Free Daily Podcast Summary
Pop Goes the Stack: Daily Summaries Delivered
by F5
Explore the evolving world of application delivery and security. Each episode will dive into technologies shaping the future of operations, analyze emerging trends, and discuss the impacts of innovations on the tech stack.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 4 days ago20 min
AI governance: Shadow AI, real access, real risk
AI outputs may be polished, but in this episode of Pop Goes the Stack, F5's Lori MacVittie, Joel Moses, and returning guest Ken Arora focus on what happens when confidence meets real-world access. The discussion moves past model capabilities and into the operational reality that many organizations are already granting agents serious privileges, including direct read/write access to production databases and automated triggers into external SaaS systems. From there, the team tackles the uncomfortable truth: governance is arriving late. Retrofitting controls onto agents that are already running in production is difficult, and sometimes dangerously naïve, especially when teams assume simple technical guardrails are enough. Ken shares an example where limiting agents to GET requests still allowed unintended “write” behavior via legacy web patterns, underscoring how easy it is for controls to miss the real intent of an action. The conversation also challenges familiar analogies. Treating agents like functions-as-a-service can help frame lifecycle management, logging, and permissions, but agents aren’t deterministic and they aren’t truly stateless. Add natural language instructions and goal-seeking behavior, and you get a new class of risk: the system you’re trying to govern will actively work around restrictions to accomplish its task. They wrap with a practical mindset shift: governance isn’t a brake on AI adoption, it’s what enables safe scale. But getting there will require better behavioral detection, clearer boundaries, and an honest look at the cost and complexity of controlling “cron jobs with a brain” before hallucinations turn into production incidents.
- 1 weeks ago21 min
AI broke your app? It’s probably DNS (Again)
AI may be rewriting workflows and reshaping infrastructure, but this episode of Pop Goes the Stack argues that the future still depends on an old, unglamorous constant: DNS. F5's Lori MacVittie and Joel Moses are joined by Griff Shelley to unpack why “it’s always DNS” is more than a running joke when you’re building and operating AI systems at scale.The conversation breaks down how modern AI stacks lean on DNS everywhere, from Kubernetes service discovery to reaching storage endpoints, analytics APIs, vector databases, and external model providers. As agentic traffic grows, the issue isn’t just more lookups, it’s a different traffic profile entirely. Agents behave like software, not people, producing bursts of legitimate, high-speed requests that can overwhelm assumptions built on caching and human-paced interaction. The result is that small DNS latency spikes can compound into visible stutter in chat experiences, slow agent workflows, and cascading bottlenecks across clusters.Joel and Griff also explore how DNS is evolving from a simple directory into a potential carrier for trust and discovery, including emerging ideas like AI Agent Discovery, alongside more advanced routing needs such as global load balancing and selecting the best available compute resources.The practical takeaway is straightforward: treat DNS as critical AI infrastructure. Know where your DNS lives across clouds and Kubernetes, measure its performance, and make it a priority before it becomes the hidden limiter of everything you’re trying to accelerate.
- 2 weeks ago20 min
Agentic fingerprints: Detect, debug, and control AI traffic
AI is everywhere, but success metrics and security controls haven’t quite caught up. In this episode of Pop Goes the Stack, hosts Lori MacVittie and Joel Moses are joined by Lee Ennis to unpack “agentic fingerprints,” the behavioral traces AI agents leave behind as they move through applications and networks. AI agents aren’t your typical bots, and they’re definitely not “fast humans.” They’re tireless, API-hungry systems that optimize relentlessly, ignore UI conventions, and can blow past policies and rate limits without even noticing. The conversation explores how modern fingerprinting shifts from identifying a single device to recognizing workflows, cadences, and decision paths. Lee explains how patterns in form-filling, sequencing, and even language structure can help distinguish one model family from another, and why that matters for both security and governance. The team also digs into the practical upside: fingerprinting isn’t just a defensive measure, it’s a powerful debugging and improvement loop for non-deterministic systems, helping teams trace undesirable outcomes back to a few key decisions and eliminate entire branches of failure. They close with a clear call to action: start with observability. Capture the right traces in a safe sandbox, cluster and analyze behaviors, and use the data to make AI systems more explainable, controllable, and resilient before they go fully wild in production.
