--- title: EKS gets 7-day rollback, RFC 10015 kills RSA and DHE in... description: Amazon EKS now lets you roll back a Kubernetes control plane upgrade within 7 days, a feature teams have wanted for years and previously worked around with... canonical: https://daily.dev/posts/eks-gets-7-day-rollback-rfc-10015-kills-rsa-and-dhe-in-tls-1-2-ld2krxp1n twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: EKS gets 7-day rollback, RFC 10015 kills RSA and DHE in TLS 1.2 | daily.dev og:description: Amazon EKS now lets you roll back a Kubernetes control plane upgrade within 7 days, a feature teams have wanted for years and previously worked around with... og:url: https://daily.dev/posts/eks-gets-7-day-rollback-rfc-10015-kills-rsa-and-dhe-in-tls-1-2-ld2krxp1n og:image: https://api.daily.dev/og/posts/Ld2kRxp1n.png og:image:alt: EKS gets 7-day rollback, RFC 10015 kills RSA and DHE in TLS 1.2 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # EKS gets 7-day rollback, RFC 10015 kills RSA and DHE in TLS 1.2 **[Backend Digest](https://daily.dev/sources/backend_digest)** · 4 min read · 0 upvotes · 0 comments ## Summary Amazon EKS now lets you roll back a Kubernetes control plane upgrade within 7 days, a feature teams have wanted for years and previously worked around with blue/green deployments. RFC 10015 formally bans RSA key exchange and finite-field Diffie-Hellman in TLS 1.2, upgrading several SHOULD NOTs to MUST NOTs. Solid Queue v1.6.0 ships a fiber-based execution mode that could meaningfully cut thread overhead for I/O-heavy job workloads. Webflow's writeup on redesigning APIs for agents is one of the more grounded MCP production stories out there. ## Content **TLDR:** Amazon EKS now lets you roll back a Kubernetes control plane upgrade within 7 days, a feature teams have wanted for years and previously worked around with blue/green deployments. RFC 10015 formally bans RSA key exchange and finite-field Diffie-Hellman in TLS 1.2, upgrading several SHOULD NOTs to MUST NOTs. Solid Queue v1.6.0 ships a fiber-based execution mode that could meaningfully cut thread overhead for I/O-heavy job workloads. Webflow's writeup on redesigning APIs for agents is one of the more grounded MCP production stories out there. --- ## Amazon EKS adds 7-day control plane rollback at no extra cost EKS now lets you revert a cluster to its previous minor version within 7 days of an upgrade via the existing UpdateClusterVersion API. Before rollback, EKS runs Upgrade Insights checks and a separate Rollback Readiness Insights pass so you're not flying blind. etcd data, workloads, and persistent volumes are preserved; Auto Mode clusters roll back worker nodes before the control plane with disruption budgets respected. GKE has had this for a while — Azure AKS still only supports node pool rollbacks. Salesforce is already using it in their standard upgrade workflow, which is a reasonable signal that it holds up at scale. [Read more](https://daily.dev/posts/agL0j5hQT) ## RFC 10015 formally bans RSA key exchange and FFDHE in TLS 1.2 RFC 10015 upgrades the TLS 1.2 restrictions from RFC 9325 to hard MUST NOTs: clients and servers cannot offer or select finite-field Diffie-Hellman (ephemeral or static) or RSA key exchange cipher suites. The rationale covers Raccoon timing attacks on FFDHE, Bleichenbacher's attack on RSA key exchange, invalid curve attacks on static ECDH, and the absence of forward secrecy in non-ephemeral modes. IANA's TLS Cipher Suites registry is updated to mark affected suites as deprecated. This only applies to TLS 1.2 — older versions are already deprecated and TLS 1.3 never used these algorithms. [Read more](https://daily.dev/posts/F09q3wd0n) ## Webflow's MCP redesign: agent APIs need intent-driven interfaces, not wrapped endpoints Webflow rebuilt its APIs for AI agents using MCP and found that developer APIs optimized for human flexibility fail when exposed directly to agents. They moved from wrapping existing endpoints to a layered tool architecture with domain groupings, workflow tools, and guide tools. Observability via MCPCat surfaced some useful numbers: canvas design accounted for 27.7% of sessions, a silent error was hitting over 10% of sessions, and 58.7% of sessions clustered around just three workflows. Infrastructure runs on Cloudflare Durable Objects for stateful sessions. A hosted MCP connector launched in early 2026 drove 6.7x session growth. [Read more](https://daily.dev/posts/j6eRh0xJR) ## Solid Queue v1.6.0 ships fiber-based execution mode for