Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Monitor Scylla with Datadog

Scylla is an open source database alternative to Apache Cassandra, built to deliver significantly higher throughput, single-digit millisecond latency, and always-on availability for real-time applications. Unlike Cassandra which is written in Java, Scylla is implemented in C++ to provide greater control over low-level operations and eliminate latency issues related to garbage collection.

Enhancing Kubernetes Security with Pod Security Policies, Part 2

In Part 1 of this series, we demonstrated how to enable PSPs in Rancher, using restricted PSP policy as default. We also showed how this prevented a privileged pod from being admitted to the cluster. Enforcement capabilities of a Pod Security Policy We intentionally omitted particular details about role-based access control (RBAC) and how to link pods with specific PSPs. Let’s move on and dig in more on PSPs.

HAProxyConf 2019 - From 1.5 into the Future by Christian Platzer

At Willhaben, we run Austria’s largest classified advertising marketplace. We started using HAProxy due to our need to move to an all-HTTPS environment. Since then, we’ve leveraged HAProxy for geo-redundancy, HTTP/2, integration with Kubernetes, and blocking suspicious activity. In this talk, I will explain how we gradually shifted from basic HAProxy functionality to our current deployment, and will also describe where we encountered trouble in our production environment and how we overcame it. We are currently serving 5-6 gigabits per second of peak traffic via HAProxy, with about 20k requests per second.

HAProxyConf 2019 - Fully-Automated Deployment of Anycasted Load Balancers with HAProxy and Python

Keeping your service configuration aligned over hundreds of hosts is never a simple task. This talk will illustrate how the University of Paderborn automated the integration of HAProxy into our infrastructure. As our current generation of load balancer appliances approached the end of life and we thought about improving how we managed our services, our goal was clear: we needed a scalable, consistent, active-active setup of load balancers that could be easily automated with open-source tools. We achieve scalability with Anycast but needed to make sure the configurations could keep up with application changes.

IAM Access in Kubernetes: The AWS Security Problem

Identity and access management (IAM) in AWS is a way to grant access to AWS services and collect and transmit data and credentials. Most Kubernetes “Quick Start” guides for AWS do not adequately cover how to manage IAM access in your pods. This blog series will first go over the security issues specific to AWS IAM on Kubernetes, then compare solutions, and then we will end with a detailed walkthrough for setting up your cluster with one of those solutions.

NGINX 502 Bad Gateway: Gunicorn

Gunicorn is a popular application server for Python applications. It uses the Web Server Gateway Interface (WSGI), which defines how a web server communicates with and makes requests to a Python application. In production, Gunicorn is often deployed behind an NGINX web server. NGINX proxies web requests and passes them on to Gunicorn worker processes that execute the application.

Telstra Ventures Invests in Rancher!

Today, we announced our $40M funding round led by Telstra Ventures. We have been working with Telstra as a customer for many years. When Telstra Ventures, who was familiar with Telstra’s success in using Rancher and Kubernetes, approached us for a potential funding round, it was a no-brainer. A leading telco like Telstra exemplifies Rancher’s vision to Run Kubernetes Everywhere.

Contribute to Netdata's machine learning efforts!

Netdata contributors have greatly influenced the growth of our company and are essential to our success. The time and expertise that contributors volunteer are fundamental to our goal of helping you build extraordinary infrastructures. We highly value end-user feedback during product development, which is why we’re looking to involve you in progressing our machine learning (ML) efforts!

Kubernetes Master Class: Deploy WordPress and MySQL without Data Loss

Applications such as WordPress or MySQL require the use of data persistence. It is common when deploying such applications to use a HostPath volume as it is agnostic from the platform. A HostPath volume shares the filesystem of the Host within the container making the data available between pod restarts. However, it ties the data to one node only, creating a single point of failure and restricting any kind of scalability. Kubernetes is not able to schedule the application in any other node even if it is unavailable. This leads to eventual data loss.