SREcon26 Americas - The Zero Trust Odyssey: Our Journey to Modernize Internal Access @UsenixOrg

Uploaded April 2026 | Updated September 2026, 3 weeks ago

The Zero Trust Odyssey: Our Journey to Modernize Internal Access

Nathan Handler and Pratik Lotia, Reddit

For years, Reddit’s internal services were protected by a traditional, perimeter-based security model using NGINX proxy. This talk explores our journey toward a zero trust architecture and the process of replacing that legacy system. We cover why we chose Cloudflare, the challenges of migrating at Reddit’s scale, and the hard-won lessons that shaped our approach. We show you how we made it simple and fast for developers to onboard new applications without getting bogged down in complex security configurations. Leave with practical insights to guide your own zero trust transitions.

View the full SREcon26 Americas program at usenix.org/conference/srecon26americas/program

SREcon26 Americas - The Zero Trust Odyssey: Our Journey to Modernize Internal Access

NSDI 26 - Geminet: Learning the Duality-based Topology-Agnostic Update Operator for Lightweight...

NSDI 26 - Observability Is Eating Your Cores: Fine-Grained Analysis of Microservice Metrics with...

NSDI 26 - UNUM: A New Framework for Network Control

PEPR 26 - Private AI: Building Trust Through Verifiable Computation

SREcon26 Americas - Building SRE Culture (without SREs, Technically)

$NSDI 26 - Detecting and Diagnosing Errors in Serving Archived Web Pages Detecting and Diagnosing Errors in Serving Archived Web Pages Jingyuan Zhu, University of Michigan; Huanchen Sun and Harsha V. Madhyastha, University of Southern California Community Award Winner! Web archives crawl and save copies of pages from the web, enabling users to interact with web pages in the form they existed in the past. Prior to serving any archived page, an archive rewrites the page’s source so that users’ browsers fetch the page’s resources from the archive, not from the servers which originally hosted them. But, on many modern pages, an archive’s edits to crawled scripts result in a loss of fidelity, i.e., an archived copy fails to accurately mimic the original page even when the archive had crawled all resources on the page. To help the developers of archival systems identify and fix the bugs which result in incorrect rewrites of crawled pages, we present FidEx. First, FidEx enables accurate identification of the pages on which an archive violates fidelity. It does so by tracking and comparing the execution of scripts between when a page is crawled and when its copy is loaded. In comparison to existing methods which compare the two loads using either screenshots or the errors reported by the browser, FidEx reduces the false positive rate from around 70% to less than 10%. Second, on every page on which it identifies a loss of fidelity, FidEx pinpoints which subset of the archive’s edits to the page are erroneous. Leveraging this input to fix bugs in the most widely used archival system, we reduced the fraction of archived pages which violate fidelity from 15% to 9%. View the full NSDI 26 program at https://www.usenix.org/conference/nsdi26/technical-sessions$

NSDI 26 - SYMI: Efficient Mixture-of-Experts Training via Model and Optimizer State Decoupling

PEPR 26 - Vision: Human-as-the-Unit Privacy Management with AI Agents

PEPR 26 - Surfacing Hidden Privacy Risks in Code: Lessons from LLM and Retrieval Assisted Detection

NSDI 26 - The GOODPUT System: A Machine Learning-Driven Optimization Framework for Dynamic...

NSDI 26 - PrvTel: Lightweight Models for Private and Accurate Telemetry Data Retention