I/O-bound jobs Solid Queue v1.6.0 adds a fiber execution mode as an alternative to thread pools, running jobs on a single fiber reactor thread via the Async gem. You opt in by specifying fibers instead of threads in worker config, and it requires Rails fiber isolation (config.active_support.isolation_level = :fiber). The practical target is I/O-bound workloads — LLM API calls being the obvious example — where thread-per-job overhead is wasteful. The release also fixes transaction rollbacks in tests. [Read more](https://daily.dev/posts/Pc2p7AfU3) --- ## Also notable - **Async::HTTP v0.98.1 fixes dead connection reuse via TLS peek:** A GC retention cycle in Bun caused Next.js App Router SSR to leak memory when pages called certain functions; the fix ships in the next Bun release. [Read more](https://daily.dev/posts/BpavRbr0O) - **Async::HTTP v0.98.1 detects stale HTTP/1 connections before reuse:** The fix introduces peek_partial, a non-blocking TLS peek that detects a close_notify alert on a persistent connection before handing it to a new POST request — previously the socket appeared readable but yielded no HTTP bytes, causing EOFError on non-idempotent requests. [Read more](https://daily.dev/posts/smY8cYGD3) - **Raft implementations contain bugs even when the protocol is formally verified:** An Antithesis blog post demonstrates that formal verification of the Raft consensus protocol does not guarantee correctness in real implementations, a relevant gap for anyone running CockroachDB, RabbitMQ, or etcd in production. [Read more](https://daily.dev/posts/iem7XTdnb) - **uWebSockets.js handles 50K+ concurrent connections on a single core with ~40MB for 10K connections:** A 2026 comparison of Node.js WebSocket libraries puts uWebSockets.js at 5-10x the throughput of ws via C++ bindings, with Socket.IO remaining the pragmatic default for most applications and uWebSockets.js reserved for gaming, trading, or IoT workloads. [Read more](https://daily.dev/posts/2rMzQsPVw) - **Agentlas memory architecture hits 96.4% recall@10 on LongMemEval using local SQLite and a 128M embedding model:** Their on-device memory system uses a quantized multilingual embedding model (potion-multilingual-128M, 256-dim int8) with hybrid lexical and cosine retrieval, achieving 96.4% recall@10 on LongMemEval and 91.5% hit@10 on LoCoMo with no external memory server. [Read more](https://daily.dev/posts/EGDYugFRp) ## Similar posts on daily.dev - [Operating Kubernetes at scale: a few stories from running Amazon EKS](https://daily.dev/posts/operating-kubernetes-at-scale-a-few-stories-from-running-amazon-eks-vdcgnhxcm) · The New Stack · 1 upvotes · 0 comments - [DevRel newsletter — November 2025](https://daily.dev/posts/devrel-newsletter-november-2025-hl1o2gzjx) · elastic · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#aws](https://daily.dev/tags/aws), [#kubernetes](https://daily.dev/tags/kubernetes) [View this post on daily.dev](https://daily.dev/posts/eks-gets-7-day-rollback-rfc-10015-kills-rsa-and-dhe-in-tls-1-2-ld2krxp1n) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/eks-gets-7-day-rollback-rfc-10015-kills-rsa-and-dhe-in-tls-1-2-ld2krxp1n","headline":"EKS gets 7-day rollback, RFC 10015 kills RSA and DHE in TLS 1.2","text":"Amazon EKS now lets you roll back a Kubernetes control plane upgrade within 7 days, a feature teams have wanted for years and previously worked around with blue/green deployments. RFC 10015 formally bans RSA key exchange and finite-field Diffie-Hellman in TLS 1.2, upgrading several SHOULD NOTs to MUST NOTs. Solid Queue v1.6.0 ships a fiber-based execution mode that could meaningfully cut thread overhead for I/O-heavy job workloads. Webflow's writeup on redesigning APIs for agents is one of the more grounded MCP production stories out there.","url":"https://daily.dev/posts/eks-gets-7-day-rollback-rfc-10015-kills-rsa-and-dhe-in-tls-1-2-ld2krxp1n","datePublished":"2026-08-02T04:17:59.584Z","dateModified":"2026-08-02T04:18:24.353Z","author":{"@type":"Organization","name":"Backend Digest","logo":"https://media.daily.dev/image/upload/s--9uCSrsAb--/f_auto,q_auto/v1773839398/logos/backend_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/backend_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/backend_digest","name":"Backend Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Backend Digest","item":"https://daily.dev/sources/backend_digest"},{"@type":"ListItem","position":3,"name":"EKS gets 7-day rollback, RFC 10015 kills RSA and DHE in TLS 1.2"}]} ```