Issue 43, 25.7.2019
How to write great container images
Article shows the principles of what writes consider "Dockerfile best practices", and simultaneously walks through them with a real example. I would add that use small base image like Alpine Linux if possible.
The article describes breaking up frontend monoliths into many smaller, more manageable pieces, and how this architecture can increase the effectiveness and efficiency of teams working on frontend code. As well as talking about the various benefits and costs, it covers some of the implementation options that are available, and dives deep into a full example application that demonstrates the technique.
Performance Analysis Methodology
Informative presentation of Performance Analysis Methodology by Brendan Gregg at LISA '12. Focus on the USE method which all staff can use for identifying common bottlenecks and errors. Check for: Utilization, Saturation, Errors. (from walokra)
Fast log management for your apps
You've migrated your application to Reactive Microservices to get the last ounce of performance from your servers. But what about logs? Logs can be one of the few roadblocks on the road to ultimate performance. Nicolas Frankel shows in his talk at Berlin Buzzwords 2019 some insider tips and tricks taken from our experience put you on the track toward fast(er) log management.
Node.js Memory Management in Container Environments
Nginx Admin's Handbook
nginx is a powerful web server but with great power comes great responsibility (to configure it for security and performance). "Nginx Admin's Handbook" is a good collection of rules, helpers, notes and papers, best practices and recommendations to achieve it. (from walokra)
GOTCHA: Taking phishing to a whole new level
Without X-FRAME-OPTIONS you can build a UI redressing attack that allows attackers to extract valuable information from API endpoints. tl; dr; extract chars with CSS, add captcha form, scramble chars, get user to fill in the password-captcha.
Staying Safe on GitHub: The Ultimate GitHub Security Tools Roundup
Nice overview to #security tools for #GitHub repositories. GitHub Security Alerts is provided by default, additionally use one of these: Snyk, WhiteSource Bolt, Sonatype DepShield. (from walokra)
It's Summer and there's plenty of Natural Parks in Finland. Go and create your Summer adventure in the wilderness. From Southern Archipelago to Northern Fells: Pallas-Yllästunturi, UKK, Pyhä-Luosto, Koli, Nuuksio.