The NGINX JavaScript module (njs) became generally available as a stable module in NGINX Open Source 1.11.10 and NGINX Plus R12.
With this module you can execute event-driven JS code on your Nginx edges. This article also contains a list of use cases for that. Among them:
- Response filtering
- Request body validation
- Masking the real client IP and other request parameters
- Issuing an HTTP request to two different backends simultaneously, then forwarding the first response and ignoring the second; adding data integrity to application cookies
- Progressively Transition Clients to a New Server
#nginx #web
With this module you can execute event-driven JS code on your Nginx edges. This article also contains a list of use cases for that. Among them:
- Response filtering
- Request body validation
- Masking the real client IP and other request parameters
- Issuing an HTTP request to two different backends simultaneously, then forwarding the first response and ignoring the second; adding data integrity to application cookies
- Progressively Transition Clients to a New Server
#nginx #web
NGINX
Harnessing the Power and Convenience of JavaScript for Each Request with the NGINX JavaScript Module | NGINX
The NGINX JavaScript module is a bespoke JavaScript implementation for extending NGINX and NGINX Plus functionality. We continually add new features and publish use cases that take advantage of them. The blog includes a complete use case list.
As well as videos from PromCon EU 2021
You definitely have something to watch this weekend now!
#slides
You definitely have something to watch this weekend now!
#slides
Forwarded from k8s (in)security (D1g1)
Если вы планировали провести эти выходные с пользой, то как раз для вас
- KubeCon + CloudNativeCon Europe 2021
- ServiceMeshCon EU 2021
- Kubernetes on Edge Day EU 2021
- Crossplane Community Day EU 2021
- Cloud Native Security Day EU 2021
- Kubernetes AI Day EU 2021
- Cloud Native Wasm Day EU 2021
- FluentCon: Cloud Native Logging Day with Fluent Bit and Fluentd EU 2021
- Cloud Native Rust Day EU 2021
- PromCon Online EU 2021
- Magma Day EU 2021
Обратите внимание, что доклады на тему
CNCF
выложил записи докладов с недавно прошедших своих сессий:- KubeCon + CloudNativeCon Europe 2021
- ServiceMeshCon EU 2021
- Kubernetes on Edge Day EU 2021
- Crossplane Community Day EU 2021
- Cloud Native Security Day EU 2021
- Kubernetes AI Day EU 2021
- Cloud Native Wasm Day EU 2021
- FluentCon: Cloud Native Logging Day with Fluent Bit and Fluentd EU 2021
- Cloud Native Rust Day EU 2021
- PromCon Online EU 2021
- Magma Day EU 2021
Обратите внимание, что доклады на тему
security
были не только на Cloud Native Security Day, но и в основной программе, и в других сессиях ;)Telegram
k8s (in)security
Вот и прошел KubeCon + CloudNativeCon Europe 2021 - на нем было много интересного и полезного. Мы обязательно отдельно рассмотрим доклады, что затрагивали тему security, а их было прям предостаточно. Но уже сейчас большинство слайдов докладов доступно на…
A comparison of serverless deployment tools. Author describes the differences between Serverless Framework, SAM, and AWS CDK. However, this articale is more an overview of the aforementioned tools rather than competitive test.
Unfortunately, both Terraform (including Terraform CDK and Pulumi are out of comparision. Which is kinda disappointing. In my opinion, these two have more potential than the tools from this post.
#serverless #aws
Unfortunately, both Terraform (including Terraform CDK and Pulumi are out of comparision. Which is kinda disappointing. In my opinion, these two have more potential than the tools from this post.
#serverless #aws
TastefulElk
Serverless Framework vs SAM vs AWS CDK
Wondering what framework to use for your next #serverless project on #AWS? I created an identical app in Serverless Framewok, AWS SAM and AWS CDK to compare
Speaking of Terraform CDK. Here is a quick manual on how to define Azure resources using Terraform CDK and TypeScript.
It's Azure specific, but the overall workflow should be similar for any other Terraform provider.
#terraform #azure
It's Azure specific, but the overall workflow should be similar for any other Terraform provider.
#terraform #azure
HashiCorp
Building Azure Resources with TypeScript Using the CDK for Terraform
Learn a quick method for getting started with the Cloud Development Kit (CDK) for Terraform using TypeScript as infrastructure code and provisioning on Microsoft Azure.
git-xargs - tool for change same things in many Github repos at once
This is a CLI tool for easily executing commands and scripts opensorced by Gruntwork a short time ago.
Written in Go and used goroutines, so it pretty fast, except you reached the Github API call limit :)
#git #github #toolz
This is a CLI tool for easily executing commands and scripts opensorced by Gruntwork a short time ago.
Written in Go and used goroutines, so it pretty fast, except you reached the Github API call limit :)
#git #github #toolz
Medium
Introducing git-xargs: an open source tool to update multiple GitHub repos
git-xargs allows you to run arbitrary commands or scripts against many repos in parallel
Some time ago there was a popular interview question for the roles inside DevOps methodology: "What will you not automate or what is impossible to automate in your opinion?" That was an open-ended question to get the candidate out of the "automate everything - monitor everything" bubble. However, there was an ultimate answer for that - code review.
Like yeah, how would you automate code review, right? Well, using machine learning! - says Werner Vogels - CTO of AWS.
The article is mostly a praise of their new CodeGuru service. However, it brings up an interesting question: what if in a decade or so our job would be not fixing the bugs and production environments, but rather developing models that would prevent bugs getting into production in the first place? Or developing an AI, which will react on monitoring alerts accordingly without any human intervention?
Feel free to share your thoughts in the chat!
#aws #ml
Like yeah, how would you automate code review, right? Well, using machine learning! - says Werner Vogels - CTO of AWS.
The article is mostly a praise of their new CodeGuru service. However, it brings up an interesting question: what if in a decade or so our job would be not fixing the bugs and production environments, but rather developing models that would prevent bugs getting into production in the first place? Or developing an AI, which will react on monitoring alerts accordingly without any human intervention?
Feel free to share your thoughts in the chat!
#aws #ml
Allthingsdistributed
A new era of DevOps, powered by machine learning
AWS is on a journey to revolutionize DevOps using the latest technologies. We are starting to treat DevOps, and the toolchains around it, as a data science problem – And when we think of it this way, code, logs, and application metrics are all data that we…
Cilium 1.10 is out with Wireguard, BGP Support, Egress IP Gateway, New Cilium CLI, XDP Load Balancer, Alibaba Cloud Integration and more. As well as a lot of performance improvements.
And that's great news! Especially, the Wireguard part, because now Cilium supports not only IPSec for traffic encryption between the pods.
#networking #kubernetes
And that's great news! Especially, the Wireguard part, because now Cilium supports not only IPSec for traffic encryption between the pods.
#networking #kubernetes
cilium.io
Cilium 1.10: WireGuard, BGP Support, Egress IP Gateway, New Cilium CLI, XDP Load Balancer, Alibaba Cloud Integration and more
The Cilium core team are excited to announce the Cilium 1.10 release. A total of 2042 new commits have been contributed by a growing ...
And back to IaC.
Pulumi has presented an Automation API - a generic way to programmatically trigger Pulumi execution.
This API should ease for platform teams the development of self-service developers' portals.
The article contains examples of the Automation API usage as a WebUI, CLI, CI/CD systems' plugin, and even Jupiter notebook.
#iac #pulumi
Pulumi has presented an Automation API - a generic way to programmatically trigger Pulumi execution.
This API should ease for platform teams the development of self-service developers' portals.
The article contains examples of the Automation API usage as a WebUI, CLI, CI/CD systems' plugin, and even Jupiter notebook.
#iac #pulumi
pulumi
Build your perfect interface for the cloud: Automation API
Automation API brings the Pulumi modern IaC engine to any application
Default Tags in the Terraform AWS Provider
Finally!
Required AWS Provider >= v3.38.0, TF >= 0.12.
#aws #terraform
Finally!
Required AWS Provider >= v3.38.0, TF >= 0.12.
#aws #terraform
Why sharing a single article if you can share the whole magazine?
Increment is an online and printed magazine about software and technologies, which is published in a good-old format of monthly issues.
Each issue has its own topic and the 16th dated February 2021 is dedicated to the topic of Reliability!
