--- title: "Issue 105: The latest Web operations, scaling, and performance news" publication: "StatusCode Weekly" issue: 105 published_at: "2017-03-01" canonical_url: "https://weekly.statuscode.com/issues/105" --- WebOps Weekly 105 . The latest Web operations, HTTP, and Web performance news -[Read this on the Web](http://webopsweekly.com/issues/105) [![WebOps Weekly\](http://webopsweekly.com/images/webops-header.png)](http://webopsweekly.com) Issue 105 — March 1, 2017 Welcome An incredibly busy week in the world of Web operations and security. You know it's a bad week when an SHA-1 collision _isn't_ the biggest or even second biggest story, spots taken by a major leak/vulnerability in Cloudflare, and a major AWS outage, both linked below. [Cloudbleed: Cloudflare's Reverse Proxies Were Dumping Uninitialized Memory](https://bugs.chromium.org/p/project-zero/issues/detail?id=1139&utm_source=webopsweekly&utm_medium=email) story The initial vulnerability report by Google’s Tavis Ormandy on what became the ‘Cloudbleed’ issue. Cloudflare created [a detailed incident report](https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/) when the news was released, followed by [an analysis of the overall impact](https://blog.cloudflare.com/quantifying-the-impact-of-cloudbleed/) of the vulnerability, both of which are well worth reading. Project Zero [5 Hour AWS S3 Outage So Bad Amazon Struggled to Update Its Dashboard](https://www.theregister.co.uk/2017/03/01/aws_s3_outage/?utm_source=webopsweekly&utm_medium=email) news Things began with S3 in the US-East-1 region going down, but this quickly cascaded into numerous failures or slowdowns across the Web and within AWS. The Register [$5 Showdown: Linode vs. DigitalOcean vs. Amazon Lightsail vs. Vultr](https://joshtronic.com/2017/02/14/five-dollar-showdown-linode-vs-digitalocean-vs-lightsaild-vs-vultr/?utm_source=webopsweekly&utm_medium=email) opinion As always, interpret benchmarks carefully, but it’s interesting to see how Linode’s new $5 plan stacks up against the competition here. Josh Sherman [A Primer on Anycast and Web Content](https://www.incapsula.com/blog/how-anycast-works.html?utm_source=WebOps&utm_campaign=Q1_2017&utm_medium=sponsored_link) A short explainer on anycast and how it improves performance and reliability. Incapsulasponsored[![\](https://copm.s3.amazonaws.com/65de2bef.png)](https://www.incapsula.com/blog/how-anycast-works.html?utm_source=WebOps&utm_campaign=Q1_2017&utm_medium=sponsored_link) [Announcing The First SHA1 Collision](https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html?utm_source=webopsweekly&utm_medium=email) news A significant event given the key role that SHA1 plays in the systems that make up our stacks. Google [Dodging S3 Downtime With NGINX and HAProxy](https://blog.sentry.io/2017/03/01/dodging-s3-downtime-with-nginx-and-haproxy.html?utm_source=webopsweekly&utm_medium=email) tutorial S3 was down for hours but it didn’t impact Sentry much. Why? They’d built a simple S3 proxy cache. Sentry Blog [Getting Started with Terraform and Google Compute Engine](https://blog.elasticbyte.net/getting-started-with-terraform-and-google-compute-engine/?utm_source=webopsweekly&utm_medium=email) tutorial Hashicorp’s Terraform lets you define infrastructure across nearly all cloud providers in a simple markup format. Elastic Byte Blog [Why go.cd Moved To gocd.io](https://www.gocd.io/2017/01/05/why-we-moved-from-go-cd-to-gocd-io.html?utm_source=webopsweekly&utm_medium=email) story When your domain registrar won’t return your calls, it may be time for plan B - move from one TLD to another. GoCD [Why Messaging Queues Suck](https://www.programmableweb.com/news/why-messaging-queues-suck/analysis/2017/02/13?utm_source=webopsweekly&utm_medium=email) opinion Using a topic-based message queue to communicate between processes is very common but there are other approaches to keep our minds open to. Bob Reselman [Fix TLS. Let's Get Rid of Certificates?](http://blog.xot.nl/2017/02/26/fix-tls-lets-get-rid-of-certificates/?utm_source=webopsweekly&utm_medium=email) opinion Transport Layer Security should provide confidentiality, integrity and authenticity — but Jaap-Henk argues that it’s becoming apparent that it fails to provide the latter: authenticity. Jaap-Henk Hoepman [GitHub Unveils New Features for