Free Your SSLF and the Resty Will Follow - Dana Borinski & Eli Zilbershtein

•

0 likes•56 views

Branded URLs are easy to implement unless SSL is required. We wanted to provide our customers with an easy solution that will work with our existing clicks solution, requiring minimum effort from them to implement, all while not changing our existing architecture and system. Our customers need branded URLs in order to maintain their brand equity, improved security practices, and increase click-through rates. In a world where becoming secure is mission-critical, HTTPS is a must. However, there really is no out of the box solution for apply HTTPS at scale, so we found ourselves having to build our own solution. In order to implement SSL for our customers, a complicated security process was required involving different groups within the organizations both on the client’s side, and within our own company. This talk will dive into how we solved this problem with Letsencrypt, Docker, Redis, Nginx, resty-Lua and and autossl module.

Free YourSSLf
And The Resty
Will Follow
Dana Borinski &
Eli Zilbershtein

95%
Devices with
AppsFlyer’s SDK
90B+
Events/Day
AppsFlyer in Numbers
10K+
Servers
“AppsFlyer is the world's leading mobile attribution & marketing
analytics platform, helping app marketers around the world make
better decisions.”

OneLink Overview
Deep Linking
Deferred
Deep
Linking
New users are
sent to the right
app store ﬁrst.
App Installed
App Not
Installed

Why Branded Links?
Strong Branding
https://mybooks.onelink.me/PCcG/2492c568

Why Branded Links?
Strong Branding
https://click.mybooks.com/PCcG/2492c568
https://mybooks.onelink.me/PCcG/2492c568

Why Branded Links?
Email Campaigns
Branded Link =

Why Branded Links?
Email Campaigns
Non Branded Link =

Why HTTPS?
Trust & Security
Privacy
Search Ranking

Why HTTPS?
Trust & Security
Privacy
Search Ranking
Deep Links

1. Enrollment
2. Validation
3. Deployment
4. Monitoring
5. Renewal
SSL Certiﬁcate Lifecycle
10K
customers

1. Operation
2. Human intervention
3. Customer support
4. Non technical customers
5. Bureaucracy
Clearly this does not scale

OneLink Clicks System
Clicks
System
S3 redis
kafka
ELB
aerospike

Naive Implementation
Clicks
System
S3 redis
kafka
GlassGate
ELB
aerospike

Basic Implementation (still naive)
Clicks
System
Internal
ELB
S3 redis
kafka
aerospike
GlassGate
ELB

GlassGateGlassGate
Redundancy (still naive)
Clicks
System
Internal
ELB
S3 redis
kafka
aerospike
GlassGate
NLB
ELB

GlassGateGlassGate
Certiﬁcates storage
Clicks
System
Internal
ELB
S3 redis
kafka
GlassGate
NLB
ELB
redis
aerospike

GlassGateGlassGate
System Scaling (not naive)
Clicks
System
Internal
ELB
S3 redis
kafka
GlassGate
NLB
ELB
redis
aerospike

GlassGateGlassGate
DNS
GlassGate
NLB
ELB
redis
mybooks.com
mybooks.brandedlinks.com
*.brandedlinks.com

GlassGateGlassGate
Evil robot (or bad conﬁguration)
Clicks
System
Internal
ELB
S3 redis
kafka
GlassGate
NLB
ELB
redis
aerospike

● Domain verification.
● Non valid domains caching.
● Central certificates storage.
● Certificates pre warm.
● Let’s Encrypt Staging Environment.
Lesson Learned

Thank you
eli.zilbershtein@appsﬂyer.com
dana.borinski@appsﬂyer.com

● https://github.com/GUI/lua-resty-auto-ssl
● https://hub.docker.com/r/openresty/openresty/
● https://letsencrypt.org/docs/rate-limits/
● https://letsencrypt.org/docs/staging-environment/
Resources

● 85,167,054 SSL certificates on the entire internet
(Source: BuiltWith)
● 84.2% of pages loaded in Chrome, on all platforms, are
over HTTPS (Source: Google’s Transparency Report)
● 70.8% of the unencrypted user traffic to Google comes
from mobile devices.
SSL usage

Here's a short summary of my slides: 1. Changing of CTR's in organic results due to knowledge graph elements. What does that mean, and what we should do in order not to lose traffic and conversions? 2. Mobile trend. Where is it going, and when do we need to act? Page/Website speed. How do we take control of this issue? 3. Cannibalisation of SERPs. What is it, and how to prevent this? 4. How to monitor your website's backlinks profile? 5. How to make your website super fast

Apple: The Next King of Search By Ian Sefferman

Search Marketing Expo - SMX

How to report on SEO in 2018 #BrightonSEO

Branded3

Digital Transformation in Financial Services

David Bressler

A focus on customer experience (CX) drives the need to change the economics of software development in order to remain competitive in the Application Economy. In this presentation I present a definition of Customer Experience, backed up by research from Forrester Research, explain how this translates into customer expectations in a mobile world, introduce the need for persona empathy and reducing cognitive load, and finally leave the audience with 3 steps to take when they get back to the office to start down a path of digital transformation.

Mobile apps are a critical part of your digital strategy: The app is often the “front door” to your brand for many customers. Learn how you can measure and ensure optimal mobile experiences for your digital customers with New Relic. We’ll share three of the most commonly missing pieces we see in mobile app development today. And look at a real-world example of how New Relic has helped measure and debug some of the most complex issues that affect app users. Learn more: https://newrelic.com/solutions/digital-customer-experience

MetaCert pitch deck

Tech in Asia

MetaCert Investor Pitch Deck That Secured $1.2M in Seed Capital (Unedited)

Paul Walsh

5 Secrets to Internet Marketing Success

Shawn Souto

London Adapt or Die: Opening Keynot

Apigee | Google Cloud

Adapt or Die: Opening Keynote with Chet Kapoor

Apigee | Google Cloud

May Partner Bootcamp 2022

Acquia

Best Practices for API Adoption

AnyPresence

APIs have become ubiquitous and they have profoundly changed the way we connect to the world. They have opened the doors to enterprise back-end infrastructure and made it possible for developers to build innovative mobile applications. But this IT revolution comes with its share of challenges. “If we build it they will come” is no longer an effective API launch strategy. AnyPresence and WIP Factory are joining forces to share valuable best practices on improving API adoption.

gmd2015 pawel_matkowski_how to track for insights in the data points (web, mw...

Asphri457

The Evolution of Mobile Advertising - AppsFlyer Presentation at Israel Moneti...

AppsFlyer

Going web native

Marcus Hellberg

Milestone Webinar, Can Siri Talk To Your Website

Milestone Internet Marketing

Syscraft profileTanmay Sharma

Agencies Developer ProductsJeff Eddings

Getting Started with Sitelock on ResellerClub

ResellerClub

This is the slide deck for the webinar presented by Givonn Jones, Director of Business Development at Sitelock & Simran Talreja, Product Manager at ResellerClub on the value of Sitelock as a value added service that Resellers can offer to their customers with an eye on protecting their websites. Sitelock's features including its 24x7 scanning, protection from hacking and automatic fixing of issues and threats are explained and its integration with the ResellerClub platform is also covered as part of this webinar.

Extracting Value from Your Supply Chain Systems

Redwood Logistics

Communities & Dreamforce Key Takeaways

Magnet 360

Linked In Features Technical

chomas kandar

AppVirality.com - Investor Pitch Deck

Laxman Papineni

YOUR OPEN SOURCE PROJECT IS LIKE A STARTUP, TREAT IT LIKE ONE, EYAR ZILBERMAN...

DevOpsDays Tel Aviv

From idea to execution, the challenges of publishing an open source project are very similar to initializing a startup when it comes to creating a successful product that people will love and use. Most open source projects are not “taking-off”, although they are really good! This is because developers (which are usually the creators of open source projects) think that writing the code is the hard part and “neglect” the other parts of publishing a good open source project. In this talk, I will use my experience as a contributor to open source and product head of a startup, to go beyond writing the code itself and cover the other central aspects of creating an open source project, like MVP, product/market fit, marketing and more.

GRAPHQL TO THE RES(T)CUE, ELLA SHARAKANSKI, Salto

DevOpsDays Tel Aviv

If you have never used GraphQL before, you probably think that it is just another buzzword that will be forgotten in a few years. You might think: “Why do I need to learn a new way to write APIs when REST already answers all my needs?”. Or, you are excited to learn something new but don’t believe GraphQL is mature enough for production. In this talk, I will remind you of some of the pain points you have probably experienced when using REST. I will then explain what GraphQL is and demonstrate how it solves these pain points. Next, I will discuss the disadvantages of GraphQL. Finally, I will provide some guidelines for choosing between REST and GraphQL. By the end of this talk, you will understand what GraphQL is and when to use it.

Similar to Free Your SSLF and the Resty Will Follow - Dana Borinski & Eli Zilbershtein

Embedded Analytics: 5 Steps to App Modernization

Poojitha B

Thinking about the full stack to create great mobile experiences

New Relic

MetaCert pitch deck

Tech in Asia

MetaCert Investor Pitch Deck That Secured $1.2M in Seed Capital (Unedited)

Paul Walsh

5 Secrets to Internet Marketing Success

Shawn Souto

London Adapt or Die: Opening Keynot

Apigee | Google Cloud

Adapt or Die: Opening Keynote with Chet Kapoor

Apigee | Google Cloud

May Partner Bootcamp 2022

Acquia

Best Practices for API Adoption

AnyPresence

gmd2015 pawel_matkowski_how to track for insights in the data points (web, mw...

Asphri457

The Evolution of Mobile Advertising - AppsFlyer Presentation at Israel Moneti...

AppsFlyer

Going web native

Marcus Hellberg

Milestone Webinar, Can Siri Talk To Your Website

Milestone Internet Marketing

Syscraft profileTanmay Sharma

Agencies Developer ProductsJeff Eddings

Getting Started with Sitelock on ResellerClub

ResellerClub

Extracting Value from Your Supply Chain Systems

Redwood Logistics

Communities & Dreamforce Key Takeaways

Magnet 360

Linked In Features Technical

chomas kandar

AppVirality.com - Investor Pitch Deck

Laxman Papineni

Similar to Free Your SSLF and the Resty Will Follow - Dana Borinski & Eli Zilbershtein (20)

Embedded Analytics: 5 Steps to App Modernization

Thinking about the full stack to create great mobile experiences

MetaCert pitch deck

MetaCert Investor Pitch Deck That Secured $1.2M in Seed Capital (Unedited)

5 Secrets to Internet Marketing Success

London Adapt or Die: Opening Keynot

Adapt or Die: Opening Keynote with Chet Kapoor

May Partner Bootcamp 2022

Best Practices for API Adoption

gmd2015 pawel_matkowski_how to track for insights in the data points (web, mw...

The Evolution of Mobile Advertising - AppsFlyer Presentation at Israel Moneti...

Going web native

Milestone Webinar, Can Siri Talk To Your Website

Syscraft profile

Agencies Developer Products

Getting Started with Sitelock on ResellerClub

Extracting Value from Your Supply Chain Systems

Communities & Dreamforce Key Takeaways

Linked In Features Technical

AppVirality.com - Investor Pitch Deck

More from DevOpsDays Tel Aviv

YOUR OPEN SOURCE PROJECT IS LIKE A STARTUP, TREAT IT LIKE ONE, EYAR ZILBERMAN...

DevOpsDays Tel Aviv

GRAPHQL TO THE RES(T)CUE, ELLA SHARAKANSKI, Salto

DevOpsDays Tel Aviv

MICROSERVICES ABOVE THE CLOUD - DESIGNING THE INTERNATIONAL SPACE STATION FOR...

DevOpsDays Tel Aviv

“The International Space Station has been orbiting the Earth for over 20 years. It was not launched fully formed, as a monolith in space. Instead, it is built out of dozens of individual modules, each with a dedicated role - life support, engineering, science, commercial applications and more. Each module (or container) functions as a microservice, adding additional capabilities to the whole. Not only do the modules need to function together, delivering both functional and non-functional capabilities, they were designed, developed and built by different countries on Earth and once launched into space (deployed in multiple different ways), had to work together - perfectly. Despite the many (minor) reliability issues which have occurred over the decades, the ISS remains a highly reliable platform for cutting edge scientific and engineering research. In this session I will describe the way the space station was developed and the lessons Site Reliability and DevOps Engineers can learn from it.

THE (IR)RATIONAL INCIDENT RESPONSE: HOW PSYCHOLOGICAL BIASES AFFECT INCIDENT ...

DevOpsDays Tel Aviv

Have you ever felt you took every wrong turn possible in the process of mitigating a production incident? Did you go through a 3-hour hell during incident response and felt the incident wasn’t complex enough to justify the horrors you’ve experienced? Did it cause you to question your engineering or problem-solving skills? Well, it’s only partially you. Our brain is wired to make decision-making simpler. In doing so, it exposes itself to biases, heuristics, and other quirks that may seem like “bad decisions” in hindsight. In this talk, through real-life outages, we’ll project those psychological principles onto the world of production monitor, and incident management. As a responder, you’ll learn why those behavioral patterns emerge during production incidents and what can be done to limit their effect, and as a manager, you’ll learn how to enable and encourage a healthy environment to better support those patterns.

PRINCIPLES OF OBSERVABILITY // DANIEL MAHER, DataDog

DevOpsDays Tel Aviv

The word observable entered the English language roughly 400 years ago, but the concepts of what it means to see, comprehend, and understand something have been debated since time immemorial. Starting in the 19th century, a series of postulates and criteria coalesced into control theory, and it is from this body of knowledge that we gained the word “observability”. Today, with the advent of complex, interconnected computer systems, that word has taken on new meanings and connotations—some useful, some detrimental, and some just plain confusing. In this talk, we’ll mix a little history, a touch of philosophy, and a healthy dose of reality, to demystify what observability means to us as professional computer people. We’ll tear through the marketing material and unearth foundational principles that will help us to build better infrastructure, write better software, and promote healthier business practices. Finally, we’ll explore some potential new avenues for discussion and understanding.

NUDGE AND SLUDGE: DRIVING SECURITY WITH DESIGN // J. WOLFGANG GOERLICH, Duo S...

DevOpsDays Tel Aviv

Security people say users are the weakest link. But are they? When complying with security becomes too burdensome, users take shortcuts, find workarounds, and end up jeopardizing security. Blaming users is lazy and easy. Making security usable is time consuming and challenging. How does design research help us understand our customers? What patterns and principles drive secure behavior? How can we build empathy with customers and make the right thing to do the easiest thing to do? This session explores these questions, and provides examples of how design thinking and research can help us be more secure. We will walk through our creation of core user personas, design principles, and how these inform and direct our design choices and intent. Don’t blame your users anymore. Come learn how to be part of a future where usability leads security.

(Ignite) TAKE A HIKE: PREVENTING BATTERY CORROSION - LEAH VOGEL, CHEGG

DevOpsDays Tel Aviv

This is for you, you rockstar, ninja coffee drinking workaholic who doesn’t know what a vacation day looks like. Even though you love your job and are dedicated and are super important, you need a break too. We tend to think that working all the time is an effective practice while the truth is that finding the time for self care and recharging your batteries is beneficial for both you and your company. Additionally, if you’re a leader, you’re responsible for the wellbeing of your team. In this talk I’ll discuss the importance of taking time off of work and creating a positive culture surrounding vacation time.

