Michael Hausenblas

Cloud native environments such as Kubernetes or AWS Lambda come with new challenges around security and in this talk we will review the environments and their properties, highlight common features and look at attack vectors and how to potentially reduce them.

Cloud native environments such as Kubernetes or AWS Lambda come with new challenges around security: short-lived entities (containers, functions), untrusted environments/public clouds, high velocity, etc.. In this talk we will review the environments and their properties, highlight common features and table stakes (e.g., mutual TLS), and look at attack vectors and how to potentially reduce them. Focus areas are: managing confidential data in untrusted environments, container (image) and runtime security, Kubernetes control plane, as well as Function-as-a-Service execution isolation and considerations.

This talk compares the approaches using a simple Go app, once implemented as containerized microservices and once as a serverless app and discusses advantages and limitations of each approach.

Increasingly, we find deployments of Go in either a containerized setup (read: Kubernetes) or serverless (think: AWS Lambda). This talk compares the approaches using a simple Go app, once implemented as containerized microservices and once as a serverless app and discusses advantages and limitations of each approach. We will review the workflow end-to-end, and touch on topics like defining domain boundaries, communication, sharing state, observability, and costs, both in terms of learning curve and actual money. Parts of the app will be demoed live.

Autoscaling in Kubernetes used to be an inconsistent concept, however using the new metrics APIs defined by Kubernetes SIG Instrumentation the monitoring system of choice can be used. As it turns out, Prometheus is a popular system being used alongside Kubernetes, and the community has already developed a custom-metrics-api adapter to be used for Prometheus. This means, we can now perform autoscaling on the cluster and application level with metrics collected by Prometheus.

Other people: Frederic Branczyk (Red Hat)

In this talk we'll discuss networking in Go. We start off with a review of the stdlib net package and its sub-packages and then walk through common use cases, patterns and challenges. In the second part we focus on best practices using the stdlib and community-provided frameworks such as gorilla/websocket and gRPC.

In this talk we'll discuss networking in Go. The goal is to provide beginners with a comprehensive overview of what the stdlib offers as well as what packages outside of the stdlib exist that can be used for networking. More advanced users can benefit from networking best practices and guidance for implementing distributed systems.

The talk is has two parts:

Part 1: Basics

We start off with a review of the stdlib net package and its sub-packages, walk through common use cases, patterns and challenges:

• Discussion of net and sub-packages (main types, interfaces, understanding what is available)
• Socket-level programming
• Timeouts, retries
• Security
• DNS

Part 2: Best practices and beyond stdlib

In the second part we focus on best practices using the stdlib and community-provided frameworks for networking:

• Best practices writing networked applications
• Review of non-stdlib packages useful for networking: golang.org/x/net/websocket, gorilla/websocket, gRPC

Physical servers are so 2010 and so are VMs. Containers? Well, you're already living the dream, but there's something just around the corner and you surely have already heard about it: AWS Lambda, webtask.io, and StackHut are the new new kids on the block and in this talk we will see what they bring to the table for you as an appop and also what the implications are for your devops and sys admins.

Physical servers are so 2010 and so are VMs. Containers? Well, you're already living the dream, but there's something just around the corner and you surely have already heard about it: AWS Lambda, webtask.io, and StackHut are the new new kids on the block and in this talk we will see what they bring to the table for you as an appop and also what the implications are for your devops and sys admins. We will have a look at the current landscape, discuss challenges and the opportunities in this space as well as have a closer look at the offerings. In addition, concrete use cases and application areas, such as IoT will be discussed. A short demo will walk you through the basics and show what the pros and cons are.