---
title: "The pros and cons of QUIC and HTTP/3"
publication: "StatusCode Weekly"
issue: 209
published_at: "2019-03-27"
canonical_url: "https://weekly.statuscode.com/issues/209"
---

The latest Web operations, HTTP, and Web performance news       

#209 — March 27, 2019 

[Read on the Web](https://webopsweekly.com/issues/209)   

Web Operations Weekly 

[![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/t4wwrub3yajo75dn6eve.jpg)](https://www.fastly.com/blog/why-fastly-loves-quic-http3)  

['Why We Love QUIC and HTTP/3'](https://www.fastly.com/blog/why-fastly-loves-quic-http3) — QUIC (Quick UDP Internet Connections), originally prototyped at Google, is being standardized at the IETF and forms the heart of the next version of HTTP ([HTTP/3](https://http3-explained.haxx.se/en/)). But despite all the upsides, there [are downsides too](https://news.ycombinator.com/item?id=19476439). 

Jana Iyengar (Fastly)   

[The Journey to 90%(ish) Serverless at Comic Relief](https://read.acloud.guru/journey-to-serverless-d3256d91af16) — This case study looks at how a major British fundraising movement moved from a containerized, EC2-based approach to an almost fully serverless approach. A great case study of approaching using serverless in a high throughput, high profile scenario. 

Adam Clark   [![\](https://copm.s3.amazonaws.com/69ed4468.png)](https://workers.dev/?utm_source=Cooperpress&utm_medium=display&utm_campaign=CooperpressWOW) 

[Build & Deploy Serverless Apps on a Global Cloud Network](https://workers.dev/?utm_source=Cooperpress&utm_medium=display&utm_campaign=CooperpressWOW) — Learn how to start writing serverless APIs in JavaScript, and reserve a custom subdomain for your next project. 

Cloudflare Workers sponsor   

[The Anatomy of an AWS Key Leak to a Public Code Repository](https://technodrone.blogspot.com/2019/03/the-anatomy-of-aws-key-leak-to-public.html) — It's in every developer’s top 10 worst nightmares: you’ve accidentally committed a critical access token into a publicly visible repo. What happens next? Here’s one story. 

Maish Saidel-Keesing   

[Kubernetes 1.14 Released](https://kubernetes.io/blog/2019/03/25/kubernetes-1-14-release-announcement/) — Persistent local volumes are now GA and there’s now production level support for _Windows_-powered nodes. Doug Tidwell of Red Hat has an easier to read [What You Need to Know guide](https://developers.redhat.com/blog/2019/03/25/kubernetes-v1-14-what-you-need-to-know/) to the release. 

Kubernetes Release Team   

[Authorization at LinkedIn’s Scale](https://engineering.linkedin.com/blog/2019/03/authorization-at-linkedins-scale) — With over _700_ microservices in play at LinkedIn, they have to think seriously about authorization. Here’s their approach. 

LinkedIn Engineering  

💻 Jobs  

[Lead DevOps Engineer - CI/CD](https://jobs.lever.co/heetch/8412a47d-f415-42b3-856a-988867c972ab?lever-origin=applied&lever-source%5B%5D=WebOps%20Weekly%20newsletter) — You'll be leading the Delivery Platform team's technical vision and creating the best platform for all Heetch engineers. 

Heetch   

[Find A Job Through Vettery](https://www.vettery.com/tech?utm_source=newsletter&utm_medium=cooper-webopsweekly&utm_term=tech&utm_content=grouped&utm_campaign=ad-77581) — Vettery specializes in dev roles and is completely free for job seekers. 

Vettery  

📖 Stories  

[Bug Bounties and Black Swans: How Heroku Expects the Unexpectable](https://blog.heroku.com/bug-bounties-black-swans) — A brief story about how a bug bounty researcher helped Heroku detect and implementation a mitigation for a security vulnerability in Postgres even before a patch was released. 

Heroku   

[Using Machine Learning to Ensure the Capacity Safety of Individual Microservices](https://eng.uber.com/machine-learning-capacity-safety/) — How Uber has used machine learning to power operational metric forecasting and API-driven load generation to conduct adaptive, automated capacity safety tests for its microservices. 

Ranjib Dey   

[How to Build a Serverless Video Live Streaming App](https://get.mux.com/2Cqb0Rk) — Use Mux's simple, but powerful, video APIs to build live streaming into your application. 

Mux sponsor   

[Scaling LaunchDarkly From 4 to 200 Billion Feature Flags Daily](https://stackshare.io/launchdarkly/redux-scaling-launchdarkly-from-4-to-200-billion-feature-flags-daily) — LaunchDarkly is a feature management service for third parties to adopt feature flags in their own apps. Here’s a look at some of the tools they use in their stack. 

