Schedule List ViewGrid View

Can you develop and maintain applications using Kubernetes? That’s the question more employers are asking these days. Take the next step in your career by becoming a Certified Kubernetes Application Developer at Velocity. You get a full day of test prep from Sébastien Goasguen, O’Reilly’s top Kubernetes trainer, and the opportunity to take the exam onsite. Read more.

Kubernetes has the reputation of being hard to set up and operate. Many cloud and service providers make it easier by offering managed clusters, but even then, maintaining and exploiting Kubernetes day to day require specialized skills. Jérôme Petazzoni uses hands-on exercises to teach you how to set up, operate, and maintain production Kubernetes clusters. Read more.

Build confidence in your systems' behavior and identify weaknesses before they happen. Join Russ Miles on a deep dive into chaos engineering and learn how to apply it in your organization. Read more.

Sebastien Deleersnyder teaches you how to use threat modeling to integrate security in the DevOps workflow, introduces threat modeling as code, and shows you how to build a security culture in your organization. Read more.

Michael Kehoe gets you up and running on the extended Berkeley Packet Filter (eBPF). Join in to learn what eBPF is, how it works, how to use it, and how to program against it with a set of labs and plenty of preread material to get you up to speed. Read more.

By default all Kubernetes secrets are base64 encoded and stored as plaintext in etcd. Seth Vargo shares techniques for securing Kubernetes secrets, including encryption, KMS plug-ins, and tools like HashiCorp Vault and the trade-offs of each approach to better secure their clusters. Read more.

As we move toward hosting workloads on cloud-based resources such as virtual machines, storage, and container-based solutions, it's also important to modernize how these resources are deployed and managed. Neil Peterson walks you through methods for deploying cloud infrastructure with Terraform, including through a modern CI/CD pipeline. Read more.

Ryan Kitchens, Lorin Hochstein, and Nora Jones discuss incident management and explore effective approaches and techniques that help you build the capacity to encounter failure and manage the consequences of failure successfully. Read more.

Every week, seven brave SWEs and seven brave SREs get sacrificed to the Minotaur: the legendary latency leech lurking somewhere in the labyrinthine depths. You've been tasked with rescuing your comrades. But even a hero as brave as you cannot possibly survive the maze without some help. Isobel Redelmeier shows you how to leverage observability to tackle distributed system problems. Read more.

For those interested in developing more performant applications at the edge of the network, William Pressly provides an overview of Verizon Digital Media Services’ function as a service (FaaS) platform, which enables developers to run code at the network edge for richer, more personalized user experiences at ultralow latency. You'll then participate in an FaaS hackathon using the platform. Read more.

Automated software testing has become a standard practice. You probably have a variety of test suites exercising every part of your application. Do you have the same thing for your infrastructure? What about your audit controls? Join Ben Bleything to learn how to use the open source InSpec framework to build infrastructure and compliance tests so you can focus on building the next thing. Read more.

Priyanka Sharma and Sébastien Goasguen walk you through deploying serverless functions to any cloud provider of choice, breaking the shackles of vendor lock in. Read more.

Patrick Meenan lets you in on how HTTP/2 prioritization is effectively broken in most deployments and shows you how to detect, debug, and fix the issues. Read more.

Explore the key concepts behind large system design with Jenny Liao, as she guides you through building, scaling and provisioning a system. Apply the concepts you learn to evaluate and build systems of your own. You will be working in small groups. Read more.

Jeremy Rickard and Carolyn Van Slyck introduce the Cloud Native Application Bundle (CNAB) specification and teach you how to author bundles using Porter to deploy complicated modern applications with load balancer creation, certificate management, application deployment, and persistent storage. Read more.

Christian Saide shows you how to defend your infrastructure against costly DDoS attacks by blacklisting or white-listing traffic, load-shedding, and analyzing traffic using XDP and eBPF. Read more.

Vendors are trying to frame mesh as a new technology. However, just microservices are a pattern, not a specific technology, a service mesh is a new way to deploy features that were previously the domain of API management. Marco Palladino discusses the architectural pattern of the service mesh, the reasons for its emergence, and the technical requirements for meshes. Read more.

