CloudCast: Navigating NIS2, DevOps Monitoring, and Architecture Trends

Hey tech fans!?

I'm Roman, a Cloud Architect and co-founder of Gart Solutions. Welcome to this week's edition of CloudCast. I've curated some insightful articles on DevOps, cloud architecture, and more.?

Whether you're interested in high-performance systems, considering Kubernetes , navigating NIS2 compliance, or simply enjoy reading about tech innovations — there's something here for everyone.?

So, grab your favorite drink, get comfortable, and dive into this week's top reads!?

Kubernetes Introduces Feature Gate in client-go

Kubernetes has introduced Feature Gates in the client-go library. Feature Gates are key=value pairs that describe Kubernetes features, allowing you to enable or disable them with the --feature-gates flag for each Kubernetes component. With the latest update in Kubernetes v1.30, developers and administrators can now toggle features at the process level without creating new binaries, making feature implementation more straightforward and secure.

Learn more about Feature Gates in Kubernetes: Feature Gates in client-go

SLUBStick: A New Kernel Cross-Cache Attack on Linux

Researchers from Graz University of Technology have unveiled SLUBStick, a new attack on the Linux kernel’s cross-cache that enables arbitrary memory read and write access. This exploit can be used by attackers to escalate privileges or escape container boundaries. SLUBStick targets vulnerabilities such as double-free, use-after-free, and out-of-bounds writes on both 32-bit and 64-bit systems, with a success rate of up to 99% in tests conducted on Linux kernels 5.9 and 6.2.

Dive deeper into the SLUBStick attack:

• Research Paper
• GitHub Repository

AWS’s Sheen Brisals on Serverless Architecture Strategy

Sheen Brisals from AWS shares his extensive experience working with serverless architecture. He emphasizes the "Set Piece Strategy," a design approach he advocates for when crafting serverless architectures. This strategy focuses on creating modular, repeatable patterns that ensure scalability and resilience.

Explore Sheen Brisals' insights on serverless architecture: Set Piece Strategy for Serverless Architecture

Shopify’s Monolithic Architecture: a Challenge to the Microservices Trend??

Shopify, the world’s largest eCommerce platform, continues to defy expectations with its robust monolithic architecture. On Black Friday, Shopify's monolith handled an impressive 1.27 million requests per second, challenging the common belief that monoliths can’t scale efficiently.?

Despite the industry-wide shift towards microservices, Shopify's success demonstrates that with the right engineering practices, even a monolith can deliver exceptional performance and scalability.?

Read more about their Monolith Infrastructure: https://shopify.engineering/shopify-monolith ? ?

As a Cloud Architect, I fully acknowledge the advantages of microservices — flexibility, resilience, and independent scalability are unmatched. However, Shopify's approach serves as a reminder that monoliths are not obsolete. For organizations with a well-structured codebase and disciplined development practices, monoliths can offer simplicity and reduced overhead in managing complex distributed systems. The key is choosing what aligns with your organization’s specific needs and long-term goals. For many, expanding to microservices will be the right decision, but it's important to assess each case individually.?

Consider an IT Infrastructure Audit determine the best approach for your organization. ?

You can check out the structure of the audits here .?

DevOps Monitoring: The Backbone of Efficient Operations?

Effective monitoring in DevOps is about more than just keeping an eye on your infrastructure — it's about gaining insights that drive proactive decision-making. In our latest article, we explore the different types of monitoring, best practices, and tools that can help you maintain operational excellence.?

Read more about DevOps monitoring ?

?

Navigating the Complexity of Kubernetes Migration?

Migrating to Kubernetes is a significant step toward modernizing your infrastructure, but it comes with its own set of challenges. In this article, we break down the complexities of Kubernetes migration and offer practical advice for a smooth transition.?

Why migrate to Kubernetes? What are the challenges? What strategies can lead to success?? ?

Explore the full Kubernetes migration guide ?

As a Cloud Architect, I recognize Kubernetes as a powerful tool in any cloud architect’s arsenal, but it's not a one-size-fits-all solution. ?

Successful migration requires not only technical expertise but also a clear understanding of your current infrastructure, application architecture, and most importantly, your business goals. While Kubernetes offers scalability, resilience, and operational efficiency, it's crucial to approach migration with a well-thought-out plan to avoid pitfalls like misconfiguration and underestimating the complexity of managing stateful applications.?

?60 Days Until NIS2 Directive Takes Effect?

The NIS2 (Network and Information Security) Directive is a critical piece of legislation impacting cloud architecture and DevOps practices, particularly in Europe. With stricter cybersecurity requirements, organizations must ensure their infrastructure is robust and compliant. The directive emphasizes the need for a secure, resilient architecture that can withstand cyber threats, making the integration of DevSecOps and other security-focused practices more important than ever.?

If you're wondering how to prepare for the NIS2 compliance update before October 17, 2024, book a call with me now.?

For now, here's our NIS2 Compliance Checklist (Free PDF): A Comprehensive Guide to Audit that will help you assess your current state. ?

Download the NIS2 Compliance Checklist ?

I hope you found this week's digest insightful. ?

Stay tuned for more tips, trends, and best practices in the world of cloud architecture and DevOps .?

Roman Burdiuzha ?

Cloud Architect?

Co-Founder & CTO at Gart Solutions ?

?

?

?

?