--- title: "Why, at 15 years old, AWS SQS is nearly perfect" publication: "StatusCode Weekly" issue: 218 published_at: "2019-05-29" canonical_url: "https://weekly.statuscode.com/issues/218" --- The latest Web operations, HTTP, and Web performance news #218 — May 29, 2019 [Read on the Web](https://webopsweekly.com/issues/218) Web Operations Weekly ..soon to become _**Statuscode Weekly**_ [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/v1559147209/rp9i4cegqx564s195lnp.png)](https://code.fb.com/security/service-encryption/) [Building Facebook's Service Encryption Infrastructure](https://code.fb.com/security/service-encryption/) — The tale of how Facebook (who run thousands of microservices serving, they claim, ‘billions of requests per second’) migrated from using Kerberos to TLS as their backend authentication protocol. Facebook Code [Why Tim Bray Thinks AWS SQS (Simple Queue Service) is Nearly Perfect](https://www.tbray.org/ongoing/When/201x/2019/05/26/SQS) — A love letter of sorts to SQS which is simple, scalable, and just gets the job done. This post provoked [an extensive Hacker News discussion.](https://news.ycombinator.com/item?id=20019874) Tim Bray [![\](https://copm.s3.amazonaws.com/51b07ffc.png)](https://www.gremlin.com/sre-best-practices-for-incident-management/?utm_medium=cpm&utm_source=WebOpsWeekly&utm_content=20190529&utm_campaign=2019_Cooperpress) [SRE Best Practices for Incident Management](https://www.gremlin.com/sre-best-practices-for-incident-management/?utm_medium=cpm&utm_source=WebOpsWeekly&utm_content=20190529&utm_campaign=2019_Cooperpress) — Understand the origins of modern incident management best practices, how they align with the emerging discipline of Site Reliability Engineering (SRE), and how incidents can be proactively prevented with thoughtful failure injection. Gremlin sponsor [endoflife.date: Quickly Check 'End of Life' Dates for Tools and Technologies](https://endoflife.date/) — So far it covers PHP, Ruby, Node.js, Drupal, Django, Debian, Windows, and 12 other systems. Pull requests are encouraged to extend it further. endoflife.date [Will Only Enterprise Chrome Installs Have Full Ad-Blocking? An Update on Manifest v3](https://groups.google.com/a/chromium.org/d/msg/chromium-extensions/veJy9uAwS00/9iKaX5giAQAJ) — A rather deep and technical thread but essentially Chrome is deprecating the blocking capabilities of the webRequest API in its new standards Chrome extensions will have to adhere to. This will likely have impacts on how things like ad blockers work. _The Register_ has [a more accessible writeup.](https://www.theregister.co.uk/2019/05/29/google_webrequest_api/) Simeon Vincent **Quick bytes:** - The [W3C and WHATWG have agreed to collaborate](https://www.w3.org/blog/2019/05/w3c-and-whatwg-to-work-together-to-advance-the-open-web-platform/) on a single version of the HTML and DOM specs going forward. Hurrah! 🎉 - Docker [has a new vulnerability](https://duo.com/decipher/docker-bug-allows-root-access-to-host-file-system) related to path expansion and symlinks. - 🔐 AWS user? You can now [opt in to new EBS volumes being encrypted by default.](https://aws.amazon.com/blogs/aws/new-opt-in-to-default-encryption-for-new-ebs-volumes/) - 📡 You have access to your own satellite, right? [AWS Ground Station](https://aws.amazon.com/blogs/aws/aws-ground-station-ready-to-ingest-process-satellite-data/) is now up and running and offers a way to get data from your satellite on demand. - 💰 GitHub is rolling out a ['Sponsors' program](https://github.com/sponsors) to enable people and companies to sponsor the work of open source developers. - It's been estimated that [2048 bit RSA integers can be factored in 8 hours using 20 million noisy qubits](https://scirate.com/arxiv/1905.09749). Your keys are safe for now, though, as quantum computers are _nowhere_ near this scale.. _yet!