Details to come. Read more.

The extended Berkeley Packet Filter (eBPF) ecosystem can be hard to wrap your mind around. Lorenzo Fontana is here to help you understand it while applying eBPF programs to nodes and resources of a Kubernetes cluster. Read more.

Kubernetes provides a powerful set of APIs and abstractions for building distributed systems, and it provides users with the ability to build and install their own extension APIs alongside the core APIs. Phillip Wittrock covers how core Kubernetes APIs are designed and built and teaches the basics of writing an installable custom Kubernetes API. Read more.

Kat Fitzgerald walks you through building and maintaining a secure Kubernetes environment. Read more.

Mehant Baid covers the challenges Dropbox faced while running Edgestore—a low-latency, distributed data store that serves 10 million requests per second. He shares the technical and cultural changes Dropbox adopted that enabled the company to consistently hit its service level objectives. Read more.

Karthik Gaekwad walks you through security strategies and pitfalls viewed through a serverless lens. You'll leave with a solid understanding of how to approach security conversations about serverless applications in the enterprise. Read more.

Interested in becoming more data driven and empowering your peers and coworkers with insights and data? Yoni Leibowitz and Sasha Rosenbaum share how Microsoft has been constantly transforming its engineering, support, finance, and marketing work via new tech for data-driven decisions. Read more.

Will Larson explores how Stripe has evolved its approach to prioritizing technical infrastructure as the company grew from two founders to millions of users and 1,300+ employees. Read more.

The mantra with Git is "commit early, commit often." With deep insight into your applications, you can deploy early and deploy often. Darren McCleary explores how the New York Times games team fearlessly pushes changes to production and monitors its impact for 400,000+ crossword subscribers and how the team rapidly drills into issues when they occur. Read more.

The last two years have seen the emergence of several mechanisms to isolate workloads in containers as well as Kubernetes's ability to run these in a single multitenant cluster. Ricardo Aravena explores the pros and cons and explains how users can benefit from them. Read more.

Chaos engineering allows security incident response teams to proactively experiment on recurring incident patterns to derive new information about underlying factors that were previously unknown. Join Aaron Rinehart to explore the hidden costs of security incidents, learn a new technique for uncovering system weaknesses in systems security, and more. Read more.

If we can't seem to get single-process shared data access right, Sean Allen asks, what chance do we have when we use distributed state? Read more.

Applications are subject to intense scrutiny over their performance with research showing more than one-third of users will leave an app and never return if performance is not satisfactory. Whether you're just getting stated with your journey or looking to take your performance testing to the next level, you won't want to miss Kevin Dunne highlighting all of the latest tips and tricks. Read more.

The scale of cloud native environments can be overwhelming. How do you employ cutting-edge technology to ensure the best app performance for customers executing thousands or even billions of transactions a day? Jon Hodgson, Jeremy Tupa, and Marcelo Soares share practical advice you can apply to your own environment, whether large or small. Read more.

Join Ryan Kitchens for an introduction to Safety-II concepts that will help move the industry forward, increasing the opportunity for learning from success with some fundamental and practical ways that get us from "Why did things go wrong?" to "How did things go right?" Read more.

Software and applications run on a real physical network. Trying to deliver packets across the data center or around the world can pose unique challenges depending on the application and performance requirements because modern networks are a complicated mix of technologies. André Henry explores the sources of latency on the network and explains how to mitigate them. Read more.

Observability may be the hot new thing, but for many devs, it's unclear how to gracefully get from where they are now (searching across logs or using canned APM tools) to debugging production with ease. Christine Yen makes the case that observability can be more valuable to devs than ops, and she lays out a series of practical steps to up-level a team's ability to ask questions of production. Read more.

Kube-hunter is an open source penetration testing tool for checking the security of your Kubernetes cluster. Liz Rice explores how kube-hunter finds problems and misconfigurations and shares lessons on securing your cluster learned as a result. Read more.