- 3 weeks ago22 min
AI code quality management: Guardrails, hooks, and Open Source
AI is letting teams produce code at a pace we’ve never had to govern before, and “we’ll review it later” doesn’t scale when later arrives after thousands of lines and dozens of commits. In this episode of Pop Goes the Stack, F5's Lori MacVittie, Joel Moses, and Elijah Zupancic tackle the operational problem behind the productivity boom: how enterprises manage AI-generated code quality without turning security and reliability into an afterthought. They make the case that shipping low-quality software has always been a form of malpractice; AI just accelerates it. Elijah introduces the “slow AI” approach: aim for a sustainable 7–15x productivity gain by working iteratively with the model, rather than unleashing fully automated loops that generate massive amounts of code nobody understands. The episode explores practical guardrails, including using hooks in tools like Claude Code and OpenCode to automatically trigger code quality and security checks as files are written, then forcing fixes before the workflow can move forward. They also discuss bringing classic engineering metrics back into the loop, like cyclomatic complexity and maintainability indicators, and using those signals to guide the next revision. A major thread is the open source asymmetry problem. AI-driven code generation and automated bug reports are overwhelming volunteer maintainers, while commercial users benefit disproportionately from the foundations open source provides. The group argues that the industry has to fund and support the critical projects it relies on, especially as AI accelerates both vulnerability discovery and exploit creation. The takeaway: don’t let speed outrun accountability. Build automated validation into your daily workflow, keep humans involved enough to understand what’s being shipped, and invest in the open source “infrastructure layer” your entire stack depends on.Get involved with Elijah's project, Big Code Analysis: https://github.com/dekobon/big-code-analysis
- Oct 6, 202624 min
AI API Security: Same toolbox, new scale and new risks
AI API security is having a moment, complete with new tools and a shiny new market label. This episode asks the uncomfortable question: is it actually a new domain, or is it classic API security under more pressure? F5's Lori MacVittie is joined by Principal Product Manager, Vinnie Mazza, for a grounded conversation about what’s genuinely changing and what’s the same problem wearing a new badge. Vinnie’s take is that it’s a collision: old weaknesses like broken access control and deferred security maintenance are now being hit at agent scale. Organizations that never fully adopted modern authentication, strong identity practices, or zero-trust-style assumptions are feeling it harder because agents can generate huge volumes of API calls, rapidly, from inside and outside the environment. The fundamentals still apply—clients make requests, you inspect, and you decide—but the economics and timing are different. They dig into what changes when transports evolve toward streaming and async patterns, including MCP shifting toward a streaming protocol. Faster, bidirectional flows reduce the time you have to make security decisions, while overall volume increases the likelihood that sampling-based detection misses what matters. They also revisit the split between positive and negative security models, why most organizations default to “everything is allowed unless it’s known bad,” and why that becomes more fragile as AI produces more novel behaviors. The key theme is defense in depth with new priorities. Data loss prevention and IP protection move from “later” to front-and-center when agents can unintentionally leak sensitive internal data to external model providers. The takeaway is practical: you don’t need to panic or replace your toolbox, but you do need to adapt it for higher volume, faster change, and stronger data controls.
- Sep 29, 202620 min
Stop “securing the model”—Secure the runtime instead
“Securing the AI model” sounds like a clean, fundable story. In practice, it’s often the wrong security target. In this episode of Pop Goes the Stack, F5's Lori MacVittie and Joel Moses are joined by Mark Menger to cut through the myth and focus on where the real risk lives: the inferencing server, the data sources it can reach, and the runtime environment that’s actually exposed to traffic. They make the point plainly: a model file is usually just static weights, a heavy spreadsheet sitting at rest. If you trained a proprietary model, protecting that artifact matters. But most enterprises aren’t training producers; they’re training consumers using open-weight models, and obsessing over encrypting and isolating a freely downloadable file won’t stop the failures showing up in headlines. The real battleground is everything around the model: what data the inference system can access, how RAG sources are protected, what APIs agents can invoke, what credentials get embedded in “skills” files, and how the system behaves under production-scale load. Mark frames it as an iceberg problem: the shiny GPU layer is above the waterline, but reliability, security, performance, and resilience are won or lost in the unglamorous infrastructure underneath. A key architectural theme is loose coupling. Adding control points between clients, RAG, object stores, and inference services limits blast radius and prevents “pilot success” from turning into production Thanksgiving. The practical advice is to stop treating the model file as the center of gravity, build strong boundaries around the runtime, and stress test for real scale and real failure modes before rollout.
