Intro
Ameya Shenoy
@codingcoffee
Note: Feel free to heckle. Interupt me. Ask questions in the middle, makes this fun, I like it. Or you can wait till the end, but interactive is good
St. Francis Institue of Technology
EXTC | e-Yantra | RoboCon
Note: Open Source Framework to build applications Think of Frappe as an alternative to Flask, Django, but with all the batteries built in ERPNext - arguably the open source CRM. Some well known users would be Zerodha, Internet Freedom Foundation --- -
Python
for the backend -
VueJS
for the fronetend -
MariaDB
as SQL database -
Redis
with
Socket.IO
for PubSub and data caching --- - Automated installation using
Ansible
- Implemented pixel tracking for outbound emails - Release and Deploy Manager Note: Traditional Servers Some other framework specific things which I did there --- Mothly Sprints | Ad-hoc
Browser
Stack
---
Collectd
|
InfluxDB
|
Grafana
Note: Collectd - small daemon which runs on servers to collect system metrics Influx - time series database Grafana - Make awesome looking charts out of it Data driven decisions ---
Nagios
Smokeping
Note: Nagios - SLA, Uptime, Alerts, DNS checks, HTTP checks, SSH, Load, System memory Smokeping - Traceroute TTL, since servers in DC, latency is important RCAs ---
Cloudflare
Note: Main reason was for DDoS, sidebenefit CDN ---
Hashicorp Vault
Note: Password Storage Cross team password sharing not allowed Multiple applications using the same password Password rotation on employee leaving mandated by GDPR / SoC2 Lock state ---
Jenkins
Note: CI, CD, Testing, Asset Compilation, Parallelize, Deploy Every job is run inside a container ---
OpenVPN
Note: Access data securely, save up on IPAddresses, Security ---
Disaster Recovery
Note: Important but not Urgent SoC2 compliance mandates backups Data backups are only good if you've tested them ---
Kubernetes
Note: This is an entire talk in itself Brainchild of Google - Borg - evolved to Kubernetes FreeBSD Jails, User namespaces, LXC, LXD, Docker, Containerd, Reproducibility, Isolation Control Theory, Control Loop Meachnism, Current State, Desired State K8s - Self healing properties, A/B testing, no downtime deploys ---
AWS
Note: EC2, S3, RDS, Cloudfront, Cloudwatch, EKS, NAT Gateways, Elastic Cache, SES, Billing ---
Email Centralization
Note: Phising attacks: Spoof emails sent on our behalf DMARC - Domain-based Message Authentication, Reporting and Conformance SPF - Sender Policy Framework DKIM - DomainKeys Identified Mail --- Quarterly Sprints | Daily Standups
Corporate | Confluence Note: - teams - company; helps us; helps other teams - allocate time; buffer - standup - yesterday, today, blockers
Cloud
Sim
Demo
Note: May the demo gods be with me!
Interests
Thanks for listening!
codingcoffee/slides
Ameya Shenoy