MCP’s Auth Hardening: What the Six New OAuth SEPs Fix, and What They Still Don’t
In short, the MCP 2026-07-28 release candidate is getting attention for going stateless. The quieter story is a package of six SEPs that harden the protocol’s OAuth layer: issuer validation, credential binding, client type declaration, and cleanups around refresh tokens, scopes, and discovery. All six are worth shipping, and all six fix real failure modes. But they harden how a client authenticates to a server, and that was never the whole problem. Agent identity, per-request authorization, delegation, and audit still sit outside the spec. Which means they still sit with you.
The stateless core is soaking up most of the commentary on the new MCP release candidate, and fair enough: deleting the initialize handshake and the session ID changes how everyone deploys. But scroll past that section of the announcement and you hit six SEPs of authorization hardening that almost nobody is writing about. That’s a mistake. If you operate MCP servers that hold real credentials, this is the part of the spec that decides whether a confused client hands a token to the wrong party.
The final spec ships July 28, 2026. The release candidate was locked on May 21, and SDK maintainers are in a ten-week validation window Continue reading
Bring Your Own VLAN: Moving VMs to Kubernetes Without Changing a Single IP
For many organizations, modernizing their VMs before migrating them is not a realistic option, especially when external events trigger the migration. Mapping dependencies and refactoring network configurations before the deadline is impractical, forcing VMs to move as they are.
The mechanics of moving a VM are largely solved. Tools like Forklift handle what a vSphere admin would recognize as a cold or warm migration: copy the VMDKs off the datastore, convert the guest, and boot it as a KubeVirt VM on Kubernetes. The guest comes through with its disks, its OS, its MAC address, and the static IP still written in its network configuration.
Recreating the NSX segment the vNIC was attached to, the VLAN that defined the VM’s compliance scope, or the firewall rules that reference its address is a different story. The VM arrives in a cluster that knows nothing about any of it. Everything NSX was doing for that VM now has to be rebuilt on the Kubernetes side.
Kubernetes networking cannot solve this on its own, for two reasons. First, pod IPs are assigned dynamically from the cluster’s pod CIDR, and a KubeVirt VM attached to the pod network is treated like any other workload, meaning Continue reading
Natural disasters and government interference: examining Q2 2026’s major Internet disruption events
Like most infrastructure, the Internet's fragility is easy to overlook — as long as it's working. When it fails, its complexity comes into full view. Cloudflare is in a unique position to detect and document the moments when one of the interrelated systems the Internet depends on breaks down and connectivity suffers as a result. Each quarter, we summarize the disruptions we detect and annotate on Cloudflare Radar.
In Q2 2026, Super Typhoon Sinlaku just north of Guam caused the longest outage, while government-mandated shutdowns during exam periods in Sudan were the most frequent. Iran restored national Internet access, reconnecting its citizens to the global network after an 88-day blackout, even as damage from drone strikes continued to disrupt AWS infrastructure elsewhere in the region. Finally, a cable cut in Saint Lucia and the distribution of faulty DNSSEC signatures in Germany underscored the fragility of Internet infrastructure, but also the remarkable stability these regional and global systems maintain when operating normally.
Here we will walk through the most significant Internet disruptions we observed in the second quarter of 2026, drawing on traffic data from Cloudflare Radar to show how each unfolded and what it meant for users on the ground. Continue reading
Why eBPF Is Useful for Watching and Sandboxing AI Agents
Most of our runtime security habits were built for deterministic workloads. A service does what its code says: review the code, sign the image, and its behavior is bounded. Agents are different. An agent’s behavior emerges from a model reasoning over whatever lands in its context window, and some of that context comes from places we don’t fully control — a retrieved document, a tool’s output, a user’s prompt. Meanwhile the agent usually runs with real privileges: a service account, network reach, mounted secrets, a filesystem. When untrusted input shapes behavior, those privileges get exercised less predictably than we’re used to.
A lot of good work goes into making agents harder to mislead — prompt hygiene, injection classifiers, guardrail models. It’s worth pairing that with a second question: if an agent does something we didn’t intend, how far can it actually reach? That’s blast radius, and it’s mostly a decision we make at the runtime layer, independent of how the prompt was handled.
This is where eBPF is a good fit, for two reasons: it’s an excellent way to see what an agent is doing, and it can enforce limits on what the agent can touch — without changing the Continue reading
Andean Condor: Burung dengan Rentang Sayap Terpanjang di Dunia
Andean condor adalah salah satu burung paling ikonik dan mempesona di dunia, dikenal luas karena rentang sayapnya yang luar biasa panjang. Saat ini, burung ini tidak hanya menjadi simbol kekuatan dan kebebasan di pegunungan Andes, tetapi juga menarik perhatian para ilmuwan, konservasionis, dan pecinta alam karena peran ekologisnya yang penting serta kondisi konservasi terkini yang terus berkembang. Dalam artikel ini, kita akan mengupas tuntas fakta terkini tentang Andean condor, mulai dari ciri fisik, habitat, perilaku, hingga usaha pelestarian yang dilakukan untuk menjaga kelangsungan hidupnya di alam liar.
Mengenal Ciri Fisik Andean Condor
Andean condor adalah burung pemakan bangkai terbesar di Amerika Selatan dan terkenal dengan rentang sayapnya yang bisa mencapai hingga 3 meter, menjadikannya burung dengan rentang sayap terpanjang di dunia saat ini. Sayapnya yang lebar dan kuat memungkinkan burung ini untuk terbang dengan efisiensi energi yang luar biasa, memanfaatkan arus udara termal di pegunungan Andes untuk melayang berjam-jam tanpa kepakan sayap yang signifikan.
Warna bulu Andean condor didominasi oleh hitam legam dengan semburat putih di sayap bagian atas, yang lebih jelas pada jantan dibanding betina. Jantan memiliki jambul khas di kepala, sedangkan betina cenderung lebih kecil dan tidak memiliki jambul. Paruhnya yang besar dan tajam sangat efektif untuk mengoyak Continue reading
Misteri Fenomena Brime: Pembentukan Es Bergerigi di Kutub
Fenomena brime formation saat ini semakin menarik perhatian para ilmuwan dan pengamat iklim, terutama dalam konteks perubahan lingkungan di wilayah kutub. Istilah brime merujuk pada formasi es bergerigi atau kristal es yang unik, terbentuk di permukaan salju dan es di daerah kutub utara dan selatan. Fenomena ini tidak hanya menjadi objek penelitian ilmiah, tetapi juga memberikan gambaran penting mengenai dinamika perubahan iklim dan kondisi permukaan es di era saat ini.
Apa Itu Brime Formation?
Brime merupakan jenis es yang terbentuk akibat proses sublimasi dan kondensasi yang berlangsung pada permukaan es dan salju di wilayah kutub. Bentuknya khas, yakni menyerupai kristal-kristal bergerigi yang muncul karena kondisi suhu dan kelembapan yang sangat spesifik. Berbeda dengan es biasa, brime memiliki struktur yang lebih rapuh dan berpori, membuatnya mudah berubah seiring perubahan cuaca.
Fenomena brime formation kian sering diamati di wilayah kutub saat ini, dengan dampak signifikan terhadap stabilitas dan sifat fisik permukaan es. Secara visual, formasi ini memberikan pola bergerigi yang tak hanya memengaruhi estetika lanskap es, tetapi juga memicu perubahan reflektansi permukaan—yang pada gilirannya berkontribusi pada proses pemanasan global di daerah tersebut.
Proses Terbentuknya Brime di Kutub Saat Ini
Proses terbentuknya brime saat ini melibatkan interaksi kompleks antara suhu udara, kadar kelembapan, Continue reading
We’re open-sourcing our privacy proxy CLI
Debugging privacy-preserving protocols is hard. Oblivious HTTP has several different steps across four different parties, not to mention binary HTTP encoding and details spread across many draft RFCs. We've taken what we've learned operating protocols like Oblivious HTTP at the scale of millions of requests per second, and wrapped it up in a nice, clean CLI tool — that we are open-sourcing today.
We call it our privacy-client, or pvcli. We’re releasing it under the Apache-2.0 License, and it is open for contributions.
Here’s a single line of code that executes a full Oblivious HTTP request with a relay, gateway and origin. Don't worry if you don't know what that means, we'll cover it below.
We’ll explain why we built this tool, and show just how handy it can be.
Why privacy protocols can be hard to debug
Let’s take a closer look at our motivation for creating pvcli. Over time, the Privacy team’s product suite and customer base grew. We added products like Privacy Proxy and Privacy Gateway, which power Apple’s Private Relay, Microsoft’s Edge Secure Network VPN, Flo Health’s Anonymous Mode, and more. With it came an increasing amount of special customer requirements, Continue reading
Why We Built Model Academy: Understanding How AI Models Produce Answers
We created Model Academy to connect concepts that are often taught separately—model weights, inference systems, and GPU execution. This is the story behind the academy, our complementary perspectives, and why we chose an interactive approach to explain how AI models produce answers.Migrate First, Modernize Later: A Leadership Guide to Converging VMs and Containers to Run AI Workloads
The Tipping Point
Every so often the ground under enterprise IT moves. It’s moving now. Across industries, organizations are consolidating fragmented infrastructure onto a single, self-hosted platform capable of running both containers and virtual machines side by side. The motivation is simple: simplify operations, lower cost and reallocate resources & budget to AI initiatives. Kubernetes is emerging as the primary platform for many of these workloads.
For most IT leaders, the compute and storage portions of a VM migration are manageable. Storage arrays and hypervisor CPU/memory allocation translate fairly directly to Kubernetes equivalents. Networking is where migration plans stall. A VM’s network identity — its IP, its VLAN membership, its firewall rules — is wired into surrounding infrastructure, monitoring, compliance controls, and business processes that nobody wants to touch during a migration window.
Teams accustomed to NSX for this work find that native Kubernetes networking wasn’t built with VM administrators in mind, and the functionality gap becomes the reason migration projects get bigger or are stalled. If the networking problem is solved — if a VM can move to Kubernetes and keep its IP, its policy, and its security posture intact — then the rest of the platform consolidation stops Continue reading
BGP ORIGIN attribute manipulation and its impact on the Internet
Border Gateway Protocol (BGP) is the de facto routing protocol of the Internet. It offers built-in mechanisms to allow entities, represented by Autonomous Systems (ASes), to express how they want to send and receive traffic on the Internet. One such mechanism is path attributes, which carry essential routing information and metadata for their associated route. The path selection algorithm processes some of these path attributes in a deterministic sequence to calculate the best path for this specific prefix.
Using our unique position on the Internet, we took an investigative look at one of the well-known mandatory attributes in BGP, the ORIGIN attribute. ORIGIN must be present in every BGP prefix announcement and should not be modified by any router after being set by the originating one. What we found through our own experiments was a dramatic ~70% of observed paths in numerous vantage points have a different ORIGIN value compared to what was set by the originating Autonomous System. This ORIGIN attribute manipulation has a significant impact on the way traffic is forwarded on the Internet, as we’ll explore in this post.
BGP ORIGIN and its operational history
The ORIGIN attribute indicates how a route was injected Continue reading
Hedge 313: Out of Band Management Networks
Most designers and operators default to carrying all traffic–including network management traffic–across the same paths as application data, or in band. Is this the right choice, or should operators seriously consider creating an out-of-band network just for network management? If you decide to build an out-of-band network, what are some of the considerations and lessons learned? Daryll Swer joins Tom and Russ to discuss.
download
IPB204: Tayga and IPv6 Translation
Andrew Palardy joins the hosts to discuss how Tayga, the open-source NAT64 daemon for Linux, is being updated to ensure it is up to date with all the current RFCs. Andrew explains how recent RFC compliance and UDP checksum fixes help resolve connectivity issues and how the new eBPF CLAT support arriving in NetworkManager promises... Read more »Introducing Cache Response Rules
Today we’re excited to announce Cache Response Rules. These are a new rule type that runs after an origin server replies but before Cloudflare caches the content.
If you've ever been irked watching something that should easily sail out of cache get dragged back to the origin by a stray Set-Cookie or wrong Cache-Control, headers that are sometimes hard or impossible to strip or change on the origin itself, then Cache Response Rules is that fix, applied at exactly the right moment.
When and how caching decisions are made
A CDN cache and an origin server work as a pair. Their goal is to answer from the cache whenever possible and only go back to the origin when the edge can’t respond. Every point of cache hit ratio comes from getting that division of labor right. Check the cache when we shouldn't, and we waste a lookup that was always going to miss. Check it too rarely, the origin serves traffic the edge should have absorbed and the performance win evaporates.
Importantly, the origin guides the cache. When it returns a cacheable asset, its response headers tell Cloudflare how long it’s OK to serve it, when and Continue reading
N4N060: Your First Wi-Fi Network Part 1
Have you ever wondered how data actually travels through a Wi-Fi network? Holly and Ethan break down the fundamentals of wireless networking, including radio frequencies and channel planning. They also address the complexities of roaming, how the Wi-Fi space has changed over the years, and share advice on how to design and maintain a home... Read more »What Happens to a VM’s IP When It Moves During Migration?
Why VM IP identity needs handling on Kubernetes
A KubeVirt VM runs inside a pod. That is the trick that lets Kubernetes schedule a VM like any other workload. It also means the VM and the pod have different lifecycles. The VM is long-lived and has a stable identity. The pod is disposable. When the VM reboots, gets evicted, or live-migrates, the pod underneath is destroyed and a new one is created.
That matters because a VM’s IP is load-bearing. Firewall rules, load balancer entries, and DNS records all point at it. On Kubernetes, standard pod IPAM ties the address to the pod, so a new pod would mean a new IP, and a changed IP is what breaks those dependencies. KubeVirt on its own does not carry the IP across a migration. Its issue tracker has a user reporting exactly this, with a maintainer confirming sticky IPs were never built into the project. The network identity needs something to carry it. That something is Calico.
The diagram below shows the difference this makes. Default pod networking on the left, Calico on the right.
How Calico keeps the IP
Calico’s approach is elegant and specific. Instead of building the IPAM Continue reading