DNSControl
DNSControl is rewriting its record internals in public, one release candidate at a time
A side-by-side editorial comparison of Antrea and Skipper — release velocity, themes, recent moves, and the top alternatives to consider.
Kubernetes CNI maintaining four release branches at once, mostly to carry CVE fixes back.
Antrea is an OVS-based Kubernetes CNI, and its release pattern is three or four live branches receiving the same fixes in parallel — v2.4.5, v2.5.1, v2.5.2, and the v2.6.x line all appear in this window, with identical entries for IPv6-over-IPv4 IPsec and CNI plugin CVE updates backported across them. The one feature release, v2.6.0, extended encryption coverage so Traceflow and Egress work with WireGuard enabled, added IPv6 and dual-stack NodePortLocal, and introduced FlowExporterDestination CRDs.
Skipper tags a release per commit — nine in eight days, and none of them change routing.
Skipper is Zalando's HTTP router and reverse proxy, cut as a GitHub tag on essentially every merged commit: v0.27.42 through v0.27.50 landed inside eight days. The content of that stream is maintenance — dependency group bumps, CI action upgrades, test corrections, and one internal refactor pulling the Valkey Del command and ratelimit ring client injection apart. The single change with user-visible effect in this window is a fix to the proxy listener binding on an insecure address.
Antrea is an OVS-based Kubernetes CNI, and its release pattern is three or four live branches receiving the same fixes in parallel — v2.4.5, v2.5.1, v2.5.2, and the v2.6.x line all appear in this window, with identical entries for IPv6-over-IPv4 IPsec and CNI plugin CVE updates backported across them. The one feature release, v2.6.0, extended encryption coverage so Traceflow and Egress work with WireGuard enabled, added IPv6 and dual-stack NodePortLocal, and introduced FlowExporterDestination CRDs.
Two arcs run in parallel. The feature arc is closing gaps where Antrea's own capabilities did not compose — encryption plus Egress, encryption plus Traceflow, dual-stack plus NodePortLocal were each combinations that previously did not work together. The maintenance arc is dependency hygiene: forking unmaintained libraries under the Antrea org, dropping abandoned dependencies outright, and tracking Kubernetes releases.
Expect the composability work to continue closing feature-interaction gaps, and the backport discipline to keep every supported branch receiving CVE updates within days of each other.
Skipper is Zalando's HTTP router and reverse proxy, cut as a GitHub tag on essentially every merged commit: v0.27.42 through v0.27.50 landed inside eight days. The content of that stream is maintenance — dependency group bumps, CI action upgrades, test corrections, and one internal refactor pulling the Valkey Del command and ratelimit ring client injection apart. The single change with user-visible effect in this window is a fix to the proxy listener binding on an insecure address.
Nothing in these entries points to a direction change; the 0.27 line is in steady maintenance with supply-chain hygiene as the visible priority — oras-go pinned to a released version so osv-scanner stops flagging it, the CodeQL action upgraded, an OPA test hardened to deny requests with truncated bodies. The documentation change is the most revealing item: jwtValidation's behavior was unclear enough to prompt a proposed advisory, and the response was to clarify the docs rather than alter the code.
The tag stream will most likely continue at several releases a week with the same composition of dependency bumps and test fixes. These entries show no feature work in flight, so the next notable change is more likely another security-adjacent clarification than a new routing capability.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Antrea or Skipper.
DNSControl is rewriting its record internals in public, one release candidate at a time
Fission's release feed carries only RC tags, and none of them say what shipped
Kaniko's release feed stops dead in June 2024 after a patch that undid its own change
mod_auth_openidc audited itself, found eight holes, and broke every session on the way out
KeePass-compatible password manager frozen mid-patch-run since 2021.
Overlay network that rewrote its certificate format, then spent a year fixing what it exposed.
See all Antrea alternatives → · See all Skipper alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Skipper is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Skipper is currently shipping more aggressively (velocity 5.0 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Antrea alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Antrea alternatives" section above for the current picks, or visit /alternatives/antrea for the full list with editorial commentary on each.
Top Skipper alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Skipper alternatives" section above for the current picks, or visit /alternatives/skipper for the full list with editorial commentary on each.