AEU Data Blog
News and analysis from our engineers.

PHP2Shell patch deployed, no compromise signs reported
PHP2Shell was patched across affected systems, while Percona reports no customer-data impact or indicators of compromise in its investigation.

HTTP Range Requests Use Fixed Cache Chunks, Not Tuning
A fixed-chunk cache design makes partial file delivery predictable, avoiding the tuning and blocking problems of fixed-size range slices.

AI and CDN demand lift cloud network traffic baseline
Cloud network traffic reached a record in July as AI-focused neocloud, CDN and regional ISP demand increased across multiple regions.

php2shell vulnerability prompts managed WAF protections
Cloudflare has deployed protections for the php2shell vulnerability, highlighting the role and limits of managed web application firewall rules.

Eight eMudhra digital certificates reported compromised
Eight eMudhra certificates have been reported compromised, requiring affected operators to identify, revoke and replace any exposed credentials.

NetScaler gateway security needs more than a patch
NetScaler gateway security should combine prompt updates with restricted access, strong sign-ins and monitoring, because patching is only one layer.

MongoDB diagnostics tool preserves three months of history
MongoDB diagnostics tool mongo-health retains three months of FTDC and runs 68 hourly checks to explain past slowdowns across replica sets.

Linux large folios can trigger Galera disk write spikes
Galera disk write spikes can result from Linux large folios rewriting up to 2 MB after small changes to memory-mapped cache files.

JavaScript in an open-source database fills specific SQL gaps
JavaScript in the open-source database can process complex values inside queries, but its restricted runtime is deliberately unsuitable for application workflow…

Yandex outage coincided with malicious bot movement
Cloudflare says malicious bots shifted activity during the Yandex outage rather than disappearing, highlighting a blind spot in outage monitoring.

Hyperdrive open-source database caching bug reported as resolved
Cloudflare says it resolved a rare Hyperdrive open-source database caching bug, highlighting the importance of checking cached database results for consistency.

Database scaling lessons from Cloudflare D1 design
Cloudflare describes how D1 separates database creation, routing, usage limits and SQL queries to scale without overloading Postgres.

Tempo 3.1 adds safer Kafka ingest and trace redaction
Tempo 3.1 changes Kafka ingestion, TraceQL metrics, trace cleanup and read performance, with practical lessons for observability teams.

Thread pool tests show buffer size changes results
Thread pool benchmarks for the relational database used by many web applications found different winners at high connection counts depending on whether the work…

Open-source database 26.7 starts calendar versioning
The open-source database 26.7 changes release numbering and adds replication, thread pool and Group Replication updates that affect upgrade planning.

Agentic security operations needs evidence controls
Agentic security operations is moving into security teams, but Cloudflare frames evidence grounding as the key control for trustworthy action.

SLOs give AI agent errors a measurable budget
SLOs can turn AI agent quality checks into targets, budgets and alerts, helping teams spot drift before users lose trust.

Database server PGO reshapes code around its busiest execution pa
Database server PGO uses training runs to reorganise database code, making the paths exercised during training more important than matching production data valu…

Database server PGO tests show why optimisation can reduce speed
Open-source database PGO tests reported by Percona found small gains in one comparison but slower custom builds, highlighting the importance of representative t…

MongoDB 9.0 adds resource limits that may break old queries
MongoDB 9.0 adds memory limits, write statistics and encrypted search, but compatibility changes mean teams should test before upgrading production.

Database PGO gains fade under heavier load in Percona testing
Database compiler tuning delivered smaller gains as contention rose in Percona tests, while a narrowly trained build ran slower than an untrained baseline.

Grafana Alerting adds separate routing ownership for teams
Grafana Alerting now lets teams manage separate notification policies, limiting shared configuration changes while keeping existing alert rules working.

Open-source database cluster support ends, forcing upkeep choices
Support for the open-source database's Galera cluster ended on September 30, 2026, according to Percona, leaving teams to choose how to retain expert help and m…

Backblaze B2 encryption will leave older objects unchanged
Backblaze B2 will automatically encrypt new uploads from September 14, 2026, but existing data stays unchanged and older buckets get a gradual rollout.

DNS root key rollover requires trust in KSK-2024
DNS root signing switches to KSK-2024 on October 11, 2026; operators must check that validating resolvers trust the replacement key to avoid lookup failures.

Cloudflare Traces links security rules to request delays
Cloudflare Traces connects security decisions, routing and response times in one view, helping website teams investigate blocked requests and slow pages.

OpenTelemetry collectors gain management without Alloy
OpenTelemetry collectors can now use Grafana Cloud’s central management without switching to Alloy, retaining existing configuration and deployment patterns.

Ransomware Recovery Hinges on Backup Retention and Restore Access
Most IT teams believe they can recover from ransomware, but only 28% fully do. The difference lies in how long backups keep old versions and who can restore or…

Why Enabling Object Lock May Not Protect Your Old Backups
Enabling cloud object lock on an existing bucket leaves older files unprotected, and backup software often extends retention periods unexpectedly.

Silent MDM Deployment Now the Gatekeeper for Mac Fleet Backup
IT teams managing large Mac fleets now require zero-touch MDM deployment; backup tools that cannot install silently get dropped, reducing uncovered machines.

Backblaze B2 Now Mounts as a File Drive via Suite Studios
Suite Studios can mount a Backblaze B2 bucket as a high-performance file drive, so teams stream only needed file parts instead of downloading full datasets.

Backblaze B2 MCP Server Opens Scoped Storage to AI Agents
Backblaze's open source B2 MCP Server lets AI agents use cloud object storage with scoped keys and deletion confirmation gates.

How TAMS Turns Cloud Object Storage into a Shared Live Timeline
Backblaze and partners show how the open TAMS standard lets editors work on live footage stored as timestamped segments in S3-compatible object storage.

DBTrail queries open-source database in DuckDB and speeds reports
An open-source tool copies data from the open-source relational database to Parquet files and lets DuckDB run analytical reports, slashing query times from minu…

Selective pt-online-schema-change Can Trigger Galera Stalls
A selective WHERE filter in pt-online-schema-change can make adaptive chunking create huge transactions that trip Galera flow control and stall a cluster.

Percona's Database 9.7 Adds Vector Distance Scoring in SQL
Percona's open-source database server version 9.7.2-2 now lets developers rank vector embeddings in SQL with DISTANCE() and VECTOR_DISTANCE() across five metric…

Smaller LLMs Match Big Ones for DBA Tasks at Lower Cost
A Percona benchmark shows smaller open-weight models often complete database admin tasks for one-tenth the cost of larger models, with more steps but comparable…

Hard Drive Failure Rates Climb to 1.73% in Q2 2026
Backblaze's Q2 2026 drive stats show an annualized failure rate of 1.73% across 354,415 hard drives, the highest in a while, driven by older and low-count model…

AI Cloud Storage Needs Tiered, Not Just Flash
AI clouds that store datasets and checkpoints on flash pay for speed they do not need; tiered storage cuts cost and avoids hyperscaler egress lock-in.

Percona ClusterSync 1.0.0 Adds High Availability and Sharding
Percona ClusterSync for the open-source document database 1.0.0 is now generally available with high-availability replication and sharding support for near-zero…

Open-Source Database Server Adds Thread Pooling in 26.7.0 and 9.7
The open-source relational database server's community edition now includes thread pooling that was previously enterprise-only, and this first part explains the…

Key Parameters That Speed Up Percona ClusterSync for MongoDB
Percona details the settings that control initial clone and continuous replication speed, including defaults and tested values for each parameter.

Percona ClusterSync 1.0.0 Adds Automatic Failover for MongoDB
Percona ClusterSync 1.0.0 now runs in active-standby pairs, so a MongoDB replication job survives a crash and resumes from the last checkpoint automatically.

Valkey Per-Key Memory Falls 37.5% from 7.2.14 to 9.1.1
Percona's benchmark shows Valkey 9.1.1 uses 37.5% less memory per small string key than 7.2.14, with the largest gain in 8.1's 64-byte hash table.

PgQue Brings Append-Only Event Queues to the Open-Source Database
PgQue is an extension-free workflow engine for the open-source database that stores events in append-only logs, avoiding table bloat and enabling Kafka-like con…