2018年10月28日星期日

Deep Dive, Long term

职业规划

Philosophy
  • Titles lead to labels; labels lead to stereotypes; stereotypes lead to bias
  • No walls between roles
  • Change perceptions; think differently

Double proxy

A -> A sidecar -> proxy -> B
  • key points: easy to rollback misconfigures
  • 99% connection pool size decrease
  • TLS handshake latency is reduced for p99 due to warm connection
  • connection reuse rate increased
  • security enhancement as a side effect
  • refactoring hard coded configs for easy test/rollback without rebuilding package
  • gated slow rollout
  • troubleshooting related issues

Private and Public cloud migration

  • key points: easy to rollback misconfigures
  • security: address security risks as it will face the Internet directly, configure the right OneLogin and firewalls/security group
    • CSRF middleware
    • Security test: Wireshark and ngrep analyze request/response
    • Session in NodeJS
  • networking/service discovery:
    • IP tunnel with allocated subnet CIDR
    • private -> public is easy to configure
    • public -> private needs to hack as there is no routing service setup in public cloud
  • elastic scaling along with the workload
  • developer: completely new development workflow and build pipeline (dockerization)
  • migration plan
    • storage migration plan A: dump mysql; shutdown service; import
      • plan B: mysql master-slave replication; script switching master-slave
    • DNS migration: private DNS's DNS redirect to public DNS
      • New domain's DNS certificate needs double authentication
  • infrastructure as a code: to spawn a deployment easily
  • budget is more clear
  • communication is slow as lots of unknown

Retrospect

  • Refactoring vs Fixing existing broken tools
  • Asking for permissions to finish job
  • A-B team highly coupled but not cooperative: show them the impact for finishing one project; fly there to meet in person

没有评论:

发表评论