Engineering Blog

Built for Platform Architects

Technical deep dives on namespace-scoped mesh configuration, eBPF data-path behavior, and identity — without cluster-wide blast radius.

PlatformYAMLNetwork Modes2026-07-10 · 6 min

Configuring MeshAtom Network Modes with Namespace Annotations

How Platform Architects toggle CNI Replacement, Overlay, Passthrough, and Strict mTLS via a single namespace annotation — no CRDs required.

eBPFScale-to-ZeroCost2026-07-10 · 8 min

Smart Scale-to-Zero: Buffering TCP SYNs While Waking Dormant Pods

A technical breakdown of how the MeshAtom node agent holds inbound TCP handshakes in-kernel, wakes the exact pod on demand, and completes the connection without client retries.

SecuritymTLSPKI2026-07-10 · 7 min

Namespace-Scoped Certificate Rotation Without a Cluster-Wide CA

How MeshAtom issues, rotates, and revokes mTLS identities per namespace — no shared cluster CA, no cluster-admin, and no blast radius across teams.