nginx in a serverless world - digital-sailors.de gutperl - nginx... · nginx in a serverless world...

NGINX in a serverless worldHow to keep control while moving to the cloud

- Oliver Gutperl

[email protected] @Digitalkapitaen #nginx #nginxconf

About meOliver Gutperl, Germany

Background: Software Dev

former CTO@parku, VP, Technology@StayFriends

Now Kapitän@

Author: „Nginx richtig konfigurieren“ - „Configure Nginx correctly“

2


Journey to the Center of the Cloud: The Serverless World


The „traditional“ approachServers go from a closet in your office… 🏠

…to a datacenter… 🏢

…and get virtualized ☁

4


The „serverless“ approachHistory: classical SaaS (Salesforce)

• highly integrated, big value proposition, big prices • no software installation, no servers

Then Amazon, Google, Microsoft • lower level of integration • e.g. e-mail sending, databases, CDNs, ...

5


Current serverless offersLowest level of integration

• just storage (S3) • just computing (Lambda) • AWS Lambda: REaaS for Java, Node.js, Python

6


Serverless cloud: a factory for raw storage space and computing power


ResultStorage and computing power become

🔌 Commodities

They have

⚖ No competitive advantage

💰 cost 8


Assessing your infrastructure🔌 Commodity

💵 Core Business

🏪 Gateway

9


CommodityServer, SSD, RAID, SAN, UPS, Router, Switch, etc.

😴 Not important

10


Core Business📀 Business logic as software, data

🔌 Depends on commodities

📞 Communication: HTTP

Going Serverless: 🛠 DevOps⚙ Microservices

11


Gateway to your product or service💯 Domain Names

🎖 SSL Certificates

📇 URL-Space

🏆 Golden URLs

Use Nginx to manage them

12


f()00101010 11010110 11010110 00101010 00101010 11010110 11010110 00101010 00101010 11010110 11010110 00101010 11010110 00101010

Cloud

💻 On Premise

13


Some ideas


URL-Space / Routinglocation /oldURL/ { rewrite ^/oldURL/(.*) /image/heatmap/$1; }

location /image/heatmap/ { proxy_method POST; proxy_set_body ' { "width": "400px" } '; proxy_pass http://heatmapService.internal/heatmap/date/; }

X-Accel-Redirect: /storageGateway/heatmap/2016-09-01.png

15


Error Handlinglocation /warmbeverage/ { proxy_intercept_errors on; error_page 418 =404 /nocoffee.html; proxy_pass http://beverageService.internal;}

16


Authenticationlocation /private/ { auth_request /subrequest/authentication; }

location = /subrequest/authentication { internal; proxy_method POST; proxy_set_body '{ "service": "$uri", "token": "$http_authorization" }'; proxy_ssl_certificate certificate.file; proxy_ssl_certificate_key secret.key proxy_pass https://authService.internal/user; }

17


A/B Testingsplit_clients "${remote_addr}AAA" $variant { 1% "mainline"; * "stable"; }

location /someurl/ { proxy_pass http://someService.internal/version/$variant/; }

18

Integration/Transclusionssi on;

<div id="menu">  </div> ... <div id="recommendations">  </div>

19


Caching🏃💨 Speed 💰 Cost

proxy_cache nginxcache;

Microservice controls nginx cache: X-Accel-Expires: 3600 X-Accel-Expires: @1504789450 -> next year

20


Team skills🌎 HTTP

🚥 Monitoring

💰 Cost management

⚗ Experimentation

21


🌎 HTTPCommon language for services in the cloud Lots of innovation

• TLS (OCSP, Forward Secrecy, Connection Caching)

• HTTP/2 (significant HTML delivery improvements) Tangible rewards: Speed, better UX on Mobile, SEO

22


🚥 Monitoring & 💰 Cost ManagementMonitoring

• from IP to URL Cost management

• Cloud turns CAPEX into OPEX • Consult pricing tables before making

architectural decisions 23


⚗ ExperimentationEverybody is experimenting

Systems architectures change quickly

Manage vendor-lock-in

Take risks

24


💣About risk takingCloud services: zero lead time, near zero obligations

PLAN a rollback and EXPERIMENT with new things

Problems: IMPROVISE & roll forward

If nothing works: EXECUTE the rollback plan

25


This was our Journey to the Center of the Cloud

Thank you for joining me.

You’re AWESOME!

26


A lot of this is uncharted territory, there is much more to discover.

Questions?

✉ [email protected]

@Digitalkapitaen 🌍 https://www.digital-sailors.de

27

nginx in a serverless world - digital-sailors.de gutperl - nginx... · nginx in a serverless world...

Documents