BUILDING A DR PLAN FOR YOUR CLOUD INFRASTRUCTURE FROM THE GROUND UP, MOSHE BE...

DevOpsDays Tel Aviv

This is a story about taking the cloud infrastructure of a successful company, that is still managed as infrastructure of a startup company, and rebuilding it to support the growing business requirements, especially around disaster recovery and business continuity. In the session I will share Next Insurance’s journey - where we started, where we are now and what we learned on the way so far. I will talk about how we managed to build our proven DR plans, and actually execute them in our DR drills. I will also talk about why we decided that the only way to prove your DR plan works is to continue running your business in the DR account and make it your production account, and go on to build your next DR account. If you are a part of a company that is about to embark on a similar journey, this session might equip you with some very useful insights on how to think about such a challenge, and some very useful and practical tips on how to execute it.

THE THREE DISCIPLINES OF CI/CD SECURITY, DANIEL KRIVELEVICH, Cider Security

DevOpsDays Tel Aviv

CI/CD pipelines are quickly becoming the path of least resistance for would-be attackers into sensitive internal systems, gaining access to critical data, with minimal effort. In the InfoSec world when we talk about CI/CD security often times this focuses on specific aspects of securing your pipeline - scanning the code, protecting secrets, securely managing code deployments, or even authentication and authorization mechanisms, but we rarely talk about all of these together. After years of being in the trenches and realizing that the attack surface is growing and the threat landscape becoming more and more complex, it has become increasingly apparent that security teams need to adapt and modify strategies to keep up with the new reality of CI/CD protection, without compromising developer velocity. In this talk I would like to propose a new way of thinking about CI/CD security - that encompasses the three disciplines that comprise CI/CD security - security in the pipeline, of the pipeline, and around the pipeline. Partial coverage of any or all of these disciplines simply will not cut it with the continuously evolving risk landscape. Security engineers need to address each of these aspects in their entirety to provide the full scope of coverage that modern organizations need, and I will take a deep dive on the challenges each introduce, and the approaches and techniques for mitigating them based on adversarial sec research.

THE PLEASURES OF ON-PREM, TOMER GABEL

DevOpsDays Tel Aviv

The last two decades have been all about SaaS, with advantages that cannot be overstated. Except SaaS isn’t always an option, nor is it always the right choice: businesses in tightly regulated industries, or where information security is paramount, for example, will not - often can not - consider any software that isn’t under their control. For many software enterprises, this leads to the dreaded inevitability of on-premise deployment. Fortunately, the situation today is dramatically different to a scant few years ago, let alone a decade or two: the same technologies that enable SaaS have also radically transformed on-prem deployment. Modern tools like Docker, Consul, ELK and Kubernetes - to name a few - can be leveraged to completely transform the experience for both customers and vendors. In this talk we’ll contrast the challenges and advantages of SaaS and on-prem, see how things have evolved in recent history, and see how modern on-prem deployment can be, if not pleasurable, at least relatively painless.

CONFIGURATION MANAGEMENT IN THE CLOUD NATIVE ERA, SHAHAR MINTZ, EggPack

DevOpsDays Tel Aviv

Configuration Management is at the core of Ops. It’s the biggest enabler of any compute operation, small and big. In the past decade, we have switched from thinking about the machines we are configuring, to think about the software and services we are controlling. With that change of mindset, so did the tools we are using. Traditional tools like Puppet, chef, salt and Ansible are slowly declining while new tools such as Terraform, Pulumi, Helm and Kustomize are on the rise. In this talk I will try to describe the pain-points and the opportunities of this transformation as well as suggesting a future direction based on tools developed at the big-tech companies (Mainly facebook and google).

SOLVING THE DEVOPS CRISIS, ONE PERSON AT A TIME, CHRISTINA BABITSKI, Develeap

DevOpsDays Tel Aviv

We all know how hard it is to find DevOps engineers, and creating a diverse team despite gender and ethnicity bias? Nearly impossible. At this talk we will show our tools and methods implemented in the Develeap hiring process that overcome this inherited bias. About 2 years ago we faced a crisis in our DevOps consulting company - the market demand was higher than we could supply. The traditional recruiting process depending on CV and artificial credentials was not working. So we came up with an alternative solution, and since then - we are growing exponentially and diversely. In this talk we will show the practical tools we deployed in order to increase our capacity, and we will show how these tools overcome the inherited bias in the process.

OPTIMIZING PERFORMANCE USING CONTINUOUS PRODUCTION PROFILING ,YONATAN GOLDSCH...

DevOpsDays Tel Aviv

Everyone wants observability into their system, but find themselves with too many vendors and tools, each with its own API, SDK, agent and collectors. With the increasing complexity of modern applications, continuous profiling methods and tools are gaining popularity among the Developer and Engineering communities. In this session, we cover what continuous profiling entails and why you should implement a profiler into your tech stack (if you haven’t done so already). We’ll then bring theory to practice and demonstrate a real-life scenario using gProfiler, a free open-source continuous profiling tool, covering Linux servers on multiple architectures (such as Graviton).