_ (10+ years at least.) - Let's Encrypt has reached [100 million deployed certificates.](https://twitter.com/i/web/status/1132990754803003393) - Do you like watching live streamers? Here's [a curated list of livestreaming coders.](https://belly.io/programming) 💻 Jobs [Senior Site Reliability Engineer - Invoca (Santa Barbara, CA or Remote)](https://grnh.se/a93ae5e82) — Join our team of Operations Engineers deploying code to our production SaaS platform & public cloud infrastructure multiple times per day. Invoca [Find a WebOps Job on Vettery](https://www.vettery.com/tech?utm_source=newsletter&utm_medium=cooper-webopsweekly&utm_term=tech&utm_content=grouped&utm_campaign=ad-77581) — Vettery specializes in tech roles and is completely free for job seekers. Vettery 📖 Tutorials & Stories [About MetricsDB: A Time Series Database for Storing Metrics at Scale at Twitter](https://blog.twitter.com/engineering/en_us/topics/infrastructure/2019/metricsdb.html) — Twitter’s time series ingestion service is handling _83 million metrics a second_ and to scale into the future, they had to seek a new approach. MetricsDB, which went live in 2017, gives an overall cost reduction of 10x and latency by 5x compared to traditional key value stores. Satish Kotha and Ilho Ye (Twitter) [Atlassian's Journey Scaling Low Latency, Multi-Region Services on AWS](https://www.atlassian.com/blog/technology/aws-scaling-multi-region-low-latency-service) — Atlassian went ‘all in’ on AWS in 2016 and has faced (and solved!) a variety of challenges in scaling stateless, high-availability cloud services on it. Here’s some of what they faced. Atlassian [📕 20 Patterns to Watch for in Engineering Teams](https://resources.gitprime.com/books/20-patterns/?utm_source=nl%28wow%29&utm_medium=email-nl&utm_campaign=nl%28wow%29) GitPrime sponsor [Broken by Default: Why You Should Avoid Most Dockerfile Examples](https://pythonspeed.com/articles/dockerizing-python-is-hard/) — A quick look at how even a basic Dockerfile can be broken and what to look for. Itamar Turner-Trauring [Deploying Active-Active Postgres on Kubernetes](https://info.crunchydata.com/blog/active-active-on-kubernetes) — A step-by-step guide on how to deploy an active-active Postgres cluster on Kubernetes using [Symmetric-DS](https://www.symmetricds.org/) (an open source database replication tool). Dave Cramer [Why We’re Switching to gRPC](https://eng.fromatob.com/post/2019/05/why-were-switching-to-grpc/) — _“Although building gRPC APIs requires a bit more work upfront, we found that having clear API specifications and good support for streaming more than makes up for that.”_ Levin Fritz [SOC 2 Compliance using Git: A Developer's Guide](https://try.datree.io/soc2-compliance-git-guide?utm_source=cooperpress&utm_medium=webopsweekly) — A practical list of Git best practices to help you get SOC 2 quick wins and improve developer productivity. Datree sponsor [GraphQL Predictions for 2019 and Beyond](https://blog.graphqleditor.com/graphql-predictions-2019+/) Robert Matyszewski [Right Sizing Your Instances Is Nonsense](https://www.lastweekinaws.com/blog/right-sizing-your-instances-is-nonsense/) — Many cost optimization companies will talk about right-sizing instances or VMs as if it were trivial. AWS cost optimization guru Corey Quinn disagrees. Corey Quinn 🛠 Code & Tools [Postgres 12 Beta 1 Released](https://www.postgresql.org/about/news/1943/) — The [draft release notes](https://www.postgresql.org/docs/devel/release-12.html) go into detail on what’s new but new support for a pluggable table storage is sure to open up opportunities. PostgreSQL Global Development Group [Announcing Terraform 0.12](https://www.hashicorp.com/blog/announcing-terraform-0-12) HashiCorp [Sheetson: Quickly Turn Any Google Sheet Into a CRUD API](https://sheetson.com/) Ralph Ngo [Cloudflare Unveils Workers KV, A Highly Distributed Database](https://blog.cloudflare.com/workers-kv-is-ga/) — Cloudflare has built a distributed, eventually consistent key-value store aimed at users of its _Workers_ serverless platform. Ashcon Partovi (Cloudflare) [AWS Auto Remediate: Functions to Remedy Common Security Issues via AWS Config](https://github.com/servian/aws-auto-remediate) Servian Curated by [Cooperpress](https://cooperpress.com/). [Change your email address](https://webopsweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://webopsweekly.com/leave/*|UID|*). © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom