How Google got rid of VPN and other old(?) security methods

They called it BeyondCorp and it main goal sound as:
Every Google employee work successfully from untrusted networks without the use of a VPN. It needed for improving productivity and keep company secure.

Implementation started in 2011 and successfully ended in 2014, proccess was described in this article. Now Google starts sharirg the lessons that they have learned over the 5 years of exploitation.

P.S. On Google SSO page you can find random pictures (: desktop version required)

#security

LinkedIn запили еще одну систему для stream processing.
Даешь еще одну Кафку.

https://engineering.linkedin.com/blog/2019/brooklin-open-source

https://github.com/linkedin/Brooklin/

Поднимаем vault с etcd бекендом в k8s https://medium.com/@jackalus/deploying-vault-with-etcd-backend-in-kubernetes-d89f9a0068bf #vault #k8s

Смотрите, говорят в k8s завезли нативный CI\CD - https://medium.com/@kmadel/prow-keeping-kubernetes-ci-cd-above-water-kurt-madel-42a241e5a515
#cicd #prowe #k8s

#gcp #google How to choose GCP Storage

Learn by example
#learning #go
https://github.com/micro/examples

How Netflix Thinks of DevOps

Интересное видео про то, как устроено IT в Netflix.

https://youtu.be/UTKIT6STSVM

​​ec2-metadatafs: 'cat' your AWS EC2 metadata

This tool exposes AWS EC2 metadata as a filesystem for easy ls, cat, and grep'ing.

Advantages over curl http://169.254.169.254:
- Support for tags
- Use filesystem permissions to control access
- Use traditional unix tools to walk and interrogate the tree
- Tab completion of paths
- No need to remember the special IP address of the service

Advantages over the ec2-metadata tool:
- Support for tags
- No need to cut the output of commands to get just the field
- Can use filesystem permissions to control access
- Access to all metadata fields, not just the limited subset the tool returns

Well and browsing the metadata endpoint as a filesystem from an EC2 instance is really cool idea.

#aws #toolz

Ещё один материал от netflix, на этот раз про анализ canary deploy #cicd https://medium.com/netflix-techblog/automated-canary-analysis-at-netflix-with-kayenta-3260bc7acc69

A game that teaches locking and concurrency.

The Deadlock Empire
Slay dragons, master concurrency!
https://deadlockempire.github.io

Ещё один пост про ретроспективы конференций в Plesk, на этот раз даже со скриншотами. Вообще это отчёт по #HighloadSiberia, о ретроспективах — в конце поста.

https://habr.com/ru/company/plesk/blog/460885/

ДоДо пицца раскурили https://www.youtube.com/watch?v=sLDYgmhNxfU

Прислали в лс ништяков для postgresql

1) http://pgconfigurator.cybertec.at/
2) https://pgtune.leopard.in.ua/#/
3) https://github.com/jfcoz/postgresqltuner

Вспомним такую полезную тулзу как Gixy

Gixy is a tool to analyze Nginx configuration. The main goal of Gixy is to prevent security misconfiguration and automate flaw detection.

Описание на русском