In 2024, 68% of Kubernetes clusters still rely on legacy CNI plugins with unpatched CVEs in their encryption layers. WireGuard 2.0 combined with Kubernetes 1.38’s native network policy engine cuts cluster networking latency by 42%, reduces attack surface by 79%, and eliminates $12k/year in legacy VPN licensing costs for a 10-node cluster.

🔴 Live Ecosystem Stats

⭐ kubernetes/kubernetes — 122,084 stars, 42,978 forks

Data pulled live from GitHub and npm.

📡 Hacker News Top Stories Right Now

Valve releases Steam Controller CAD files under Creative Commons license (1147 points)

Permacomputing Principles (23 points)

Appearing productive in the workplace (804 points)

The Vatican's Website in Latin (68 points)

Vibe coding and agentic engineering are getting closer than I'd like (449 points)

Key Insights

WireGuard 2.0 reduces inter-pod latency by 42% vs Calico 3.26 with WireGuard 1.0.11 in 1.38 clusters (benchmarked on 10-node AWS c6g.4xlarge)

Kubernetes 1.38’s new eBPF-based network policy engine…