MeridianMeridian

RWB Infra x Security Meetup Shares Recordings on GitLab Scaling, Kubernetes Bare Metal, Vault PKI and DevSecOps Platforms

On October 3 in Moscow, RWB held the Infra x Security Meetup that combined infrastructure and information security tracks. Infrastructure speakers covered scaling GitLab CE under growing load, trade-offs in developing the DCIM data center management product, building centralized PKI with Vault, and operational challenges of running Kubernetes on bare metal servers. Security speakers discussed scaling DevSecOps from pipeline scanning to an ASPM platform, vulnerability management tools that reduced remediation time, protecting data without a single perimeter using Identity × Data × Context × Policy, and automating access control across one thousand systems in under 90 seconds. All presentations were recorded and the videos plus slides are now publicly available on YouTube and VK. The event highlighted practical engineering decisions made by RWB teams while operating large-scale internal platforms.

HabrTranslated from Russian

Read at source

On 3 October in Moscow, RWB hosted the Infra x Security Meetup, an event that brought together infrastructure and information-security specialists. The program was split into two parallel tracks, with eight talks delivered by company experts.

The infrastructure track opened with a session on scaling GitLab CE under rapidly increasing load. Andrey Shmelkov and Kirill Melnikov described how user, project and pipeline growth forced changes to architecture, performance tuning and backup-restore procedures, ultimately cutting cluster-migration time by a significant factor.

Alexander Vasilyev and Dmitry Sidorov presented the development journey of the company’s DCIM product, illustrating concrete trade-offs between implementation convenience, business requirements, deadlines and technical constraints.

Stanislav Gabenov explained how Vault was used to create a unified trust infrastructure, covering certificate lifecycle management, policy enforcement and automated issuance, rotation and revocation across the corporate environment.

The final infrastructure talk, delivered by Oleg Semenov, examined real-world differences between seemingly identical bare-metal servers, Intel versus AMD platform behaviour, Linux kernel versions and their impact on Kubernetes stability in production.

In the security track, Alexander Emelyanov described the evolution from simple pipeline scanning to an ASOC and later ASPM platform, stressing the need to involve development, platform and security teams together.

Maxim Yanson outlined vulnerability-management tooling that shortened remediation cycles and incorporated LLM-assisted analysis under the specific constraints of the company’s infrastructure.

Konstantin Chernyak discussed data protection once a single perimeter no longer exists, advocating a model built on Identity × Data × Context × Policy and tighter integration between Data Governance and Security.

The closing security session, presented by Alexander Chernykhov, showed how six engineers now manage access to one thousand systems with an average request-to-grant time of 90 seconds through role-based automation, repeatable processes and measurable metrics.

Full video recordings and presentation slides from every talk are available on YouTube and VK. RWB encourages readers to subscribe to its Telegram channel for announcements of future events.

KubernetesDevSecOpsGitLab CEVaultDCIMASPM
ShareXFacebookLinkedInReddit
Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Other

Mail.ru Reduces Lifetime 1TB Cloud Storage Promo to Standard 8GB Quota for Select Users
Other

Mail.ru Reduces Lifetime 1TB Cloud Storage Promo to Standard 8GB Quota for Select Users

Mail.ru has begun notifying a small group of long-term Cloud Mail users that their complimentary 1TB storage, originally granted through a 2013-2014 app installation promotion, will be reduced to the standard 8GB free tier. Affected users receive personalized deadlines, with some facing storage limits starting 30 October and final deletion of excess files scheduled for 30 January 2027. The company confirmed the change impacts fewer than 0.5 percent of Cloud Mail users and stated that core free features remain available. Once the 8GB limit is exceeded, uploads, edits, and sharing are blocked while users have three months to download data or purchase additional space before files move to the trash for 14 days prior to permanent removal. This follows a similar reduction of lifetime 100GB storage performed by the service in 2024.

AntiMalwareOct 29, 2026Translated from Russian

Kimi K3 Open Model Surpasses Closed AI Leaders with Million-Token Context and 896 Experts
Other

Kimi K3 Open Model Surpasses Closed AI Leaders with Million-Token Context and 896 Experts

Kimi K3 is an open-weights model that outperforms closed systems from GPT and Anthropic on several independent benchmarks. Developers achieved this by scaling three dimensions simultaneously: one million tokens of context, deeper layers, and 896 Mixture-of-Experts specialists. The team replaced the standard KV-cache with a fixed-size state matrix updated via the delta-rule, solving numerical instability by clamping the forgetting coefficient alpha between e^-5 and 1. Sequential state updates were parallelized across chips, GPUs, and multi-GPU nodes using the open-source FlashKDA kernel built on CUTLASS. Inter-layer information flow was preserved through learned pseudo-queries that selectively retrieve relevant outputs from prior blocks rather than passing full activations. Load balancing across 896 routed experts uses per-expert quantile thresholds and a distributed histogram method to guarantee fair token allocation without full sorting.

HabrOct 29, 2026Translated from Russian

Innostage Completes Functional Testing of PT NGFW 1.10.3 Across 156 Criteria
Other

Innostage Completes Functional Testing of PT NGFW 1.10.3 Across 156 Criteria

Innostage has published the second part of its evaluation of PT NGFW version 1.10.3, focusing on functional capabilities rather than raw performance. The testing covered 156 individual checks grouped into categories such as basic technical features, firewalling, IDS/IPS, web filtering, malware protection, logging, routing, deployment, cryptographic controls and access management. Out of the total, 136 checks passed fully, seven passed with remarks, and 13 did not meet the predefined criteria. Key confirmed functions include high-availability clustering, centralized management via PT-MNGT, AD-based rule application, Site-to-Site VPN, TLS inspection, and Syslog integration with external security systems. Several advanced scenarios, including custom block pages, application risk classification, and centralized software distribution, were not confirmed under the test conditions. The report provides detailed protocol notes that help organizations map product capabilities against their specific infrastructure and regulatory requirements.

HabrOct 29, 2026Translated from Russian