DEVOPS WEEKLY ISSUE #608 - 21st August 2022

Dashboards, performance analysis, circuit breakers, Kubernetes, Terraform and more this week, plus several tools from dependency management to security testing tools.

StackHawk sponsors Devops Weekly

August 22-24: StackHawk is teaming up with Snyk for a Live Hack Series on AWS! Watch the experts exploit real issues to learn how you can protect your applications from common vulnerabilities. Registration is free!
https://sthwk.com/snyk-live-hack-series

News

A nice argument that the point of management dashboards is to act as a proof point that you really have data being gathered and processed.
https://shkspr.mobi/blog/2022/08/the-point-of-a-dashboard-isnt-to-use-a-dashboard/

A strong proponent of large bare metal servers for many use cases coming to the conclusion that if you really do need a cluster of machines then Kubernetes is a good option.
https://freeman.vc/notes/falling-for-kubernetes

Cascading failures due to increasing scale are a tricky problem to solve. Fix one problem and you’ll probably find another right behind it. This post explores how circuit breakers can help.
https://slack.engineering/circuit-breakers/

An in-depth performance analysis post, on optimizing TCP for high WAN throughput while preserving low latency.
https://blog.cloudflare.com/optimizing-tcp-for-high-throughput-and-low-latency/

Some good practical tips for making use of Kuberetes readiness and liveness probes.
https://datree.io/resources/kubernetes-readiness-and-liveness-probes-best-practices

A good developer-focused introduction to Terraform.
https://semaphoreci.com/blog/terraform

Tools

Threatest is a Go framework for testing threat detection end-to-end. It allows you to easily define test scenarios where you detonate an attack technique then expect an alert to have been created on an external platform.
https://securitylabs.datadoghq.com/articles/threatest-end-to-end-testing-threat-detection/
https://github.com/DataDog/threatest

A .NET Core global tool to display and update outdated NuGet packages in a project
https://github.com/dotnet-outdated/dotnet-outdated

Virt is a neat little project, providing a small Linux VM for macOS on ARM, with podman installed for running containers.
https://github.com/apinske/virt

gProfiler is a system-wide profiler, combining multiple sampling profilers to produce unified visualization of what your CPU is spending time on.
https://gprofiler.io
https://github.com/Granulate/gprofiler