Maya Kaczorowski explores how containers offer a fundamentally different, possibly better, security model than you're used to. They enable you to patch your environment more easily, identify when you're affected by a new vulnerability, and enforce governance for what is deployed in your environment. Read more.

The future is here and the future needs more than your basic relational databases. Amanda Moran explains Apache Cassandra data modeling, how to do it right, and how you can be successful with cloud native distributed databases by avoiding common mistakes. Read more.

Artificial intelligence for IT operations (AIOps) breaks the traditional, bottom-up, rules-driven approach to incident management. Using AIOps, you can improve customer service, lower operational costs, and boost productivity. Richard Whitehead explores how AIOps is capable of delivering continuous service assurance. Read more.

Application delivery now spans a range of technologies and deployment models: virtual machines (VMs), containers, serverless functions. Protecting these environments efficiently and minimizing errors is challenging unless your security is based on application identity and verifiable policies. Dimitri Stiliadis explains how to achieve robust security with end-to-end auth n, auth z, and encryption. Read more.

Nicolas Brousse and Oleksii Mykhailov found a distributed infrastructure that leverages public cloud providers and a private cloud with open infrastructure can deliver dynamic advertising content with low latency, preserving its high availability in an award-winning paper. Join them as they present their techniques and demonstrate how to design an ad-serving service that is resilient to failure. Read more.

Chaos engineering provides a mechanism for us to discover vulnerabilities in our infrastructure and applications by proactively seeking it out. While this is a great starting point, Patrick Higgins shares how you can apply its practices to holistically enhance the resilience of your organizations and products. Read more.

Instagram is widely used across the world and serves billions of users every day. Guilin Chen and Shobhit Kanaujia pull back the curtain on how Facebook operates Instagram efficiently at scale. Read more.

As the number of teams, clusters, and namespaces grows within an organization, it becomes increasingly difficult to maintain any kind of coherence. Amy Chen discusses how, by aligning identity, resource limits, and your application’s security posture, cluster operators can get more organizational mileage out of Kubernetes namespaces. Read more.

You may have heard about CVE-2018-1002105, one of the most severe Kubernetes security vulnerabilities of all time. But how does this flaw work? How can it be exploited, and what does it all mean? Ian Coldwater takes a deep dive into the exploit to explain the risks and gives you practical advice about how to protect your clusters. Read more.

After five years of helping hundreds of customers use Apache Kafka, you've seen it all. Gwen Shapira provides an overview of the most common ways Apache Kafka users manage to cause downtime and lose data. And how to avoid them. Read more.

Rajesh Raman dives deep into the practice of observability, demonstrating how a more analytics-driven approach to metrics, traces, and other monitoring signals improves observability. You'll learn a framework for kick-starting a culture of observability in your organization, informed by Rajesh's experience building and deploying observability tools at SignalFx. Read more.

NS1 first developed and operated a SaaS DNS platform, then shifted to releasing versioned software for on-prem use of its DNS products. Renee Orser shares the many lessons learned, including the relationship between system architecture and organizational design, while the team managed the challenges brought by diversification of a single platform across a suite of deployment models. Read more.

Heidi Waterhouse explains how to handle uncertainty by adding in error budgets, layered access, and other accommodations for failure and for designing your systems for function over form or purity. Read more.

Many platforms require a deep understanding of client traffic. But efficiently divining the desired signal from the continuous stream of traffic in at-scale edge networks is an enormous challenge. Shannon Weyrick and Clare Gollnick discuss strategy and technology for analysis and aggregation at the edge, plus centralized collection, all based on real-world use cases. Read more.

Aaron Schlesinger dives into case studies on why and how it's hard for app developers to adopt Kubernetes. He walks you through the tools to make the transition easier, providing a holistic view of how to fit everything together to make Kubernetes easier for teams. You'll leave with what you need to get your teams started with or improve your team’s productivity on Kubernetes. Read more.

As BuzzFeed transitioned to microservices, it needed to secure a growing number of internal tools. BuzzFeed's first solution was an open source auth service deployed in front of each app, but this approach had a number of scaling issues. Shraya Ramani discusses SSO, BuzzFeed's open source, homegrown, centralized solution which elegantly solved this problem. Read more.