- Sep 22, 202624 min
What actually is Model Routing? A deep dive into cost, efficiency & risk
Model routing sounds like a small architectural detail, but it’s quickly becoming the control point that determines whether AI systems are fast, affordable, and trustworthy. In this episode of Pop Goes the Stack, F5's Lori MacVittie and Joel Moses are joined by Patrick Roughan to unpack why routing decisions for LLM workloads can’t be treated like ordinary traffic distribution. The real challenge isn’t simply getting requests to an available endpoint, it’s choosing the right model and the right execution path based on intent, context, and policy.Patrick explains how context-aware routing changes everything, starting with KV cache locality. When similar prompts land on infrastructure that already holds relevant cached state, you avoid expensive recomputation and improve response times. But “smart routing” goes beyond cache. Different models have different strengths, costs, and risk profiles, and enterprises increasingly need to steer requests based on what’s being asked, who’s asking, and what data is included.The conversation also touches on how some systems are evolving toward specialization, including architectures that effectively route within a model family, and why governance has to be part of the routing layer. When data sovereignty, privacy, and regulations come into play, routing becomes a policy decision, not just a performance decision. Sometimes the right answer is to send a request to a local model, and sometimes it’s to block a request entirely after inspecting it for sensitive content.The takeaway: GPUs are constrained and costs are real, so the winning strategy isn’t throwing more hardware at the problem. It’s building routing intelligence that optimizes for efficiency, correctness, and compliance at the same time.
- Sep 15, 202622 min
AI traffic management: Load balancing vs model routing
AI traffic looks like an API call, but it behaves nothing like traditional API traffic. In this episode of Pop Goes the Stack, F5's Lori MacVittie, Joel Moses, and Scott Calvet unpack why classic load balancing assumptions break down for inference and agentic workloads, and what “model routing” needs to become if we’re serious about performance, cost, and reliability.The core distinction is simple: traditional load balancing mostly optimizes distribution and availability under the assumption that requests are broadly interchangeable. Model routing has to inspect intent. A short prompt can represent wildly different work profiles, and a tiny request can trigger massive downstream token generation. Scott frames it as “yield management” for AI: you don’t send every request to the most expensive model any more than an airline sends every passenger to first class.From there, they get practical about the variables AI introduces. Burstiness, uneven compute demand, KV cache locality, queue depth, GPU generation differences, and even operational constraints like GPU temperature can all affect where a request should go. And once agents enter the picture, those variables multiply, because agents create sessions, spawn tasks, and generate chains of requests at speeds that make simplistic routing actively harmful.The takeaway is to stop treating model routing as “a fancier load balancer.” It’s traffic management with semantics and governance. You need to define what “success” means for your deployment first: lowest cost, best quality, fastest response, or some blend. Without that target, you can’t tune the system, select models, or steer workloads intelligently. Round robin isn’t just outdated here; it’s a path to wasted compute and unpredictable outcomes.
Get Pop Goes the Stack summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
The AI in Business Podcast
Interviews with AI executives reveal practical applications and strategic insights for business leaders adopting AI.
Latent Space: The AI Engineer Podcast
Conversations with AI engineers, researchers, and founders on foundation models, AI agents, infrastructure, and scientific discovery.
"The Cognitive Revolution"
Explores the transformative impact of artificial intelligence through interviews with innovators shaping its future.
The AI Podcast
Explores artificial intelligence advancements, trends, and ethics for enthusiasts and professionals.
The AI Power Podcast
Explores AI policy, regulation, and global power dynamics shaping artificial intelligence’s impact on security, economy, and geopolitics.
This Week in AI
Four AI experts analyze the latest news and trends in artificial intelligence each week.
The Deep View: Conversations
Discusses AI advancements and leadership with innovators from labs, enterprises, and startups shaping the industry.
Global News Podcast
Global News Podcast AI
Interconnects
Exploring AI advancements through in-depth interviews with scientists and critical analysis of the technology beyond the hype.
AI + a16z
Discussions with AI engineers, founders, and experts on the technological and industry shifts in artificial intelligence.
No Priors: Artificial Intelligence | Technology | Startups
Discusses AI advancements and implications with researchers, engineers, and founders shaping the future of artificial intelligence.
How I AI
A practical guide to using AI tools in work and life, featuring guests who share specific, actionable techniques and workflows.
About Pop Goes the Stack
Explore the evolving world of application delivery and security. Each episode will dive into technologies shaping the future of operations, analyze emerging trends, and discuss the impacts of innovations on the tech stack.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Pop Goes the Stack in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Pop Goes the Stack daily summary?
It's a free AI-powered email that summarizes new episodes of Pop Goes the Stack as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Pop Goes the Stack podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Pop Goes the Stack product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by F5.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does Pop Goes the Stack release new episodes?
Pop Goes the Stack publishes weekly. Our AI generates a summary within hours of each new episode.
What topics does Pop Goes the Stack cover?
Pop Goes the Stack covers topics including Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Pop Goes the Stack summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.