Designing and Implementing Private Cloud Security Across Geographically Distributed Data Centers
In this article the author shares practical experience in designing and implementing protection for a private cloud hosted across two geographically separated sites of a data center (ЦОД).
The material does not contain deep technical details but instead describes the path from an assumed ideal solution to real-world implementation through research, errors, technical constraints, and necessary compromises.
Background and Objectives
The task appeared fairly standard: ensure service resilience, achieve compliance with information security requirements, and preserve normal manageability of the infrastructure.
On paper such projects usually look like combinations of best practices: high availability, segmentation, NGFW, some dynamic routing, and it seems that this should be sufficient.
In practice everything proved more complicated when each element of the architecture began to conflict with the others, especially when several contractor teams participated and each team held its own vision of how the network and security architecture should look.
At one point the discussions started to resemble an engineering construction set: every party offered its own solution, and the task was to assemble from these proposals a working and scalable system.
Related articles
VK Tech Adds Multi-Level Memory to AI Agents in VK AI Space Platform
VK Tech has introduced a four-layer memory system for AI agents within its VK AI Space platform, enabling them to retain context, reuse materials, and incorporate past employee edits instead of restarting tasks from scratch. The new capability is expected to reduce the share of repeatedly solved tasks by 40–50 percent. Memory layers include session memory for current dialogues, user memory for employee profiles and preferences, project memory for specific project materials and rules, and agent memory for recording successful approaches and human corrections. This transforms AI agents from short-term tools into consistent team participants that can draw on accumulated corporate knowledge during tasks such as tender preparation, incident investigation, and product launches. Access remains strictly limited to information the collaborating employee is authorized to view, with all data stored inside the company perimeter and never sent to external services. Users can review and delete stored information at any time. VK Tech believes the feature will convert individual specialist experience into a persistent organizational asset that carries forward across tasks.
Efort Qizhi Demonstrates Humanoid Robots Mastering Industrial Tasks Through Universal Technology Base at WAIC 2026
At WAIC 2026 in Shanghai, Efort Qizhi presented its humanoid robots performing complex tasks on uneven terrain, including lifting irregular boulders and installing large photovoltaic panels without prior task-specific coding. The company showcased its HALO human skill collection suit that captures multi-modal data including vision, force, touch and language to distill human operations into robot-understandable representations. Central to the approach is HumanGPT, a world model tailored for embodied intelligence that integrates collected human skills with sensor data to create virtual dynamic environments for robot decision-making. Efort Qizhi also highlighted its full toolchain covering data collection, storage, governance, training, inference and deployment, built around HumanGPT, Dayan data platform, Modou IDE and Openmind OS. Chairman Dr. You Wei introduced the skill iceberg concept, stressing that true industrial value lies in complex capabilities such as multi-robot coordination and real-time process parameter generation rather than simple pick-and-place actions. The system has already logged over 5000 hours of operation on customer production lines, proving transfer from human expertise to reliable machine productivity across manufacturing scenarios.
Google Tests Third-Party App Store Support in Play Store Following Epic Games Antitrust Ruling
Google is actively testing multiple new features in the Play Store, including a dedicated Play Labs experimental section, direct installation of alternative app stores, and an expanded two-line search interface. The most notable change allows users to install competing app marketplaces directly from Google Play, a capability tied to the reinstated 2024 court decision in the Epic Games antitrust case after the companies' settlement was withdrawn. Although the new menu option for third-party stores has been discovered through app modifications, attempts to access it currently result in errors. Play Labs, an experimental area for previewing upcoming store capabilities similar to features already present in Google Search, was also found but remains non-functional. The updated search bar is already operational, supporting longer natural-language queries and an Ask Store prompt to help users describe needs in detail rather than using short app names. APK analysis indicates these developments are still in progress, meaning Google may modify, delay, or cancel any of them before wider release. The overall direction signals that the primary Android app store is preparing to facilitate competition by distributing rival marketplaces.
Spring Security Tutorial Details Refresh Token Implementation to Complement JWT Authentication
A detailed technical guide explains how to enhance JWT-based authentication in Spring Security by introducing refresh tokens for improved security and user experience. The article covers the creation of a RefreshToken entity stored in the database, along with repository and service layers that handle token generation, verification, revocation, and rotation using UUID and expiration timestamps. It discusses security advantages such as short-lived access tokens combined with long-lived refresh tokens hashed via SHA-256 or HMAC-SHA256, while also addressing risks including database theft and XSS attacks mitigated by HttpOnly cookies. Code examples demonstrate updates to AuthService, AuthController, and SecurityConfig to support registration, login, token refresh via cookies, and logout functionality. Additional best practices include automatic token rotation on refresh and session management across multiple devices. The tutorial emphasizes minimizing credential transmission over networks while maintaining stateful token validation.