Businesses](https://github.com/blog/2325-powerful-new-features-for-businesses-on-github-com?utm_source=webopsweekly&utm_medium=email) news GitHub introduces SAML single sign-on, automated provisioning, 24/5 support, and guaranteed uptime on its new business plan. GitHub Jobs [Senior Ops and Data Platform Engineers at FreeAgent (Edinburgh or remote UK)](https://www.freeagent.com/careers) Want to work on a high-traffic, popular web app? Come and talk to us about Ruby, SmartOS, MySQL, Kafka or burritos. FreeAgent [Site Reliability Engineer (f/m) (Berlin)](http://www.wimdujobs.de/) Wimdu are looking for an Engineer with 3+ years experience to help define a solid strategy for ensuring future growth of our platform. Wimdu In brief [New I3 Instances for I/O Intensive Applications Available on AWS EC2](https://aws.amazon.com/blogs/aws/now-available-i3-instances-for-demanding-io-intensive-applications/?utm_source=webopsweekly&utm_medium=email) news Can deliver up to 3.3M IOPS and 16GB/sec sequential disk throughput. Amazon [Mozilla and BrowserStack Offering Free Firefox on Android Testing](https://hacks.mozilla.org/2017/03/doubling-down-on-cross-browser-testing/?utm_source=webopsweekly&utm_medium=email) news Mozilla Hacks [Vultr Announces $2.50/Month 512MB VPS](https://www.vultr.com/news/The-Vultr-Cloud-Is-More-Powerful-Than-Ever/?utm_source=webopsweekly&utm_medium=email) news The market-wide drop in virtual server pricing continues. Vultr [Azure Command Line 2.0 Now Generally Available](https://azure.microsoft.com/en-us/blog/announcing-general-availability-of-vm-storage-and-network-azure-cli-2-0/?utm_source=webopsweekly&utm_medium=email) news Kamaljit Bath [Red Hat Updates Ansible Tower to Improve DevOps Workflows](http://www.eweek.com/enterprise-apps/red-hat-updates-ansible-tower-to-improve-devops-workflows.html?utm_source=webopsweekly&utm_medium=email) news eWeek [[eBook\] Best Practices for Architecting Highly Monitorable Applications](https://www.vividcortex.com/resources/architecting-highly-monitorable-apps?utm_campaign=WebOps%20Weekly&utm_source=ppc) tutorial Monitoring is highly important in running apps at scale. Apply best practices from this book to avoid pitfalls. VividCortexsponsored [Analyzing 4 Million Yelp Reviews with Python on AWS](http://www.developintelligence.com/blog/2017/02/analyzing-4-million-yelp-reviews-python-aws-ec2-instance/?utm_source=webopsweekly&utm_medium=email) tutorial Gareth Dwyer [Running Consul on Kubernetes and Monitoring it With Prometheus](https://www.weave.works/running-consul-kubernetes-monitoring-prometheus/?utm_source=webopsweekly&utm_medium=email) tutorial Tom Wilkie [Understanding Public Cloud Spending Trends](http://www.thecloudcast.net/2017/02/the-cloudcast-288-understanding-public.html?utm_source=webopsweekly&utm_medium=email) podcast Cloudcast [RESTful APIs: The Big Lie](https://mmikowski.github.io/the_lie/?utm_source=webopsweekly&utm_medium=email) opinion Why you might benefit from letting this popular paradigm rest in peace. Michael S.​ Mikowski [5 Big DevOps Changes to Expect This Year](https://www.linkedin.com/pulse/5-big-devops-changes-expect-2017-shlomi-ben-haim?utm_source=webopsweekly&utm_medium=email) opinion Shlomi Ben Haim [Want More Insight Into Errors Than New Relic? ✅](https://rollbar.com/webopsweekly) tools See how Rollbar pairs perfectly with New Relic to give you greater coverage and insights into your application errors. Get x-ray vision into broken code. [Learn more.](https://rollbar.com/webopsweekly) Rollbarsponsored [kubernetes-graphite-cluster: StatsD + Graphite Cluster on top of Kubernetes](https://github.com/nanit/kubernetes-graphite-cluster?utm_source=webopsweekly&utm_medium=email) tools github.​com [ip6.name: A DNS Record for Any IPv6 Address](https://blog.tho.ms/network/2017/02/25/ip6-name-dns-record-any-ipv6-address.html?utm_source=webopsweekly&utm_medium=email) tools Thomas Hollstegge [Heaptrack 1.0: A Fast Run-Time Heap Memory Profiler for Linux](https://www.kdab.com/heaptrack-v1-0-0-release/?utm_source=webopsweekly&utm_medium=email) tools Could be handy if working close to the metal. Milian Wolff [Read this issue on the Web](http://webopsweekly.com/issues/105) [See our archives](http://webopsweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*) [Stop getting this newsletter](*|UNSUB|*) Published by [Cooperpress](https://cooperpress.com/) Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK