NGINX in a serverless world. How to keep control while moving to the cloud - Oliver Gutperl

Transcription

1 NGINX in a serverless world How to keep control while moving to the cloud - Oliver Gutperl

2 About me Oliver Gutperl, Germany Background: Software Dev former VP, Now Author: Nginx richtig konfigurieren - Configure Nginx correctly 2

3 Journey to the Center of the Cloud: The Serverless World

4 The traditional approach Servers go from a closet in your office to a datacenter and get virtualized 4

5 The serverless approach History: classical SaaS (Salesforce) highly integrated, big value proposition, big prices no software installation, no servers Then Amazon, Google, Microsoft lower level of integration e.g. sending, databases, CDNs,... 5

6 Current serverless offers Lowest level of integration just storage (S3) just computing (Lambda) AWS Lambda: REaaS for Java, Node.js, Python 6

7 Serverless cloud: a factory for raw storage space and computing power

8 Result Storage and computing power become Commodities They have No competitive advantage cost 8

9 Assessing your infrastructure Commodity Core Business Gateway 9

10 Commodity Server, SSD, RAID, SAN, UPS, Router, Switch, etc. Not important 10

11 Core Business Business logic as software, data Depends on commodities Communication: HTTP Going Serverless: DevOps Microservices 11

12 Gateway to your product or service Domain Names SSL Certificates URL-Space Golden URLs Use Nginx to manage them 12

13 f() Cloud On Premise 13

14 Some ideas

15 URL-Space / Routing location /oldurl/ { } rewrite ^/oldurl/(.*) /image/heatmap/$1; location /image/heatmap/ { proxy_method POST; proxy_set_body ' { "width": "400px" } '; proxy_pass } X-Accel-Redirect: /storagegateway/heatmap/ png 15

16 Error Handling location /warmbeverage/ { proxy_intercept_errors on; error_page 418 =404 /nocoffee.html; proxy_pass } 16

17 Authentication location /private/ { } auth_request /subrequest/authentication; location = /subrequest/authentication { internal; proxy_method POST; proxy_set_body '{ "service": "$uri", "token": "$http_authorization" }'; proxy_ssl_certificate certificate.file; proxy_ssl_certificate_key secret.key proxy_pass } 17

18 A/B Testing split_clients "${remote_addr}aaa" $variant { 1% "mainline"; * "stable"; } location /someurl/ { } proxy_pass 18

19 Integration/Transclusion ssi on; <div id="menu"> <!--# include virtual= /menuservice/mainmenu" --> </div>... <div id="recommendations"> <!--# include virtual="/recommendationservice/books" --> </div> 19

20 Caching Speed Cost proxy_cache nginxcache; Microservice controls nginx cache: X-Accel-Expires: > next year 20

21 Team skills HTTP Monitoring Cost management Experimentation 21

22 HTTP Common language for services in the cloud Lots of innovation TLS (OCSP, Forward Secrecy, Connection Caching) HTTP/2 (significant HTML delivery improvements) Tangible rewards: Speed, better UX on Mobile, SEO 22

23 Monitoring & Cost Management Monitoring from IP to URL Cost management Cloud turns CAPEX into OPEX Consult pricing tables before making architectural decisions 23

24 Experimentation Everybody is experimenting Systems architectures change quickly Manage vendor-lock-in Take risks 24

25 About risk taking Cloud services: zero lead time, near zero obligations PLAN a rollback and EXPERIMENT with new things Problems: IMPROVISE & roll forward If nothing works: EXECUTE the rollback plan 25

26 This was our Journey to the Center of the Cloud Thank you for joining me. You re AWESOME! 26

27 A lot of this is uncharted territory, there is much more to discover. Questions? 27