Redefining cloud native debugging

Oct 7, 20210 likes137 views

This document discusses the challenges of debugging cloud native applications and proposes live debugging as a solution. It notes that traditional debugging methods like command line debugging, local debugging, logging and tracing, and remote debugging have limitations for dynamic cloud environments. Live debugging allows reproducing bugs by creating the original application state and collecting high-fidelity data without performance impacts or needing to know server details. The document introduces Rookout as a platform that enables non-breaking breakpoints to collect live data with no extra coding or redeploys.

Redefining Cloud Native
Debugging
Or
“Never wait for the next
deployment”
Noa Goldman

Who Am I?
• Product Manager at Rookout
• Making products simple
2

Cloud native apps adoption is exploding
Adoption of Microservices, Containers, Dynamic Orchestration, and DevOps Technologies
“By 2024 production-grade
cloud-native apps will
expand to 70% from 10% of
all apps in 2020”
IDC 2021
2020 2024
All
Apps
Production - grade
cloud native App
4

Debugging in this day and age
Command line
debugging
Local
debugging
Logging and
tracing
Remote
debugging
Deploy to
production
blindly
6

Command line debugging - it’s great but...
• Limited amount of commands
• Output is not always clear
• Complicated to use
• Requires more investigation
7

Local debugging - it’s also great but...

• Production configurations
• Application’s state
• Production’s bugs
8

Logging and tracing - it’s still great but...
• Time consuming
• Can you predict your bugs?
• Do you really log every line of code?
• Performance and storage cost
• Maintenance maintenance maintenance
9

Remote debugging - again, great but...
• Stopping the app
• Need to know the server intimately
• Impossible in cloud (many servers)
• Security
10

Deploy to production blindly
Well....
11

Challenges in cloud debugging
• Giving up the control
• High complexity architecture
• Dynamic environment changes
• Access
12

Solutions -
APM tools
• Low fidelity data
• Significant learning curve
• Multiple tools to monitor various
aspects of the application
• Consumes more resources, and
drives up costs
13

Solutions -
Exception catching
14
• Another tool
• Bugs often do not come from
exceptions
• Can act differently in various
environments
• Not all data is available
(requires deeper investigation)

Solutions -
Live debugger
15
• Creating the original state of the
application.
• The code behaves exactly as it
does in production.
• Reproducing bugs
• high-fidelity data wherever your
code is running, even in the cloud
• No performance impact
• Non breaking breakpoint

What is Rookout
• Rookout is a platform for live-data collection
and debugging
• Rookout’s non-breaking breakpoints let you
collect any type of data on the fly with no
extra coding, redeployments, or restarts
16

of organizations
experience ‘flying
blind or flying slow’
17
68%
DEJ Report

Contact
rookout.com
noa.goldman@rookout.com

The document discusses Cloud Development Kit (CDK) as the next big thing for infrastructure as code (IaC). It provides an overview of IaC and some of its challenges around misconfiguration and security. The introduction of CDK aims to address these challenges by allowing IaC to be implemented as a programming language, inheriting strengths like object-oriented programming and better testing capabilities. Examples are shown for CDK on AWS, Terraform, and Kubernetes to demonstrate how infrastructure can be defined and provisioned code. The document concludes with a proposed practice of using CDK to define cloud infrastructure for a micro-services system from business applications.

DevOps to DevSecOps Journey..Siddharth Joshi

Connect Ops and Security with Flexible Web App and API ProtectionDevOps.com

Organizations continue to adopt container orchestration to drive efficiencies in their CI/CD pipelines. Given the current business climate with more employees working from home and consumers transacting more online, how can development and operations teams release at increasing velocity with protection baked in? Connecting operations and security teams have not always been a smooth process: developers and operations staff are charged with site reliability, availability, and uptime while security staff is held responsible for securing an organization’s always-moving perimeter and valuable web layer assets. But the lines have started to blur between DevOps teams and security: you can’t guarantee uptime without baking effective application security tooling into your processes and infrastructure configurations. A true next-generation, holistic web application and API protection platform does just that: operations teams can integrate security into their workflows and ensure new infrastructure and app code released to production is both effective and secure. Join application security experts Aneel Dadani and Orlando Barerra II from Signal Sciences to learn how your team can deploy at scale safely while gaining layer 7 visibility in production environments. Attendees will learn: How to inspect web traffic in containers, at the API gateway, or the ingress How DevOps teams can scale their application footprint to meet demand while securing your codebase in production How development teams can gain visibility into how their apps and APIs are being used in production and what vulnerabilities may exist that they overlooked Demo these application security concepts with Ansible, a simple yet powerful IT automation engine that companies use to accelerate DevOps initiatives, including baking application security into their infrastructure.

Shifting security left simplifying security for k8s open shift environmentsLibbySchulze

This document discusses securing secrets in Kubernetes. It describes how attackers were able to hijack cloud resources by accessing unprotected credentials stored in a Kubernetes console. It then provides recommendations for securely managing secrets, including using Conjur to establish identity for applications and enforce authorization. It outlines best practices like regularly rotating secrets and removing hard-coded credentials. The document also describes how Conjur can integrate with Kubernetes to verify application identities and issue credentials without exposing secrets.

Addressing the 8 Key Pain Points of Kubernetes Cluster ManagementEnterprise Management Associates

The document discusses the key challenges of managing multiple Kubernetes clusters across hybrid multi-cloud environments, including the need for unified operations management, visibility, compliance, policy management, application management, cost efficiencies, collaboration, and self-service capabilities. It introduces Red Hat Advanced Cluster Management as a solution that addresses these challenges through robust multi-cluster lifecycle management, policy-driven governance and compliance, and advanced application lifecycle management.

Enterprise DevOps Series: Using VS Code & ZoweDevOps.com

Imagine onboarding a next-generation developer with no mainframe experience who successfully debugs COBOL code on their first day. By equipping them with mainframe-specific extensions to common tools like Visual Studio Code combined with the Zowe framework, new talent can be productive immediately - all without disrupting colleagues using traditional tools. Join this session to learn how mainframe application development is merging with enterprise IT toolchains and processes, including CI/CD pipelines. The presentation will include a demonstration of a mainframe developer cockpit designed for productivity and ready for shift-left automation. Make “Day 1 Debug” a reality.

Infrastructure as Code principles and practicesOpenSense Labs

PKI in DevOps: How to Deploy Certificate Automation within CI/CDDevOps.com

DevOps and CI/CD make for faster code releases, but they also create new challenges for security practices. Think about TLS and code-signing certificates. Almost every component in CI/CD – binaries, builds, web servers and containers – needs certificates to authenticate and verify trust, but traditional PKI processes just can't scale in DevOps environments. Join Keyfactor and Infinite Ranges to learn how PKI and certificate management fits within the CI/CD pipeline and why an integrated and automated approach is key to success. In this webinar, we'll discuss: How applications in the DevOps toolchain use PKI (i.e. Jenkins, Kubernetes, Istio, etc.) The risks of unmanaged or untracked certificates in DevOps environments Best practices to support visibility, compliance and automation of certificates in CI/CD

Your own kubernetes castleLibbySchulze

The document discusses various open source tools that can be used to build production-ready Kubernetes clusters, including tools for observability, automation, continuous integration, ingress, security, backup/restore, and policy enforcement. It analyzes the advantages and disadvantages of popular options for logs/metrics collection, GitOps, service meshes, ingress controllers, identity management, and backups. Key criteria for tool selection are that they are open source, tested/proven in projects, and have an active community.

Open source cloud native security with threat mapperLibbySchulze

ThreatMapper is an open source security observability platform that helps users secure their cloud native applications from development through production. It discovers an application's topology and attack surface, scans for vulnerabilities, and provides indicators of attacks. ThreatMapper is currently focused on mapping the attack surface, but future versions will incorporate additional features like gathering attack intelligence and providing indicators of compromise. It is part of Deepfence's overall strategy to help users "Shift Left" to build security into development and also "Secure Right" once applications are in production.

Enforce compliance policy with model-driven automationPuppet

This document discusses model-driven automation for enforcing compliance. It begins with an overview of compliance benchmarks and the CIS benchmarks. It then discusses implementing benchmarks, common challenges around configuration drift and lack of visibility, and how to define compliance policy as code. The key points are that automation is essential for compliance at scale; a model-driven approach defines how a system should be configured and uses desired-state enforcement to keep systems compliant; and defining compliance policy as code, managing it with source control, and automating it with CI/CD helps achieve continuous compliance.

Enable DevSecOps using JIRA SoftwareAUGNYC

In this session you will learn how BNY Mellon is tackling the challenges of DevSecOps at scale by unifying static/dynamic source code scanning, audit and risk analysis tools into a unified workflow by utilizing JIRA. BNY Mellon’s ability to generate reports from multiple sources had become a time consuming manual process. JIRA, having demonstrated the ability to deliver efficiency at reporting, was an ideal solution for tracking the security aspects of the SDLC process.

Webinar: How and Why to Containerize Your Legacy ApplicationsStorage Switzerland

Listen as experts from Storage Switzerland and HyperGrid discuss new alternatives to bi-modal IT that allow organizations to containerize legacy applications to create a completely agile data center. In this on demand webinar you will learn: * What are Containers * Why Should You Containerize Legacy Apps * What are the Challenges of Moving Legacy Apps To Containers * How to Overcome Container Challenges

Next Generation Vulnerability Assessment Using Datadog and SnykDevOps.com

Vulnerability assessment for teams can often be overwhelming. The dependency graph could be thousands of packages depending on the application. Triaging vulnerability data and prioritizing actions has historically been a very manual process, until now. With Datadog and Snyk, learn how to trace security and performance issues by leveraging continuous profiling capabilities for actionable insight that help developers remediate problems. Join us on Thursday, January 21 for a unique opportunity to learn more about continuous profiling, vulnerability management, and the benefit to customers from using both of these products. In this webinar, you will: Bust some myths around continuous profiling and learn how Datadog differentiates itself See decorated traces in action for sample Java applications and understand how Snyk + Datadog reduce time to triage supply chain vulnerabilities Learn roadmap information for upcoming public announcements from both partners

DevOps Spain 2019. Beatriz Martínez-IBMatSistemas

This document provides an overview of cloud native monitoring with Prometheus. It discusses Prometheus and how it has become the standard for metrics-based monitoring. It covers monitoring systems and applications with Prometheus, including scraping metrics, querying, and instrumenting applications to expose metrics. It also discusses alerting with Alertmanager and scaling Prometheus through federation and projects like Thanos. The document aims to explain how Prometheus enables observability of systems in cloud native environments and the growing ecosystem around Prometheus.

App sec in the time of docker containersAkash Mahajan

Oracle Cloud With Azure DevOps PipelinesJohan Louwers

Oracle Cloud DevOps with Azure Pipelines allows connecting Azure Pipelines to Oracle Cloud Infrastructure (OCI) APIs and deployed components through the use of self-hosted Azure agents running within OCI. This enables full pipeline execution within OCI while leveraging tools like Terraform for infrastructure provisioning and cx_Oracle for working with Oracle databases. Ensuring agents have direct connectivity and aiming for a software-defined automated strategy is recommended over cross-cloud connections.

Lo Scenario Cloud-Native (Pivotal Cloud-Native Workshop: Milan)VMware Tanzu

This document discusses cloud-native application development. It describes how DevOps practices like continuous delivery and microservices allow for faster, higher quality software development. It introduces a cloud native maturity model and discusses how a platform with the right abstractions can help organizations adopt cloud native patterns. The document outlines Pivotal's platform capabilities and services and how they can help organizations transform applications to be cloud native and achieve outcomes like speed, stability, scalability and security. Real-world examples of organizations adopting cloud native practices are also provided.

[muCon2017]DevSecOps: How to Continuously Integrate Security into DevOpsDaniel Oh

This document discusses DevSecOps, which is about continuously integrating security into DevOps processes and tools. It describes how development and operations teams traditionally view security, and why DevSecOps is important given trends like cloud computing, microservices, and open source software usage. The document then outlines ways to secure assets, development, operations, and APIs using open source tools as part of a DevSecOps approach. These include securing container registries and images, integrating security testing into builds, and using monitoring and logging tools to detect issues.

Eseguire Applicazioni Cloud-Native con Pivotal Cloud Foundry su Google Cloud ...VMware Tanzu

The Future of Security and Productivity in Our Newly Remote WorldDevOps.com

Andy has made mistakes. He's seen even more. And in this talk he details the best and the worst of the container and Kubernetes security problems he's experienced, exploited, and remediated. This talk details low level exploitable issues with container and Kubernetes deployments. We focus on lessons learned, and show attendees how to ensure that they do not fall victim to avoidable attacks. See how to bypass security controls and exploit insecure defaults in this technical appraisal of the container and cluster security landscape.

Spring Tools 4: Bootiful Spring Tooling for the MassesVMware Tanzu

Scania: A DevOps Journey in an Automotive Enterprise Perforce

DevOps is a software development methodology that emphasizes communication, collaboration, integration and automation. The DevOps movement at Scania is yet in its early stages, but from the very beginning, the Development and Operations teams have been working in close collaboration. I’ll present key takeaways on how best to proceed with implementing a DevOps culture within a large globally dispersed IT department.

Security in CI/CD Pipelines: Tips for DevOps EngineersDevOps.com

While DevOps is becoming a new norm for most of the companies, security is typically still behind. The new architectures create a number of new process considerations and technical issues. In this practical talk, we will present an overview of the practical issues that go into making security a part of DevOps processes. Will cover incorporating security into existing CI/CD pipelines and tools DevOps professionals need to know to implement the automation and adhere to secure coding practices. Join Stepan Ilyin, Chief Product Officer at Wallarm for an engaging conversation where you’ll learn: Methodologies and tooling for dynamic and static security testing Composite and OSS license analysis benefits Secrets and analysis and secrets management approaches in distributed applications Security automation and integration in CI/CD Apps, APIs and workloads protection in cloud-native K8s enabled environments

Using Google Cloud Services with Spring Boot and Pivotal Cloud Foundry (Pivot...VMware Tanzu

DevSecOps Basics with Azure Pipelines Abdul_Mujeeb

This document discusses DevSecOps, which integrates security practices into DevOps workflows to securely develop software through continuous integration and delivery. It outlines the basic DevOps process using Azure Pipelines for CI/CD and defines DevSecOps. The document then discusses challenges with security, benefits of DevSecOps for businesses, and common tools used, before concluding with an example DevSecOps demo using Azure Pipelines with security scans at various stages.

Webinar: Introduction to CloudBees Jenkins PlatformKiratech

Kiratech is an Italian company that guides companies in choosing the best DevOps methodologies such as DevOps, automation, containers, CI/CD, cloud infrastructure, and security. They are hiring for a DevOps Engineer position and their CTO, Marco Bizzantino, will be speaking at several upcoming conferences and workshops on Docker. CloudBees offers the CloudBees Jenkins Enterprise platform for managing Jenkins installations, which provides features like fault tolerance, elastic agents, security, and support.

Patterns and Pains of Migrating Legacy Applications to KubernetesJosef Adersberger

Running applications on Kubernetes can provide a lot of benefits: more dev speed, lower ops costs, and a higher elasticity & resiliency in production. Kubernetes is the place to be for cloud native apps. But what to do if you’ve no shiny new cloud native apps but a whole bunch of JEE legacy systems? No chance to leverage the advantages of Kubernetes? Yes you can! We’re facing the challenge of migrating hundreds of JEE legacy applications of a German blue chip company onto a Kubernetes cluster within one year. The talk will be about the lessons we've learned - the best practices and pitfalls we've discovered along our way.

Legacy On Premise Apps Got You Down? No Problem - DevOps for AllMuly Gottlieb

With all the buzz about DevOps we tend to believe that everyone is doing it when in fact most companies are not because it’s hard to do in a legacy world. And according to IDC –the vast majority of enterprise apps are on-premise. And even in 2018, only 27.8% of the worldwide enterprise applications market are expected to be SaaS-based compared to 16.6% of the market in 2013. During this talk I will point out the difficulties on achieving DevOps Zen for On-Premise applications, and the way that those in the silent majority can get out off the bench and into the DevOps game.

PureApplication: Devops and UrbancodeJohn Hawkins

This document discusses how Zurich Insurance was able to deliver DevOps style production values and double performance of their Risk Management Platform using PureApplication and UrbanCode Deploy. PureApplication allowed them to create reusable patterns for deploying the solution components. UrbanCode Deploy provided automated deployment of the patterns and management of the environments. Together, PureApplication and UrbanCode Deploy provided a synergetic solution that rapidly and consistently deployed the overall Risk Management Platform, reducing downtime and speeding up computation times.

More Related Content

What's hot (20)