#191 — November 7, 2018

Read on the Web

Web Operations Weekly

A Tour Through The OWASP Top 10 Webapp Security Threats — The Open Web Application Security Project (OWASP) is an organization set up to help raise awareness around web application security and their frequently updated ‘top 10’ list covers the main threats to Web applications today.

Yvonne Wilson

Facebook’s GraphQL Gets Its Own Open-Source FoundationGraphQL, the Facebook-incubated data query language, is moving into its own open-source foundation to be hosted by The Linux Foundation.


What Developers Have to Say About the State of Open Source — DigitalOcean surveyed more than 4,300 developers worldwide to learn how they and their companies are contributing to open source. See the report.

DigitalOcean sponsor

Google Cloud Scheduler: A Modern, Managed Cron Service for Automated Jobs — Simply create your schedules and Cloud Scheduler handles the rest by either making an HTTP request or sending a pub/sub message at the appropriate times.

Google Cloud Blog

Measuring Performance With Server Timing — The HTTP Server-Timing header provides a convenient way to communicate backend server performance timings to browser-based developer tools.

Drew McLellan

▶  Chaos Engineering: What Is It, and Where It's Going — The VP of Cloud Architecture Strategy at Amazon Web Services gives a high level talk about failure and the role of chaos engineering as a way to test the resiliency of systems.

Adrian Cockroft (AWS)

On IBM Buying Red Hat: 'At Least It Wasn’t Oracle' — What it was like for relatively new Red Hat employee, Chris Short, during the IBM acquisition announcement and the (last) week that followed.

Chris Short

💻 Jobs

DevOps Engineer at X-Team (Remote) — We help our developers keep learning and growing every day. Unleash your potential. Work from anywhere. Join X-Team.


Join Our Career Marketplace & Get Matched With A Job You Love — Through Hired, software engineers have transparency into salary offers, competing opportunities, and job details.


📘 Tutorials

Embracing Failures and Cutting Infrastructure Costs: Spot Instances in Kubernetes — ‘Spot Instances’ are unused servers made available for less than the regular price, but they can be shut down in an instant. Kubernetes to the rescue.

César Tron-Lozai

A PostgreSQL Performance Tuning Tutorial — And if you’re a Postgres user, check out our weekly Postgres newsletter.


Free eBook: Actionable Continuous Delivery Metrics — This eBook provides you insight into your CD pipeline & helps you to improve your CD process with metrics.

GoCD sponsor

Immutable Infrastructure Using Packer, Ansible, and Terraform


💬 Stories & Opinions

Deadlines, Lies and Videotape: The Tale of a gRPC Bug — If your systems rely upon gRPC, this in-depth post mortem is a must read.

Ciaran Gaffney and Fran Garcia

Dissecting Apple's Meta-CDN During an iOS Update — An attempt to measure the load-sharing behavior of Apple’s CDNs during a major iOS rollout.

Blendin, Bendfeldt, et al.

Writing Network Drivers in Go — An academic presentation of a C-based network driver rewritten in Go with only 10% lower performance.

Sebastian Peter Johann Voit

VMware to Acquire Heptio for Enterprise Kubernetes Expertise — Heptio is an enterprise-focused consulting firm founded by two of the initial developers of Kubernetes.

Joab Jackson (The New Stack)

API Profiling at Pinterest — An API intern at Pinterest explains a few different ways in which profiling has proven helpful there.

Anika Mukherji (Pinterest)

What the .NET Renaissance Means for the Enterprise

Shanfan Huang

🔧 Tools

AWS EC2 Gets New Lower-Cost, AMD-Powered M5a and R5a Instances — Powered by custom AMD EPYC processors and priced 10% lower than ‘comparable’ (i.e. Intel-based) instances.

Amazon Web Services

Monitor All Your Infrastructure, Apps, and Logs in One Platform. Try Datadog Free

Datadog sponsor

Dive: A Tool for Exploring Each Layer in a Docker Image

Alex Goodman

Ariadne: A Python Library for Implementing GraphQL Servers — Inspired by Apollo Server from the JavaScript world.

Mirumee Labs

SDNS: A Lightweight, Fast Recursive DNS Server with DNSSEC Support — Always good to see more infrastructure tools written in Go.

Yasar Alev