Enjoy more than 10 articles on reliability, chaos engineering, etc. as well as case studies from various companies. Also, you can buy a printed magazine version if you want.
Increment has already covered topics like On-call, Remote work, Cloud, etc. Honestly, this is the best publishing finding for me this year. I'll definitely dig into it and probably even order a printed version as well!
#reliability
Increment is an online and printed magazine about software and technologies, which is published in a good-old format of monthly issues.
Each issue has its own topic and the 16th dated February 2021 is dedicated to the topic of Reliability!
Enjoy more than 10 articles on reliability, chaos engineering, etc. as well as case studies from various companies. Also, you can buy a printed magazine version if you want.
Increment has already covered topics like On-call, Remote work, Cloud, etc. Honestly, this is the best publishing finding for me this year. I'll definitely dig into it and probably even order a printed version as well!
#reliability
Increment
Increment: Planning
This issue examines the ever-evolving practices of software planning—and how we can craft plans that enrich communication, alignment, and impact on engineering teams.
From our subscriber.
How developers can be their own operations department is a story of DevOps evolution in a single company.
This article doesn't provide any answers on how you should run your operations or organize your teams. However, it gives some historical context. The story of Flipp company is very similar to what happened with the industry as a whole.
If you want to get an insight on how DevOps movement emerged and why it has become so popular - you're welcome to read this one.
P.S. You can propose an article in via chat
#culture #devops
How developers can be their own operations department is a story of DevOps evolution in a single company.
This article doesn't provide any answers on how you should run your operations or organize your teams. However, it gives some historical context. The story of Flipp company is very similar to what happened with the industry as a whole.
If you want to get an insight on how DevOps movement emerged and why it has become so popular - you're welcome to read this one.
P.S. You can propose an article in via chat
#culture #devops
Stack Overflow Blog
How developers can be their own operations department
Many companies run parallel development and operations organizations. But what if you just ran one team that did both?
Job offer negotiations as well as compensation ranges themselves are always hot topics for discussions not only in software development.
Needless to say that the skills to negotiate are important and help you to get a better deal (sometimes even without changing a company).
Today in the CatOps Chat we are going to talk about compensation and salary negotiations in general. Voice chat starts today at 17:00 UTC in the group chat. Important thing to mention: the conversation is usually in Russian or Ukrainian, or (more frequently) both.
And it's not all yet. Here is an article to prepare yourself for such a discussion. It was sitting in my reading list for a few months now, but it looks like today the time to read it has come eventually. I'm happy to share these articles with you as well!
- Ten Rules for Negotiating a Job Offer. (Part I)
- How Not to Bomb Your Offer Negotiation. (Part II)
Enjoy and auf wiederhören!
#culture #jobs
Needless to say that the skills to negotiate are important and help you to get a better deal (sometimes even without changing a company).
Today in the CatOps Chat we are going to talk about compensation and salary negotiations in general. Voice chat starts today at 17:00 UTC in the group chat. Important thing to mention: the conversation is usually in Russian or Ukrainian, or (more frequently) both.
And it's not all yet. Here is an article to prepare yourself for such a discussion. It was sitting in my reading list for a few months now, but it looks like today the time to read it has come eventually. I'm happy to share these articles with you as well!
- Ten Rules for Negotiating a Job Offer. (Part I)
- How Not to Bomb Your Offer Negotiation. (Part II)
Enjoy and auf wiederhören!
#culture #jobs
Telegram
CatOps Chat
Chat of the @catops channel
QUIC - a planned successor of TCP - is now formalized as RFC 9000.
QUIC was initially developed at Google, but later adopted by IETF. It provides some TCP-like features on top of UDP in order to overcome latency and packet loss, especially in the last mile.
HTTP/3, which is built on top of QUIC is not formalized yet, but it's following closely behind. So, it will be likely released soon as well.
So, with HTTP/3 around the corner, have you already switched to HTTP/2?
#networking #quic
QUIC was initially developed at Google, but later adopted by IETF. It provides some TCP-like features on top of UDP in order to overcome latency and packet loss, especially in the last mile.
HTTP/3, which is built on top of QUIC is not formalized yet, but it's following closely behind. So, it will be likely released soon as well.
