<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>netlens - writing</title><description>Essays on SRE, security, applied AI, and network diagnostics by Yossi Ben Hagai.</description><link>https://netlens.pages.dev/</link><language>en-us</language><item><title>Why raw lookup tools are not enough for SRE workflows</title><link>https://netlens.pages.dev/blog/raw-lookup-tools-not-enough/</link><guid isPermaLink="true">https://netlens.pages.dev/blog/raw-lookup-tools-not-enough/</guid><description>Commodity DNS/IP lookup sites optimize for the wrong problem. Here is what engineers actually need from a diagnostics tool.</description><pubDate>Sat, 18 Apr 2026 00:00:00 GMT</pubDate><category>sre</category><category>tooling</category><category>diagnostics</category><author>Yossi Ben Hagai</author></item><item><title>Applied AI for infra teams: patterns that actually work</title><link>https://netlens.pages.dev/blog/applied-ai-for-infra-teams/</link><guid isPermaLink="true">https://netlens.pages.dev/blog/applied-ai-for-infra-teams/</guid><description>LLMs are good at narrow, read-only, well-evaluated tool calls. They are bad at long autonomous loops in production. Here is the shape of the systems that actually hold up.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>ai</category><category>sre</category><author>Yossi Ben Hagai</author></item><item><title>How to investigate a misconfigured domain</title><link>https://netlens.pages.dev/blog/investigating-misconfigured-domain/</link><guid isPermaLink="true">https://netlens.pages.dev/blog/investigating-misconfigured-domain/</guid><description>A short, opinionated playbook for the first 5 minutes of a &apos;the site is acting weird&apos; incident.</description><pubDate>Fri, 10 Apr 2026 00:00:00 GMT</pubDate><category>sre</category><category>dns</category><category>http</category><category>debugging</category><author>Yossi Ben Hagai</author></item><item><title>DNS is still the attack surface everyone forgets</title><link>https://netlens.pages.dev/blog/dns-attack-surface-2026/</link><guid isPermaLink="true">https://netlens.pages.dev/blog/dns-attack-surface-2026/</guid><description>Subdomain takeovers, dangling CNAMEs, NS hijacks, and DMARC spoofing are not exotic. They are this quarter&apos;s incident. Here is what to actually check.</description><pubDate>Sun, 05 Apr 2026 00:00:00 GMT</pubDate><category>security</category><category>dns</category><author>Yossi Ben Hagai</author></item><item><title>SLOs that survive contact with reality</title><link>https://netlens.pages.dev/blog/slos-that-survive/</link><guid isPermaLink="true">https://netlens.pages.dev/blog/slos-that-survive/</guid><description>Most SLO dashboards lie because they measure the wrong thing. The fix is cheaper than you think, and it is not another vendor.</description><pubDate>Sat, 28 Mar 2026 00:00:00 GMT</pubDate><category>sre</category><author>Yossi Ben Hagai</author></item><item><title>MCP for SRE: giving agents real tools, safely</title><link>https://netlens.pages.dev/blog/mcp-for-sre/</link><guid isPermaLink="true">https://netlens.pages.dev/blog/mcp-for-sre/</guid><description>Model Context Protocol is the right primitive for on-call agents. It is also a footgun if you expose write tools without thinking. Here is a safer default.</description><pubDate>Fri, 20 Mar 2026 00:00:00 GMT</pubDate><category>ai</category><category>sre</category><category>security</category><author>Yossi Ben Hagai</author></item><item><title>Where the edge actually lives in 2026</title><link>https://netlens.pages.dev/blog/edge-compute-2026/</link><guid isPermaLink="true">https://netlens.pages.dev/blog/edge-compute-2026/</guid><description>Cloudflare Workers, Fastly Compute, Vercel Edge, Deno Deploy, Lambda@Edge. They are not interchangeable. Here is what each one lets you measure, and what each one hides.</description><pubDate>Tue, 10 Mar 2026 00:00:00 GMT</pubDate><category>sre</category><category>networking</category><category>edge</category><author>Yossi Ben Hagai</author></item></channel></rss>