Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Tell Me About You

After sixty-seven published posts here, the comments have become one of the best parts of the work. Some of you have run my code, found things I missed, challenged a claim, or brought me a project of…

  • Author has made over sixty-seven posts on the platform.
  • Engages with readers through comments, distinguishing bots from real people.
  • Invites readers to share projects, interests, and reasons for engaging with the forum.

Native CORS support on GKE Gateway: Offloading cross-origin policy management to infrastructure

Web browsers enforce the Same-Origin Policy by default to protect users from malicious scripts trying to read data across distinct origins.

  • Google introduces native CORS support in GKE Gateway and Inference Gateway load balancers
  • CORS management offloaded to load balancer, terminating OPTIONS preflight requests
  • CORS filter in HTTPRoute configures policies declaratively with allowOrigins and allowCredentials

Retries didn't make GitHub resilient. They DDoS'd it.

A capacity blip at GitHub resulted in an outage that lasted 7 hours and 47 minutes. The infrastructure recovered faster than the clients let it.

  • GitHub suffered a seven-hour outage on August 17, 2026.
  • Istio sidecar proxy reached concurrency limit, leading to traffic overflow.
  • Retries worsened the situation, acting like a self-denial of service attack.

More from Sunday 30 August →