---
title: "Issue 57: The latest Web operations, scaling, and performance news"
publication: "StatusCode Weekly"
issue: 57
published_at: "2016-03-16"
canonical_url: "https://weekly.statuscode.com/issues/57"
---

WebOps Weekly 57   . 

The latest Web operations, HTTP, and Web performance news -[Read this on the Web](http://webopsweekly.com/issues/57) 

[![WebOps Weekly\](http://webopsweekly.com/images/webops-header.png)](http://webopsweekly.com) Issue 57 — March 16, 2016     

[An XSS On Facebook Via PNGs and Wonky Content Types](https://fin1te.net/articles/xss-on-facebook-via-png-content-types/?utm_source=webopsweekly&utm_medium=email) A fascinating step-by-step look through how a bug bounty hunter found and could take advantage of a cross-site scripting vulnerability on Facebook via its CDN. Jack W [The Complete Guide to HTTP/2 with HAProxy and Nginx](http://m12.io/blog/http-2-with-haproxy-and-nginx-guide?utm_source=webopsweekly&utm_medium=email) tutorial A complete guide to ‘why HTTP/2’ and getting it running with NGINX - also includes some Docker images that are ready to go. Marcin Ryzycki [Responsive Images in 30 Minutes or Less](https://www.imgix.com/?utm_source=webops-weekly&utm_medium=email&utm_campaign=2016-03-16-webops-weekly) Imgix is a real-time image processing service and CDN. Our new libraries enable you to implement lightboxes and zoom viewers without having to create multiple copies of the image, while also delivering it at high quality and speed, to every device or browser. Imgixsponsored[![\](https://copm.s3.amazonaws.com/2404f0cc.png)](https://www.imgix.com/?utm_source=webops-weekly&utm_medium=email&utm_campaign=2016-03-16-webops-weekly) [EC2Instances.info: Easy Comparison of Amazon EC2 Instance Types](http://www.ec2instances.info/?utm_source=webopsweekly&utm_medium=email) tools See memory, compute units, and pricing in a sortable table. ec2instances.​info [How to Set Up Mutual TLS Authentication](http://blog.codeship.com/how-to-set-up-mutual-tls-authentication/?utm_source=webopsweekly&utm_medium=email) Having both the client _and_ server verify themselves could be useful for sensitive situations like admin panels. Here’s how to do it with NGINX. Heiko Webers [The AWS Cloud Turns 10 Years Old](https://aws.amazon.com/blogs/aws/ten-years-in-the-aws-cloud-how-time-flies/?utm_source=webopsweekly&utm_medium=email) news Jeff Barr reflects on the tenth anniversary of Amazon Web Services - S3 was publicly launched in March 2006. Amazon [How to Deploy Your Slack Bots to Heroku](https://blog.heroku.com/archives/2016/3/9/how-to-deploy-your-slack-bots-to-heroku?utm_source=webopsweekly&utm_medium=email) tutorial Matthew Creager presents an in-depth tutorial to deploying a Slack chat bot on Heroku, including using inbound and outbound webhooks, and the realtime bot API. Heroku [The Future of Loading CSS](https://jakearchibald.com/2016/link-in-body/?utm_source=webopsweekly&utm_medium=email) Chrome is intending to change the behavior of normal stylesheet loading (via ‘link’) so only rendering of content located after the ‘link’ element is blocked. This has key performance implications. Jake Archibald [A Serverless REST API in Minutes with the Serverless Framework](http://blog.codeship.com/a-serverless-rest-api-in-minutes/?utm_source=webopsweekly&utm_medium=email) A look at a framework that uses AWS Lambda to run your code in the cloud server-free. It lets you share code across functions, helps with deployment, and even run functions locally by emulating the AWS Lambda environment. Austen Collins Jobs [Platform Engineer at StatusPage.io (Denver, CO or San Francisco, CA)](https://jobs.lever.co/statuspageio/0a8a9e28-79e9-40f0-ab0a-69c6afa8a2d5) Come help build the infrastructure and sling code for new customer features. Twilio, New Relic, and Bitbucket all use and love our product. StatusPage is bootstrapped, profitable, and built for sustainability. StatusPage.​io [Stop Applying to Jobs - Let Companies Apply to You](https://hired.com/?utm_source=newsletters&utm_medium=webopsweekly&utm_term=cat-tech-webops&utm_content=stopapplyingtojobs&utm_campaign=q1-16&utm_location=us) On Hired, sign up in 10 minutes and get offers from top companies like Facebook, Uber, & Stripe. Engineers get an average of 5 offers on the platform in 1 week. Try it today. Hired.​com In brief [IPv4 Declared Historic](https://datatracker.ietf.org/doc/draft-howard-sunset4-v4historic/?utm_source=webopsweekly&utm_medium=email) news IETF [Bing Previews New Bing Search APIs](http://searchengineland.com/bing-previews-new-bing-search-apis-244827?utm_source=webopsweekly&utm_medium=email) news They are now RESTful and include significantly more filtering options. Search Engine Land [Inside The Systems That Drive Facebook](http://www.nextplatform.com/2016/03/10/inside-the-systems-that-drive-facebook/?utm_source=webopsweekly&utm_medium=email) news A look at Facebook’s 6 different server rack types. The Next Platform [Google Shares Software Network Load Balancer Design Powering GCP Networking](https://cloudplatform.googleblog.com/2016/03/Google-shares-software-network-load-balancer-design-powering-GCP-networking.html?utm_source=webopsweekly&utm_medium=email) news Google Cloud Platform Blog [[VIRTUAL COURSE\] OpsCast Classroom: Website Testing Optimization](http://pages.catchpoint.com/CLASSROOM-Testing-Optimization.html?LSD=SPON-WebOpsWeekly) tutorial Join the first ever Virtual Course for IT Ops to elevate your skills and site’s performance. Catchpointsponsored [Prioritizing Your Resources with link rel='preload'](https://developers.google.com/web/updates/2016/03/link-rel-preload?utm_source=webopsweekly&utm_medium=email) tutorial Jeff Posnick [Using NGINX to Load Balance Microservices](https://hagbarddenstore.se/posts/2016-03-11/using-nginx-to-load-balance-microservices/?utm_source=webopsweekly&utm_medium=email) tutorial Hagbarddenstore [Using Netflix Zuul to Proxy your Microservices](https://blog.heroku.com/archives/2016/3/2/using_netflix_zuul_to_proxy_your_microservices?utm_source=webopsweekly&utm_medium=email) tutorial Zuul is an edge service that proxies requests to multiple backing services. Heroku [Four Things to Do as Soon as You Sign up for AWS](https://medium.com/@rafgarcia/four-things-to-do-as-soon-as-you-sign-up-for-aws-5c095097679f?utm_source=webopsweekly&utm_medium=email) tutorial Mostly security related. Rafael Garcia [Creating Microservices with Python, RabbitMQ and Nameko](http://brunorocha.org/python/microservices-with-python-rabbitmq-and-nameko.html?utm_source=webopsweekly&utm_medium=email) tutorial Bruno Rocha [Containers vs Virtual Machines: What's the Difference?](http://www.51zero.com/blog/2016/2/16/1?utm_source=webopsweekly&utm_medium=email) tutorial 51zero [Are Site Reliability Engineers The Next Data Scientists?](http://techcrunch.com/2016/03/02/are-site-reliability-engineers-the-next-data-scientists/?utm_source=webopsweekly&utm_medium=email) opinion TechCrunch [We Put Hundreds of Our Client Sites Behind a CDN, and It Worked Out Really Well](https://css-tricks.com/moving-to-a-cdn/?utm_source=webopsweekly&utm_medium=email) opinion A thorough and practical look at both the pros and cons of moving a large number of sites behind a CDN. Scott Fennell [ActorDB: The Ideal Datastore for Microservices](http://blog.biokoda.com/post/140439136890/actordb-the-ideal-datastore-for-microservices?utm_source=webopsweekly&utm_medium=email) opinion It’s a highly distributed SQL database with linear scalability. Biokoda [Compose Enterprise: Deploy databases in minutes](https://enterprise.compose.io/?utm_source=cooper&utm_medium=webops&utm_campaign=enterprise-micro1) tools We've just launched the beta of Compose Enterprise, a new powerful option for using Compose which lets deploy production-ready databases with ease within your own cloud clusters. Compose.​iosponsored [AWS Database Migration Service](https://aws.amazon.com/blogs/aws/aws-database-migration-service/?utm_source=webopsweekly&utm_medium=email) tools You can move live, terabyte-scale databases to the cloud, with options to stick with your existing database platform or to upgrade to a new one. Amazon [HTTP/2 and SPDY Indicator Chrome Extension](https://chrome.google.com/webstore/detail/http2-and-spdy-indicator/mpbpobfflnpcgagjijhmgnchggcjblin?utm_source=webopsweekly&utm_medium=email) tools An indicator button for HTTP/2, SPDY and QUIC support on the site you’re currently visiting. Guillermo Rauch [ZeroNet: Decentralized Sites using Bitcoin Crypto and BitTorrent Network](https://github.com/HelloZeroNet/ZeroNet?utm_source=webopsweekly&utm_medium=email) code ZeroNet [Nixy: Nginx Auto Configuration and Service Discovery for Mesos/Marathon](https://github.com/martensson/nixy?utm_source=webopsweekly&utm_medium=email) code Benjamin Mårtensson    [Read this issue on the Web](http://webopsweekly.com/issues/57) [See our archives](http://webopsweekly.com/issues) [Change your email address](*|UPDATE_PROFILE|*)  [Stop getting this newsletter](*|UNSUB|*)  

Published by [Cooperpress](https://cooperpress.com/)
Fairfield Enterprise Centre, Lincoln Way, Louth, LN11 0LS, UK