So, with HTTP/3 around the corner, have you already switched to HTTP/2?
#networking #quic
Fastly
QUIC is now RFC 9000
QUIC version 1 is officially formalized, and QUIC deployments will now move away from using temporary draft versions to the newly minted version 1.
Gatus is a health dashboard written in Go.
It has minimalistic configuration and allows you to set multiple conditions to label an endpoint as "healthy".
Also, you can host it on your own inside your private network. So, if you have security requirements of not to allow external health checkers into the perimeter, this could be a good way to go.
#toolz #observability
It has minimalistic configuration and allows you to set multiple conditions to label an endpoint as "healthy".
Also, you can host it on your own inside your private network. So, if you have security requirements of not to allow external health checkers into the perimeter, this could be a good way to go.
#toolz #observability
GitHub
GitHub - TwiN/gatus: ⛑ Automated developer-oriented status page
⛑ Automated developer-oriented status page. Contribute to TwiN/gatus development by creating an account on GitHub.
Introducing Argo Rollouts v1.0
Now, for those, who's not familiar with Argo universe, there are Argo, ArgoCD, and Argo Rollouts. All these tools are developed under the same umbrella and are complimentary to each other, but they are not the same thing.
Argo Rollouts manages iterative deployments aka progressive delivery aka canary releases. However, progressive delivery is a broader term. Basically, you roll out your application gradually in an automated way based on the health metrics.
Currently, Argo Rollouts supports such metrics providers as: Prometheus, Wavefront, DataDog, NewRelic, Kayenta, custom Kubernetes Job, and custom Web check. And it supports various traffic controllers like: Linkerd, Istio, AWS LoadBalancer, Ambassador, and Nginx.
So, what's new in version 1.0?
- New Argo Rollouts UI
- Ability to reference existing Deployment workloads instead of inlining a PodTemplate at spec.template
- Richer Prometheus stats and Kubernetes events
- Support for Ambassador as a canary traffic router
- Support canarying using Istio DestinationRule subsets
You can read the full changelog in the GitHub release description.
Also, they have a roadmap, so you can check, what's coming next
#cicd #kubernetes #argo
Now, for those, who's not familiar with Argo universe, there are Argo, ArgoCD, and Argo Rollouts. All these tools are developed under the same umbrella and are complimentary to each other, but they are not the same thing.
Argo Rollouts manages iterative deployments aka progressive delivery aka canary releases. However, progressive delivery is a broader term. Basically, you roll out your application gradually in an automated way based on the health metrics.
Currently, Argo Rollouts supports such metrics providers as: Prometheus, Wavefront, DataDog, NewRelic, Kayenta, custom Kubernetes Job, and custom Web check. And it supports various traffic controllers like: Linkerd, Istio, AWS LoadBalancer, Ambassador, and Nginx.
So, what's new in version 1.0?
- New Argo Rollouts UI
- Ability to reference existing Deployment workloads instead of inlining a PodTemplate at spec.template
- Richer Prometheus stats and Kubernetes events
- Support for Ambassador as a canary traffic router
- Support canarying using Istio DestinationRule subsets
You can read the full changelog in the GitHub release description.
Also, they have a roadmap, so you can check, what's coming next
#cicd #kubernetes #argo
Medium
Introducing Argo Rollouts v1.0
Progressive Delivery done right!
Consul Service Mesh for Amazon ECS is now in the Tech Preview.
This means that you can deploy Consul Service Mesh on Fargate type ECS using official Terraform modules. However, only setups for Dev are supported right now, i.e. the official module deploys only a single dev/testing Consul task for now. This will be changed before Consul Service Mesh for AWS ECS hits GA.
#consul #hashicorp #aws #networking
This means that you can deploy Consul Service Mesh on Fargate type ECS using official Terraform modules. However, only setups for Dev are supported right now, i.e. the official module deploys only a single dev/testing Consul task for now. This will be changed before Consul Service Mesh for AWS ECS hits GA.
#consul #hashicorp #aws #networking
HashiCorp
Announcing Tech Preview of Consul Service Mesh for Amazon ECS
AWS users may now select Consul as their service mesh for ECS deployments.