Alex Rasmussen explores different categorical solutions to the problem of schema evolution—what happens when the structure of your structured data or API payload changes—and the trade-offs associated with each solution. Read more.

As one of the key drivers, an architect must be able to answer to any questions coming from developers, business analysts, and even Scrum Masters. Anuar Nurmakanov shares a journey using DDD and the many problems they faced. He shows what an architect can do to influence a team to start and keep using DDD even if facing obstacles and problems. Real life experience from the trenches. Read more.

The growing number of commercial and open source satellite imagery datasets is enabling remote sensing data for industrial applications. Alex Kudriashova walks you through designing and building an entire processing infrastructure and discusses its challenges, like infrastructure scalability, large frame size, data accessibility and latency, and cross-calibration between the data sources. Read more.

We fret about how to break system knowledge out of knowledge silos—the expert individuals with a deep intuitive understanding of our complex systems. Beth Long explains how those experts represent both a vulnerability and a strength and why understanding them as a key mechanism in your larger systems helps you harness their power and protect against fragility. Read more.

Are we building the right abstraction layers? And how would we know? To answer these questions, Kyle Anderson looks at the past, present, and future of the abstraction layers we've built as an industry. Read more.

Alex Elman explains how Indeed used a site-wide outage as an opportunity to build resilience, improve reliability, and make lasting improvements to the engineering culture. Read more.

Almost all science fiction representations of the future involve some version of an immersive, holographic interface with technology. The aspiration at the heart of this vision is that working with technology will one day become an extension of our existing visual, tactile understanding. John Voorhees discusses using virtual reality to connect developers in a spatial representation of code. Read more.

Ruth Yakubu explores end-to-end serverless scenarios on Microsoft Azure Functions, Azure Cosmos DB, and Event Grid. Read more.

TypeScript is overtaking the JavaScript world. Nest.js is a progressive Node.js framework for building efficient, reliable, and scalable server-side applications using TypeScript. It's modular, testable, and very similar in structure to Angular but built for backends. Richard Moot covers how Nest.js makes things better when building a TypeScript app. Read more.

Consul is a well-known and widely used service discovery mechanism. Although Kubernetes has a built-in service discovery mechanism, Wish has standardized on using Consul. Thomas Jackson explains how Wish is leveraging Kubernetes and integrating it with its infrastructure. Read more.

You're going to automate all the things, reduce toil, and make your systems smarter and recover automatically. . .except sometimes you're automating a house of cards built on the back of individual people and a well-meaning solution can fail to address the true problems in the system. Tim Bonci offers a postmortem of a solution that was designed to solve a common operational problem but failed. Read more.

Many technical leaders find themselves in leadership without any formal training. Andrew Harvey asks, What if you used your understanding of distributed systems to understand your team and how to scale it? Read more.

Server faults are a reality. While public cloud vendors try to improve hardware reliability, software should play its part by being resilient to server failures. Mist consumes TBs of telemetry data daily to do machine learning. Osman Sarood explains how the company is running 80% of its production infrastructure, reliably, on AWS Spot Instances while keeping annual costs to $2 million. Read more.

Charity Majors explains why the only environment that matters is production. For the good of humanity, ditch the rest. Read more.

Streaming live video at low latency with user interaction laid on top is hard. Steve Heffernan explains how to make it a lot easier with standards-based approaches and existing network technology. Read more.

Machine and deep learning become more and more essential for a lot of businesses for internal and external use. One of the main issues with deployment is finding right way to operationalize model within the company. Serverless approach for deep learning provides cheap, simple, scalable and reliable architecture for it. My presentation will show you how to do so within popular AWS infrastructure. Read more.

Databases are costly but critical for application health. Protecting them allows applications to scale with demand, reducing both hardware dependency and costs. Anil Jacob explains how to use application layer caching to cushion shared resources when there are frequent requests for data that doesn't change often, enabling businesses to scale well, provide good user experience, and reduce costs. Read more.