StackShare   

▶[The Certainties About Your Job as a Site Reliability Engineer](https://thenewstack.io/the-certainties-about-your-job-as-an-site-reliability-engineer/) — A 30 minute chat with Steve Herrod about what SRE’s are and how the role is changing. 

The New Stack   

[Is ‘AWS vs Kubernetes’ The New ‘Windows vs Linux’?](https://zwischenzugs.com/2019/03/25/aws-vs-k8s-is-the-new-windows-vs-linux/) 

Ian Miell   

[Intel Gets Ready to Go Live with Servers with 12TB Optane?](https://blocksandfiles.com/2019/03/25/intel-has-servers-with-12tb-of-optane-memory-coming/) — Some dot joining leads Chris Mellor to speculate Intel will soon announce some seriously beefy 4 socket, 112 core server options supporting up to 12TB of Optane memory. 

Chris Mellor   

[Was MongoDB Ever the Right Choice?](https://www.simplethread.com/was-mongodb-ever-the-right-choice/) 

Justin Etheredge  

📘 Tutorials  

[10 Docker Image Security Best Practices](https://snyk.io/blog/10-docker-image-security-best-practices/) — A pretty good roundup of tips. 

Liran Tal   

[How to Build Your Own CDN with Kubernetes](https://blog.insightdatascience.com/how-to-build-your-own-cdn-with-kubernetes-5cab00d5c258) — This tutorial is firmly in the _“Interesting, but..”_ camp. You might pick up some useful ideas for distributing a stateless app geographically, though, but I’d leave running an actual CDN to, well, a CDN provider. 

Ilhaan Rasheed   

[📈Data-Driven Guide to Engineering Leadership](https://try.gitprime.com/data-driven-engineering-metrics/?utm_source=webopswk&utm_medium=email-nl&utm_campaign=webopswk%28q1%29) 

GitPrime sponsor   

[Enriching Event-Driven Architectures with AWS Event Fork Pipelines](https://aws.amazon.com/blogs/compute/enriching-event-driven-architectures-with-aws-event-fork-pipelines/) — AWS Event Fork Pipelines is a serverless design pattern on top of SNS, SQS and Lambda for building scalable, highly available event-driven systems of your own. 

Otavio Ferreira   

[So You Want Your Site to Work in China…?](https://chanind.github.io/china/2019/01/19/launching-an-app-or-website-in-china.html) — It’s _not_ just as simple as not annoying the Chinese government. 

David Chanin  

🛠 Code & Tools  

[NGINX 1.15.10 Released](https://twitter.com/i/web/status/1110606903791497218) — Introduces support for port ranges in `listen directives and the loading of SSL certificates and secret keys from variables. 

NGINX on Twitter   

[.NET Core Container Images Now Published to Microsoft Container Registry](https://devblogs.microsoft.com/dotnet/net-core-container-images-now-published-to-microsoft-container-registry/) — The goal is for Microsoft’s container registry to be the canonical source of Microsoft-related container images which are then syndicated out to other places like Docker Hub. 

.NET Blog   

[k3d: A Fast Kubernetes Dev Environment](https://blog.zeerorg.site/post/k3d-kubernetes-dev-env) — Fast to start and with a minimal footprint, all organized around a clean, simple CLI tool. 

Rishabh Gupta   

[Endlessh: An SSH Tarpit](https://nullprogram.com/blog/2019/03/22/) — Uses a quirk of the SSH protocol to waste attackers’ time. I ran this on a bare Linode VPS for fun and it caught a lot of malicious clients for 10 minutes at a time. The next level up is something like [Cowrie](https://github.com/cowrie/cowrie) which pretends to be a full on legitimate server. 

Chris Wellons     

📣 Some vendor-y news items  

[You Can Now Deploy CodeSandbox Sites to Netlify](https://www.netlify.com/blog/2019/03/26/deploy-codesandbox-to-netlify/) — [CodeSandbox](https://codesandbox.io/) is a really neat online development environment and it now lets you deploy straight to Netlify’s static hosting platform. 
Netlify   

[AWS Config Adds Support for Amazon API Gateway](https://aws.amazon.com/about-aws/whats-new/2019/03/aws-config-adds-support-for-amazon-api-gateway/) — The TLDR is this lets you track and audit changes to API Gateway configurations. 
Amazon Web Services   

[Watch the AWS Summit Santa Clara Keynote Later Today](https://aws.amazon.com/events/summits/santa-clara/livestream/) — Amazon’s CTO will be giving a keynote at 9am Pacific today (March 27). 
Amazon Web Services           

Curated by [Cooperpress](https://cooperpress.com/). 

[Change your email address](https://webopsweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://webopsweekly.com/leave/*|UID|*). 

© Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom