Over the weekend, we responded to the critical "DirtyFrag" Linux vulnerability (CVE-2026-43284 and CVE-2026-43500) by deploying an emergency kernel patch across all regions.
While our systems are not affected by the RxRPC vulnerability (CVE-2026-43500) as we don't compile that kernel module, we were affected by the IPsec ESP vulnerability (CVE-2026-43284) and needed to apply patches immediately.
To protect your data and minimize exploitation risk during the rollout, we temporarily restricted SSH and deployment access and performed brief service restarts.
While this vulnerability "only" provided root access within affected systems, we recognize that such exploits are typically used as the first step in a chain of attacks, potentially leading to container escapes and broader infrastructure compromise. Given this risk, we chose to err on the side of caution by implementing temporary access restrictions during our update window.
We understand this disruption was inconvenient, and the decision to disable SSH access was not made lightly. However, we believe these swift and decisive actions were essential to safeguarding your systems and data. Our priority is always to maintain the security and integrity of your infrastructure.
All services have now been fully restored, and you can access your projects and deployments as normal. If you're still experiencing any issues, please don't hesitate to contact our support team. We appreciate your patience and understanding as we work to keep your hosting environment secure.
Want to build an AI documentation bot but worried about prompt injection or chat security? 🤖 This tutorial walks through launching a streaming LangChain chatbot using Node.js and OpenAI on Upsun. ☁️ See how to safely handle context stuffing, implement rate limiting, and deploy with a single push. 👉 https://t.co/d9feQNONCX
#LangChain #NodeJS #AI #DevOps
When the edge is not yours, you have to rate limit from inside the application to maintain quality of service. Rails 8 finally brings this functionality out of the box so you can stop relying on Varnish for everything. 💡⚡
👉 https://t.co/8qPVr7qYKl
#Rails#RubyOnRails#WebDev #Backend
Past the pilots. Into the real work. 🚀 EVOLVE // Upsun Summit returns to Paris on 08 October 2026 for one full day of sharp sessions, hands-on workshops, and the Partner Awards. Spaces are limited. 📷 https://t.co/vUS4XuvpIk #EVOLVESummit2026#Upsun
Shadow IT is usually just a developer trying to move faster than a slow ticketing system allows ⚡️. Codifying your governance with policy as code turns the right way into the easy way for your team 🛡️. Stop managing via PDF and start automating your guardrails 👉 https://t.co/e9XLXD0XZ3 #PlatformEngineering #DevOps #ShadowIT #CloudNative
Setting up an AI agent with persistent storage and remote MCP integration is usually a total headache. 🤖 Host OpenCode on Upsun with a single git push and keep your LLM API keys secure. ⚡🚀
👉 https://t.co/4qMStdfrgO
#AI#Upsun#DevOps#Cloud
Scaling n8n with SQLite is a recipe for performance bottlenecks. Upgrade your instance to PostgreSQL and add Redis caching on Upsun for better reliability ⚡🚀. This guide covers the migration and setup step by step 👉 https://t.co/5aa0jUUBje
#n8n#PostgreSQL#Redis#Upsun
We helped when it mattered. Now we're stepping aside. That's how it should work. 💙 We held DDEV's trademark and assets for a few years and helped keep things moving. Now they're back with the foundation where they belong. 👉 https://t.co/ovR2NVfCvZ #OpenSource#DDEV
Migrating to Debian 12? Watch out for the silent IO storm. A subtle cgroup v2 change in how the kernel handles dirty page budgets can turn into a massive production headache. We tracked down a sysctl setting that was dumping 500 MB/s to disk and here is how we caught it before it hit production. 💡 👉 https://t.co/HODRQPM8f9
#Linux #Debian #DevOps #Engineering
Scaling observability from a single Nagios box to thousands of VMs requires more than just swapping tools. Here is what we learned building it from scratch three times and the migration patterns that made it smooth. ⚡ 👉 https://t.co/o1dxpxtbmK
#Observability#CloudNative #DevOps #SRE
Dynamic validation schemas and version enumeration are the real heroes of a great developer experience. Meta-Upsun proves that smarter validation and API driven updates make building services much smoother for developers. ⚡ 👉 https://t.co/lWg9P0oBR4 #DevExperience #PlatformEngineering
The storage layer shapes everything, and moving from LVM to Ceph was the key to making our VMs disposable again. By separating compute from storage, we unlocked instant volume migration and data cloning. ⚡ 👉 https://t.co/XdFQVGHopz #Ceph#CloudNative#Storage#DevOps
Managing reference data across regions and runtimes is a mess when it is scattered everywhere. We built Meta-Upsun as a single public API to centralise our technical data and keep documentation accurate. ⚡ 👉 https://t.co/SV0Q0JkSfM #DevOps#WebDevelopment#API #CloudInfrastructure
Staying in sync with reality across runtimes and services is a constant struggle. We built the Meta Version Updater to automate tracking and detect drift before it hurts. It handles the heavy lifting with nightly ingestion while keeping humans in the loop. ⚡ 👉 https://t.co/E1KhnJjpkh #PlatformEngineering #Automation #DevOps #CloudNative
We've set a target to bring 60% of customer projects into greener hosting regions by 2031. 💪 Today we published our 2025 footprint and the full plan to get there. 🌱 Partnering with @watershed for this next chapter 👉 https://t.co/JYLGYZtQ70
Protecting your secrets from prompt injection is a constant worry. Sandbox your AI agents in Upsun containers using Linux primitives to keep your data safe. It is the harness and not just the AI that needs protecting. 🤖 ⚡ 👉https://t.co/y6QHSOraCG #AIAgents#Linux#CloudNative #ContainerSecurity
Long-running crons block deployments and steal app resources. Move those heavy tasks to workers for better performance and easier maintenance. Stop fighting your containers and use a modern scheduler instead. ⚡ 👉 https://t.co/bxLCDDr1Yb #DevOps#Cron#WebDev#Backend
Instant data cloning was a bet that is finally paying off for AI agents. Modern agents need production-identical environments and isolated data safety to solve bugs without touching production. 🤖 ⚡ 👉 https://t.co/VTFhsOw1Ji
#AIAgents#PlatformEngineering#SoftwareEngineering #CloudNative
Scaling code reviews on self-hosted GitLab is a grind, so we built an agent to do the heavy lifting. Here is how you can use Python and Claude to build an agent that actually helps. It’s already proven its worth with 1,000 merge requests and 40K lines of code under its belt. 🎯 🤖 👉 https://t.co/8xI3lhxCR0
#Python #GitLab #AI #SoftwareEngineering