HOW TO SCALE YOUR ONCALL OPERATION, AND SURVIVE TO TELL, ANTON DRUKH

DevOpsDays Tel Aviv

“Being oncall sucks. But it doesn’t have to!” We all heard this one before. Why is it though, that oncall still remains the biggest scar for many? What can a modern Engineering org do to rein the oncall dragons, and actually help people grow as professionals as they go oncall? In this talk, I will present the main reasons why oncall is difficult in modern orgs, and describe ways to mitigate these hardships. The idea is that oncall is often the ‘backroom’ of an org, where all the technical and organizational debt take their toll. Be it unwieldy systems or broken processes between teams, oncall checks all the ‘weak boxes’. Therefore, the only way to win at oncall is to sort out your debts, starting with the organizational ones. I will dive into the detail of the oncall rotation at Snyk as the org scaled from 1 to 220 people, what worked well about it, and what was less than perfect. I will discuss the decisions made to turn oncall into a building block of the org, and show a path to rein oncall in your organization as well.

HOW TO OPTIMIZE NON-CODING TIME, ORI KEREN, LinearB

DevOpsDays Tel Aviv

Github Copilot and tools that help us code better are cool. But I’m lucky if I spend 90 minutes a day writing code. We really need to optimize the hours we spend reviewing code, updating tickets and tracing where our code is deployed. Learn how I save an hour a day streamlining non-coding tasks. This talk is unique because 99% of developer productivity tools and hacks are about coding faster, better, smarter. And yet the vast majority of our time is spent doing all of this other stuff. After I started focusing on optimizing the 10 hours I spend every day on non-coding tasks, I found I my productivity went up and my frustration at annoying stuff went way down. I cover how to save time by reducing cognitive load and by cutting menial, non-coding tasks that we have to perform 10-50 times every day. For example: Bug or hotfix comes through and you want to start working on it right away so you create a branch and start fixing. What you don’t do is create a Jira ticket but then later your boss/PM/CSM yells at your due to lack of visibility. I share how I automated ticket creation in Slack by correlating Github to Jira. You have 20 minutes until your next meeting and you open a pull request and start a review. But you get pulled away half way through and when you come back the next day you forgot everything and have to start over. Huge waste of time. I share an ML job I wrote that tells me how long the review will take so I can pick PRs that fit the amount of time I have. You build. You ship it. You own it. Great. But after I merge my code I never know where it actually is. Did the CI job fail? Is it release under feature flag? Did it just go GA to everyone? I share a bot I wrote that personally tells me where my code is in the pipeline after it leaves my hands so I can actually take full ownership without spending tons of time figuring out what code is in what release.

FLYING BLIND - ACCESSIBILITY IN MONITORING, FEU MOUREK, Icinga

DevOpsDays Tel Aviv

Do you know what it feels like to navigate as someone who can’t distinguish between green and red - looking at those badges that tell you whether something is broken or a-okay? I’ll give you a quick look into what it feels like with some examples from the monitoring tool Icinga Web 2. We all tend to forget, that not everyone sees the world like we do. In this talk I’ll be walking you through different views in Icinga Web 2 with side-by-side comparisons for the default views and how different kinds of vision impairments affect those. The talks also features a few suggestions on how to improve colour schemes and making websites and webapps better to navigate with screen readers!

(Ignite) WHAT'S BURNING THROUGH YOUR CLOUD BILL - GIL BAHAT, CIDER SECURITY

DevOpsDays Tel Aviv

Recent years have exposed startups to a major plague - cloud overspend. No vaccine appears to exist, plethora of tools and consultants fail to stop the bleeding. And yet, some companies manage to stay safe. What makes them different? Is it the tools? Is it the mindset? Is it developer training? In this session we will examine the cultural factors involved in sound and responsible financial management in the cloud. We will also look at relevant system design elements and product design elements which enable us to spend wisely while our business runs smoothly. Following this session, you should be better versed in cost-aware system design and some of the cultural and structural requirements to keeping your cloud bill low.

SLO DRIVEN DEVELOPMENT, ALON NATIV, Tomorrow.io

DevOpsDays Tel Aviv

In every development process there is the question, do we invest enough on quality? Do we need to invest more? Every team knows about the dilemma of how many tests is the right amount of tests we should write. Is 80% test coverage is good enough? Maybe 90%? 100%? Should we invest more time in unit testing? Are we wasting too much time on unit-testing? Should we invest time on a faster rollback mechanism? WIIFM “Without data, you’re just another person with an opinion” - W. Edwards Deming SLO Driven Development is a framework that helps the developers focus on impact and balance of every aspect of the dev process. When working currently with SLI, SLA, SLO and error budget you can learn where to invest in the development process. Let’s talk about the importance of good SLOs and how they can help us improve our day2day

ONBOARDING IN LOCKDOWN, HILA FOX, Augury

DevOpsDays Tel Aviv

In this talk, I will share do's and don'ts on how to onboard successfully in a remote or hybrid setup including moving to a leadership role, speaking from my own journey onboarding remotely in the midst of a global pandemic. I will share the tips that worked for me for successful onboarding, how I was able to be productive, impactful, and make a good impression on others. The key issues as an “onbordee” that I will talk about are how to create relationships, make yourself visible in the company, time management, and more. Since I started working in Augury over 100 new employees have joined the company. Each month I give a session that is part of their general onboarding process. This became a crucial step due to the fact that we are now a hybrid company and a lot of people are onboarding remotely or in a hybrid setup for the first time in their lives. I joined the company as a backend developer and a few months into my role, the squad leader position in my squad was up for grabs and I was fortunate enough to grab it :) This is my first official leadership role, which I also needed to onboard into in a hybrid setup. I will share the process that I built for myself on “How to lead”. Also, a word or two on the process we built as a squad on how we work in a hybrid setup, what are we optimizing for when we do meet and how to include new members of the team.

DON'T PANIC: GETTING YOUR INFRASTRUCTURE DRIFT UNDER CONTROL, ERAN BIBI, Firefly

DevOpsDays Tel Aviv

In your ever-changing Infrastructure, some changes are intentional while others are not. Drift is what happens whenever the real-world state of your infrastructure differs from the state defined in your configuration. This can happen for many reasons, sometimes it happens when adding or removing resources, other times when changing resource definitions upon resource termination or failure, and even when changes have been made manually or via other automation tools. While Terraform itself can detect drifts, in most cases, you will be informed about it too late: just before you are about to deploy new changes to your infrastructure. What’s interesting about Terraform though, is that you can apply changes in two separate and distinct steps of “Planning” and “Applying”. This means that you have full visibility of what Terraform is planning on doing beforehand, and if you are satisfied with the changes, you can choose to apply them. So how does this work? When something is changed intentionally, it will appear in the source code, and the Terraform plan will not do anything. However, if any part of the infrastructure has been changed manually, Terraform’s plan will identify this, and alert you to the change. In other words, if your IaC drifted from its expected state, then Terraform’s plan will, in fact, detect it. Applying this simple solution can empower DevOps and developer velocity, with the reassurance and context for unexpected changes in your IaC, in near real-time. This talk will showcase real-world examples, and practical ways to apply this in your production environments while doing so safely and at the pace of your engineering cycles.

More from DevOpsDays Tel Aviv (20)

YOUR OPEN SOURCE PROJECT IS LIKE A STARTUP, TREAT IT LIKE ONE, EYAR ZILBERMAN...

GRAPHQL TO THE RES(T)CUE, ELLA SHARAKANSKI, Salto

MICROSERVICES ABOVE THE CLOUD - DESIGNING THE INTERNATIONAL SPACE STATION FOR...

THE (IR)RATIONAL INCIDENT RESPONSE: HOW PSYCHOLOGICAL BIASES AFFECT INCIDENT ...

PRINCIPLES OF OBSERVABILITY // DANIEL MAHER, DataDog

NUDGE AND SLUDGE: DRIVING SECURITY WITH DESIGN // J. WOLFGANG GOERLICH, Duo S...

(Ignite) TAKE A HIKE: PREVENTING BATTERY CORROSION - LEAH VOGEL, CHEGG

BUILDING A DR PLAN FOR YOUR CLOUD INFRASTRUCTURE FROM THE GROUND UP, MOSHE BE...

THE THREE DISCIPLINES OF CI/CD SECURITY, DANIEL KRIVELEVICH, Cider Security

THE PLEASURES OF ON-PREM, TOMER GABEL

CONFIGURATION MANAGEMENT IN THE CLOUD NATIVE ERA, SHAHAR MINTZ, EggPack

SOLVING THE DEVOPS CRISIS, ONE PERSON AT A TIME, CHRISTINA BABITSKI, Develeap

OPTIMIZING PERFORMANCE USING CONTINUOUS PRODUCTION PROFILING ,YONATAN GOLDSCH...

HOW TO SCALE YOUR ONCALL OPERATION, AND SURVIVE TO TELL, ANTON DRUKH

HOW TO OPTIMIZE NON-CODING TIME, ORI KEREN, LinearB

FLYING BLIND - ACCESSIBILITY IN MONITORING, FEU MOUREK, Icinga

(Ignite) WHAT'S BURNING THROUGH YOUR CLOUD BILL - GIL BAHAT, CIDER SECURITY

SLO DRIVEN DEVELOPMENT, ALON NATIV, Tomorrow.io

ONBOARDING IN LOCKDOWN, HILA FOX, Augury

DON'T PANIC: GETTING YOUR INFRASTRUCTURE DRIFT UNDER CONTROL, ERAN BIBI, Firefly

Recently uploaded

Elizabeth Buie - Older adults: Are we really designing for our future selves?

Nexer Digital

Epistemic Interaction - tuning interfaces to provide information for AI support

Alan Dix

Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024 https://alandix.com/academic/papers/synergy2024-epistemic/ As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.

Enhancing Performance with Globus and the Science DMZ

Globus

Generative AI Deep Dive: Advancing from Proof of Concept to Production

Aggregage

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

91mobiles

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Sri Ambati

Securing your Kubernetes cluster_ a step-by-step guide to success !

KatiaHIMEUR1

Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster. However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks. In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.

UiPath Community Day Dubai: AI at Work..

UiPathCommunity

Welcome to the first live UiPath Community Day Dubai! Join us for this unique occasion to meet our local and global UiPath Community and leaders. You will get a full view of the MEA region's automation landscape and the AI Powered automation technology capabilities of UiPath. Also, hosted by our local partners Marc Ellis, you will enjoy a half-day packed with industry insights and automation peers networking. 📕 Curious on our agenda? Wait no more! 10:00 Welcome note - UiPath Community in Dubai Lovely Sinha, UiPath Community Chapter Leader, UiPath MVPx3, Hyper-automation Consultant, First Abu Dhabi Bank 10:20 A UiPath cross-region MEA overview Ashraf El Zarka, VP and Managing Director MEA, UiPath 10:35: Customer Success Journey Deepthi Deepak, Head of Intelligent Automation CoE, First Abu Dhabi Bank 11:15 The UiPath approach to GenAI with our three principles: improve accuracy, supercharge productivity, and automate more Boris Krumrey, Global VP, Automation Innovation, UiPath 12:15 To discover how Marc Ellis leverages tech-driven solutions in recruitment and managed services. Brendan Lingam, Director of Sales and Business Development, Marc Ellis

Pushing the limits of ePRTC: 100ns holdover for 100 days

Adtran

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Jen Stirrup

The Metaverse is popularized in science fiction, and now it is becoming closer to being a part of our daily lives through the use of social media and shopping companies. How can businesses survive in a world where Artificial Intelligence is becoming the present as well as the future of technology, and how does the Metaverse fit into business strategy when futurist ideas are developing into reality at accelerated rates? How do we do this when our data isn't up to scratch? How can we move towards success with our data so we are set up for the Metaverse when it arrives? How can you help your company evolve, adapt, and succeed using Artificial Intelligence and the Metaverse to stay ahead of the competition? What are the potential issues, complications, and benefits that these technologies could bring to us and our organizations? In this session, Jen Stirrup will explain how to start thinking about these technologies as an organisation.

Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...

SOFTTECHHUB

The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing. One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.

By Design, not by Accident - Agile Venture Bolzano 2024

Pierluigi Pugliese

A tale of scale & speed: How the US Navy is enabling software delivery from l...

sonjaschweigert1

Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved: - Reduction in onboarding time from 5 weeks to 1 day - Improved developer experience and productivity through actionable findings and reduction of false positives - Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO) Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production. We will cover: - How to remove silos in DevSecOps - How to build efficient development pipeline roles and component templates - How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence) - How to streamline operations with automated policy checks on container images

Quantum Computing: Current Landscape and the Future Role of APIs

Vlad Stirbu

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

UiPathCommunity

In questo evento online gratuito, organizzato dalla Community Italiana di UiPath, potrai esplorare le nuove funzionalità di Autopilot, il tool che integra l'Intelligenza Artificiale nei processi di sviluppo e utilizzo delle Automazioni. 📕 Vedremo insieme alcuni esempi dell'utilizzo di Autopilot in diversi tool della Suite UiPath: Autopilot per Studio Web Autopilot per Studio Autopilot per Apps Clipboard AI GenAI applicata alla Document Understanding 👨‍🏫👨‍💻 Speakers: Stefano Negro, UiPath MVPx3, RPA Tech Lead @ BSP Consultant Flavio Martinelli, UiPath MVP 2023, Technical Account Manager @UiPath Andrei Tasca, RPA Solutions Team Lead @NTT Data

Free Complete Python - A step towards Data Science

RinaMondal9

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

PCI PIN Basics Webinar from the Controlcase Team

ControlCase

Elevating Tactical DDD Patterns Through Object Calisthenics

Dorra BARTAGUIZ

After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!

zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs

Alex Pruden

This paper presents Reef, a system for generating publicly verifiable succinct non-interactive zero-knowledge proofs that a committed document matches or does not match a regular expression. We describe applications such as proving the strength of passwords, the provenance of email despite redactions, the validity of oblivious DNS queries, and the existence of mutations in DNA. Reef supports the Perl Compatible Regular Expression syntax, including wildcards, alternation, ranges, capture groups, Kleene star, negations, and lookarounds. Reef introduces a new type of automata, Skipping Alternating Finite Automata (SAFA), that skips irrelevant parts of a document when producing proofs without undermining soundness, and instantiates SAFA with a lookup argument. Our experimental evaluation confirms that Reef can generate proofs for documents with 32M characters; the proofs are small and cheap to verify (under a second). Paper: https://eprint.iacr.org/2023/1886

Recently uploaded (20)

Elizabeth Buie - Older adults: Are we really designing for our future selves?

Epistemic Interaction - tuning interfaces to provide information for AI support

Enhancing Performance with Globus and the Science DMZ

Generative AI Deep Dive: Advancing from Proof of Concept to Production

Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf

GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...

Securing your Kubernetes cluster_ a step-by-step guide to success !

UiPath Community Day Dubai: AI at Work..

Pushing the limits of ePRTC: 100ns holdover for 100 days

The Metaverse and AI: how can decision-makers harness the Metaverse for their...

Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...

By Design, not by Accident - Agile Venture Bolzano 2024

A tale of scale & speed: How the US Navy is enabling software delivery from l...

Quantum Computing: Current Landscape and the Future Role of APIs

Le nuove frontiere dell'AI nell'RPA con UiPath Autopilot™

Free Complete Python - A step towards Data Science

Essentials of Automations: The Art of Triggers and Actions in FME

PCI PIN Basics Webinar from the Controlcase Team

Elevating Tactical DDD Patterns Through Object Calisthenics

zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs

Free Your SSLF and the Resty Will Follow - Dana Borinski & Eli Zilbershtein

1. Free YourSSLf And The Resty Will Follow Dana Borinski & Eli Zilbershtein

2. 95% Devices with AppsFlyer’s SDK 90B+ Events/Day AppsFlyer in Numbers 10K+ Servers “AppsFlyer is the world's leading mobile attribution & marketing analytics platform, helping app marketers around the world make better decisions.”

3. OneLink Overview Deep Linking Deferred Deep Linking New users are sent to the right app store ﬁrst. App Installed App Not Installed

4. Why Branded Links? Strong Branding

5. Why Branded Links? Strong Branding https://mybooks.onelink.me/PCcG/2492c568

6. Why Branded Links? Strong Branding https://mybooks.onelink.me/PCcG/2492c568

7. Why Branded Links? Strong Branding https://mybooks.onelink.me/PCcG/2492c568

8. Why Branded Links? Strong Branding https://click.mybooks.com/PCcG/2492c568 https://mybooks.onelink.me/PCcG/2492c568

9. Why Branded Links? Email Campaigns

10. Why Branded Links? Email Campaigns Branded Link =

11. Why Branded Links? Email Campaigns Non Branded Link =

12. Why Branded Links? Email Campaigns Non Branded Link =

13. Why HTTPS? Why HTTPS?

14. Why HTTPS? Trust & Security

15. Why HTTPS? Trust & Security Privacy

16. Why HTTPS? Trust & Security Privacy Search Ranking

17. Why HTTPS? Trust & Security Privacy Search Ranking Deep Links

18. OneLink Overview Deep Linking Deferred Deep Linking New users are sent to the right app store ﬁrst. App Installed App Not Installed

19. 1. Enrollment 2. Validation 3. Deployment 4. Monitoring 5. Renewal SSL Certiﬁcate Lifecycle 10K customers

20. 1. Operation 2. Human intervention 3. Customer support 4. Non technical customers 5. Bureaucracy Clearly this does not scale

21. What is Let’s encrypt?

22. This DOES Scale!

23. The GlassGate

24. OneLink Clicks System Clicks System S3 redis kafka ELB aerospike

25. The GlassGate

26. Naive Implementation Clicks System S3 redis kafka GlassGate ELB aerospike

27. Basic Implementation (still naive) Clicks System Internal ELB S3 redis kafka aerospike GlassGate ELB

28. GlassGateGlassGate Redundancy (still naive) Clicks System Internal ELB S3 redis kafka aerospike GlassGate NLB ELB

29. GlassGateGlassGate Certiﬁcates storage Clicks System Internal ELB S3 redis kafka GlassGate NLB ELB redis aerospike

30. GlassGateGlassGate System Scaling (not naive) Clicks System Internal ELB S3 redis kafka GlassGate NLB ELB redis aerospike

31. GlassGateGlassGate DNS GlassGate NLB ELB redis mybooks.com mybooks.brandedlinks.com *.brandedlinks.com

32.

33. What about visibility?

34.

35. All Good Right?

36. Almost...

37. GlassGateGlassGate Evil robot (or bad conﬁguration) Clicks System Internal ELB S3 redis kafka GlassGate NLB ELB redis aerospike

38. GlassGateGlassGate Evil robot (or bad conﬁguration) Clicks System Internal ELB S3 redis kafka GlassGate NLB ELB redis aerospike

39. ● Domain verification. ● Non valid domains caching. ● Central certificates storage. ● Certificates pre warm. ● Let’s Encrypt Staging Environment. Lesson Learned

40. Thank you eli.zilbershtein@appsﬂyer.com dana.borinski@appsﬂyer.com

41. ● https://github.com/GUI/lua-resty-auto-ssl ● https://hub.docker.com/r/openresty/openresty/ ● https://letsencrypt.org/docs/rate-limits/ ● https://letsencrypt.org/docs/staging-environment/ Resources

42. ● 85,167,054 SSL certificates on the entire internet (Source: BuiltWith) ● 84.2% of pages loaded in Chrome, on all platforms, are over HTTPS (Source: Google’s Transparency Report) ● 70.8% of the unencrypted user traffic to Google comes from mobile devices. SSL usage

Free Your SSLF and the Resty Will Follow - Dana Borinski & Eli Zilbershtein

Recommended

Recommended

More Related Content

Similar to Free Your SSLF and the Resty Will Follow - Dana Borinski & Eli Zilbershtein

Similar to Free Your SSLF and the Resty Will Follow - Dana Borinski & Eli Zilbershtein (20)

More from DevOpsDays Tel Aviv

More from DevOpsDays Tel Aviv (20)

Recently uploaded

Recently uploaded (20)

Free Your SSLF and the Resty Will Follow - Dana Borinski & Eli Zilbershtein