DEVOPS WEEKLY ISSUE #230 - 31st May 2015
A bit of a monitoring/performance/security feel this week - mainly due to Velocity conference this last week and partly as I’m heading to Infosecurity Europe this coming week. Thanks to folks who sent me infrastructure testing links last week too.
Sponsor
Devops Weekly is sponsored by Brightbox Cloud - serious UK-based cloud infrastructure from only 1.5p per hour (£10.95/month)
Start your £20 free trial now: http://brightbox.com/devopsweekly
Sponsored Event
[Webinar] 5 Key Metrics to Release Better Software Faster
No matter how often you deploy - or how sophisticated your delivery pipeline is - you need to measure the quality of your software. But what exactly should you measure? Learn the 5 key metrics that will increase your confidence in producing a safe build for production. Register now.
http://ow.ly/MWycl
News
Excellent keynote talk from this weeks Velocity conference, all about engineering for the long term. Lots of insightful tips about standardisation and scaling distributed systems and the teams running them.
https://www.youtube.com/watch?v=p0jGmgIrf_M&feature=youtu.be
The concept of legacy has lots of different definitions but this post is a nice reminder that software is often around longer than the language it’s written in is regarded as cool.
http://glasnt.com/blog/2015/05/30/legacy-devops.html
Some interesting points about scaling microservices, in particular with regards development environments and traffic routing ideas.
http://www.slideshare.net/nathariel/microservices-nextsteps
A good discussion, backed by some data, on the security considerations of running third party containers downloaded from the internet. Worth reading both posts.
http://www.banyanops.com/blog/analyzing-docker-hub/
http://jpetazzo.github.io/2015/05/27/docker-images-vulnerabilities/
How are trends like software as a service, cloud computing, containers, etc. affecting traditional IT asset management practices in large organisations?
http://www.slideshare.net/JonHall7/it-trends-set-to-shape-software-asset-management-ibsma-sam-summit-june-2015
Security @Scale happened last year but I missed this post which features some excellent videos on securing chatops, running a bounty program and several examples of in-house security tools.
https://code.facebook.com/posts/1534948660081316/security-scale-2014-recap/
Someone recently asked me for a list of good books to read on information security. I wrote it up as a blog post which a few people might find interesting.
http://www.morethanseven.net/2015/05/19/information-security-reading-list/
Ignoring the nagios-bashing this is a good post about using consul’s built-in health checking as the foundation of a monitoring system. Includes code samples for sending alerts to a third party alerting system.
https://vividcortex.com/blog/2015/05/22/consul-for-cluster-health-monitoring/
An in-depth tutorial from Velocity digging into linux performance management tools.
http://www.slideshare.net/brendangregg/velocity-2015-linux-perf-tools
Another talk from Velocity, this one about using your monitoring tools to build a performance alerting system, and making those alerts actionable.
https://speakerdeck.com/aemcknig/crafting-performance-alerting-tools
Jobs
Hired gives top DevOps Engineers more power in their job search. In 1 week you’ll get 8+ offers from top tech companies around the US and UK. Want to learn more? Check out Hired today!
http://hrd.cm/1DTmkR4
Tools
Tipboard is an open source dashboarding framework. It’s specifically designed for large screens and deals with all the display issues so you can just focus on the data.
http://allegrotech.io/tipboard/
https://github.com/allegro/tipboard
An interesting attempt to build a human readable workflow language for operations. Allows for writing reusable operations and then tying them together with flows.
http://www.cloudslang.io/
https://github.com/CloudSlang
EGADS (Extendible Generic Anomaly Detection System) is designed to automatically detect anomalies in large scale time-series data. Looks well suited to integration with some monitoring systems.
http://labs.yahoo.com/news/announcing-the-open-source-of-egads-a-scalable-configurable-and-novel-anomaly-detection-system/
https://github.com/yahoo/egads
Devops Weekly is sponsored by Brightbox Cloud - serious UK-based cloud infrastructure from only 1.5p per hour (£10.95/month)
Start your £20 free trial now: http://brightbox.com/devopsweekly