reading manufacturing logs, a "System Quality
Analyst" agent querying usage metrics, or a "Sales Forecaster" aggregating regional sales data, finally passing or interacting with some models.
In a decentralized data mesh, domain owners need a way to detect whether an agent that they allowed to read critical data has been altered or compromised since its identity was issued. In such
cases, mTLS authenticates the caller service but provides no details about the agent's prior actions or execution context, such as which
model or service it is, or what actions it has performed with the data in the past.
>> Read More
DevOps Cafe Ep 79 - Guests: Joseph Jacks and Ben Kehoe
(Mon, 13 Aug 2018)
Triggered by Google Next 2018, John and Damon chat with Joseph Jacks (stealth startup) and Ben Kehoe (iRobot) about their public disagreements — and agreements — about Kubernetes and
Serverless.
>> Read More
DevOps Cafe Ep 78 - Guest: J. Paul Reed
(Mon, 23 Jul 2018)
John and Damon chat with J.Paul Reed (Release Engineering Approaches) about the field of Systems Safety and Human Factors that studies why accidents happen and how to minimize the occurrence and
impact.
Show notes at http://devopscafe.org
>> Read More
DevOps Cafe Ep. 77 - Damon interviews John
(Wed, 20 Jun 2018)
A new season of DevOps Cafe is here. The topic of this episode is "DevSecOps." Damon interviews John about what this term means, why it matters now, and the overall state of security.
Show notes at http://devopscafe.org
>> Read More