SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

SaaS Cuts AWS Bill by 70% After Migrating to Bare-Metal Proxmox LXC Cluster

0
·1 views

A high-traffic SaaS company running on AWS EC2 and EKS was spending nearly $12,000 per month on cloud infrastructure, driven by compute costs, NAT Gateway fees, and managed service premiums. An engineer re-architected the setup onto a collocated bare-metal Proxmox VE cluster using lightweight LXC containers and Docker Swarm for stateless microservices. NVMe drives configured in ZFS RAID10 replaced expensive AWS EBS volumes, delivering faster I/O without per-IOPS charges. An HAProxy and Keepalived load balancer setup was deployed in place of AWS's managed Application Load Balancer, eliminating hourly fees. The migration brought monthly infrastructure costs down to approximately $3,500, a roughly 70% reduction, while also improving latency by removing the AWS virtualization layer.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

BdThemes Plugin Supply Chain Attack Gave Hackers Silent Admin Access on WordPress Sites

Wordfence Threat Intelligence disclosed on August 8, 2026, that seven BdThemes WordPress plugins were compromised through a poisoned API response hosted on the vendor's cloud storage, not through WordPress.org plugin files. Attackers injected malicious JSON into BdThemes' static delivery infrastructure, exploiting an unpatched DOM XSS flaw in the Biggopti library that triggered automatically when a logged-in administrator opened the WordPress dashboard. Within milliseconds, the victim's browser executed external scripts that used the active admin session to silently create a rogue administrator account, upload a web shell, and install persistent malware in the MU-plugins directory. The attack also hooked WordPress database queries to conceal the unauthorized account from the admin interface, and enabled unauthenticated login via a hidden URL parameter. Wordfence detected active exploitation on August 7, 2026, and linked the command-and-control infrastructure to earlier supply chain attacks targeting the Advanced Responsive Video Embedder and OptinMonster plugins.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Researchers Demonstrate 'Ghostjacking' Attacks That Hijack AI Agents via Logs and Alerts

Security researchers at Tenet Security Threat Labs published a proof-of-concept on August 9, 2026, detailing a technique called Ghostjacking that manipulates AI agents by embedding malicious commands inside WAF logs, monitoring alerts, and bug reports. When an AI agent reads these poisoned inputs during routine investigation tasks, it interprets the attacker's text as legitimate instructions and executes them using its pre-granted tool permissions. Demonstrated attack scenarios involved tools including Claude Code, Cloudflare, Datadog, and Sentry, where agents were tricked into redirecting DNS traffic, stealing cloud credentials, and passing commands to other AI agents. The attacks are particularly difficult to detect because all resulting actions — such as DNS modifications or API calls — appear as normal, authorized operations from a legitimate agent identity. A sandbox bypass in Claude Desktop that could allow data exfiltration to arbitrary servers was separately reported and has since been patched.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Polish CHP Plant Sabotaged via Wind Farm Network in Coordinated Cyberattack

On December 29, 2025, attackers disrupted a Polish combined heat and power (CHP) plant in a multi-stage cyberattack that began by breaching a wind farm's FortiGate firewall. The attackers tunnelled through a Teltonika cellular router into a power distributor's private APN, then used a WAGO PLC with default credentials to pivot into the CHP plant's operational technology network. Once inside, they forced Siemens PLCs into STOP mode, halted the steam turbine and process-water treatment systems, and factory-reset or bricked multiple Moxa and other industrial devices. CERT Polska, which published its follow-up analysis around August 10, 2026, identified this as the first confirmed case of lateral movement across organisations via a shared private APN. No definitive attribution has been made public for the incident.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Floppy Disk Recycling Service Offers New Life for Obsolete Storage Media

FloppyDisk.com operates a recycling program dedicated to handling old floppy disks, which are considered obsolete but still exist in large quantities. The service provides a way for individuals and organizations to responsibly dispose of their aging magnetic storage media. Floppy disks contain materials that may be harmful if sent to landfill, making dedicated recycling an environmentally conscious option. The program was shared on Hacker News, drawing attention to the niche but practical service.

0 comments Read more at Hacker News
SaaS Cuts AWS Bill by 70% After Migrating to Bare-Metal Proxmox LXC Cluster · ShortSingh