Join Tammy Butow to learn how to use chaos engineering to accelerate your understanding of how your network can break (packet loss, black hole attacks, latency injection, and packet corruption) and impact your services. Read more.

As both engineers and managers reach midcareer levels referred to as career or terminal levels (e.g., senior engineer or senior manager levels in many technology companies), they are often faced with uncertainty and ambiguity on possible next steps in their career. Uma Chingunde focuses on career planning and strategy for midcareer technologists. Read more.

Lyft has made the transition from a single monolithic service to 300+ microservices by leveraging Lyft's open source proxy Envoy. Daniel Hochman and Jose Nino explain how Lyft migrated from a legacy monolithic application to over 300 microservices while keeping drivers, passengers, and developers happy. Read more.

DevOps squads coordinate in almost every aspect of their work. Laura Maguire explores how high-performing teams responding to service outages demonstrate sophisticated, nuanced practices that ease the cognitive burden of coping with complex, time-pressured incidents. Read more.

April Wright explores the possible ramifications of deepfakes, from privacy violations to personal and professional embarrassment to causing global thermonuclear war, and considers what can be done to protect ourselves—emphasizing the need for remaining critical of what we see as this technology gets better and better. Read more.

AWS Lambda and Golang are really powerful but difficult to use. Netlify uses both to process over 20 million events every hour. Ryan Neal shares a template project that lets you deploy a function and discusses gotchas he encountered while running it in production. Read more.

Testing microservices can be hard, as often they’re coupled together through APIs or messaging. This can lead to too much reliance on slow end-to-end testing or unreliable unit tests caused by inaccurate stubs of other microservices. Andrew Morgan introduces the consumer-driven contract testing technique, a TDD at the API level approach for microservices that aims to mitigate these problems. Read more.

Emily Freeman and Nicole Forsgren dive into what the heck DevRel is and why you (yes, you) are actually a DevRel too—whether you know it or not. You’ll walk away from this game show—talk, that is—with a smile on your face and a deeper understanding of the ins and outs of technical advocacy and how developer relations benefit you as an engineer. Read more.

Ent infrastructure is unpredictable, and being agile means working harder and faster to complete project after project to keep the business moving forward. You do very little to improve the solutions you provide to your customers, and this model just doesn't scale. Heather Martin describes the journey of moving from a project to a product mind-set to transform how we deliver infrastructure. Read more.

A lot has been said about the SRE profession (how to start an SRE team, how to scale a single team in place, etc.), but how to move from a single SRE team to an SRE organization that requires several teams has been largely unexplored. Gustavo Franco takes new SRE leaders and individual contributors through what it takes to be a part of or start their second team and beyond. Read more.

Machine learning bias comes from our lack of understanding our own biases. Nivia Henry puts that into focus and offers practical solutions to mitigate such biases. Read more.

The technology invented for web browsers is a much better way of running serverless code than traditional processes and containers. Let Zack Bloom show you why. Read more.

Leading a project requires reorienting your priorities in new and sometimes unintuitive ways; Jonathan Maltz explains how your responsibilities change when you start leading a project and how you can successfully adapt to that change. Read more.

On November 11, 2018, more than $30.5B of goods from over 180 thousand brands were sold in one day through one platform, with peak message requests of 1.72B per second. Alex Chen details Alibaba's cloud storage infrastructure that supports this level of data velocity, variety, and volume. Read more.

DevOps and platform teams have too many projects, not enough time, and users who can easily ask if the thing is done, because "it's really holding them up." James Heimbuck explores the good, the bad, and the ugly of how SendGrid incorporates product management practices into planning and execution within DevOps and platform teams to cut off scope creep and never-ending projects and realize value. Read more.

Using Kubernetes and Kubeflow, David Aronchick shows how every company, no matter how technical, can use sophisticated machine learning (ML) solutions to transform their businesses while taking advantage of the reliability and portability that cloud native applications can provide. Read more.

Examining the increased need for specialized Operations Engineering in the Age of Serverless Read more.