Grafana Labs vs Sonar

Tempo 3.1 release: new features for Kafka, TraceQL metrics updates, trace redaction, and more

Grafana Labs blog features a new post on Tempo 3.1 release with new features for Kafka, TraceQL metrics updates, trace redaction, and more.

Observability Stack: Prometheus, Node Exporter, Grafana

A technical how-to explaining the three-piece observability stack: Prometheus (time-series database that scrapes metrics), Node Exporter (exposes OS-level metrics at a /metrics HTTP endpoint), and Grafana (visualizes Prometheus data as dashboards). The article describes the pull-based model Prometheus uses, the role of Node Exporter as a translator of OS stats, how Grafana queries Prometheus, default ports (Prometheus 9090, Node Exporter 9100, Grafana 3000), basic install commands, a sample prometheus.yml with scrape_interval and job_name, and next steps such as adding scrape targets, writing PromQL queries, and adding Alertmanager for notifications.

• Prometheus is a time-series database and monitoring system that scrapes metrics from HTTP endpoints and exposes its own metrics on port 9090.
• Node Exporter exposes hardware and OS-level metrics at a /metrics endpoint (default port 9100) and is typically installed one-per-machine.
• Grafana queries Prometheus (e.g., via PromQL) to render dashboards and runs by default on port 3000; it stores no metrics itself.

Building an Internal Developer Platform on Azure AKS

This technical article explains how to create an Internal Developer Platform (IDP) using Azure Kubernetes Service (AKS). It outlines core components including AKS as the managed Kubernetes backbone, a service mesh (e.g., Istio or Linkerd) for microservice communication, CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) for automated build and deployment, monitoring and logging tools (Azure Monitor, Prometheus, Grafana, Azure Log Analytics), and security/compliance controls (RBAC, Pod Security Policies, Azure Policy, Azure Security Center). The piece describes an example developer workflow from code push to production and summarizes benefits such as increased efficiency, scalability, security, and consistency.

• An Internal Developer Platform (IDP) is a set of tools, processes, and automations that simplifies development, testing, and deployment for developers.
• Azure Kubernetes Service (AKS) is presented as the central managed Kubernetes environment where containerized applications run.
• Service meshes such as Istio or Linkerd are recommended to manage microservice communication, including load balancing, traffic management, and security policies.

Sonar Extends Agentic Code Governance and Verification to Self-Managed Infrastructure

New press release dated September 29, 2026: Sonar Extends Agentic Code Governance and Verification to Self-Managed Infrastructure.

Sonar DNS Field Command Injection Fixed by Developer

A developer discovered a command injection vulnerability in the DNS custom resolver field of Sonar, a macOS network scanning tool. The field, which accepts user input for custom DNS servers like Pi-hole or NextDNS, was passed to a privileged command without proper validation, potentially allowing arbitrary code execution as root. The fix involved allowlisting input to only accept valid IP addresses, passing arguments as an array instead of a shell string, and narrowing the privileged interface. The article also details three other security fixes made during a full pass: moving API tokens from a plist to the Keychain, preventing CSV export formula injection, and implementing atomic writes to avoid data corruption.

• Sonar had a command injection vulnerability in its DNS resolver field.
• The vulnerability could allow running commands as root.
• The fix involves allowlisting IP addresses and using array arguments.