All blog posts

Page 31

Deliberate practice in information security

Sandra Escandor-O’Keefe

Deliberate practice is the act of performing a set of tasks that are just slightly more difficult than what you’re used to, so you can get better at a specific activity and move from a novice to an experienced practitioner. In this post, Security Engineer Sandra Escandor-O’Keefe walks us through the art of deliberate practice, offering tips for novices and mentors alike.

Security
Engineering

Getting more out of IO with image transformation classes

Dom Fee

We’ve worked to ensure the Fastly Image Optimizer is simple, easy to use, and most importantly fully integrated into the platform. In an effort to give you even more control, we've developed image transformation classes to help streamline, secure, and support your image delivery workflow.

Product
Performance

Updates to the Fastly control panel

Jessica Allen, Brian Santiago

We’ve recently had the opportunity to turn customer feedback into new features for the Fastly control panel. Hear from our lead product designers on the latest changes, including an all services homepage, easier way to customize your VCL, and more.

Product
Customers

Reddit on building & scaling r/place

Anna MacLachlan

Altitude SF 2017 brought together technical leaders from Reddit, the ACLU, TED, Slack, and more to explore the future of edge delivery, emerging web trends, and the challenges of cloud infrastructure and security. In this post, we’ll share Daniel Ellis’ talk on how Reddit built and scaled r/place, their real-time April Fools’ project.

Events

The problem with patching in addressing IoT vulnerabilities

Jose Nazario, PhD

We need technology to provide capabilities to tackle the challenge of the cybersecurity gaps, recently highlighted by the WannaCry attacks. In this post, Director of Security Research Jose Nazario will explore these challenges as well as share research objectives that industry and academia must address soon before we can begin solving the security issues with IoT.

Security

Getting the most out of Vary with Fastly

Andrew Betts

You can use the `Vary` response header in creative ways, including A/B testing and internationalization. At the same time, many people still use `Vary` badly or misunderstand what it does; in this post, we’ll provide an expanded guide, including some of the more exotic ways you can get value out of `Vary` in intermediate caches like Fastly.

Performance

Failing fast & fixing faster at Vogue

Anna MacLachlan

A tale of failure and recovery from Kenton Jacobsen, Director of Engineering at Vogue.com and Glamour.com.

Events

Multi-DRM & Content Preconditioning for OTT Providers | Fastly

Ashok Lalwani, Marcus Sarmento

In an ongoing effort to help you provide the best streaming experiences for your end users, we’re excited to announce two new features to our OTFP service. Multi-DRM support and content preconditioning enable over the top (OTT) video service providers to protect and efficiently monetize premium video content.

Streaming
Product

Building Edge: 40 POPs, 15 Tbps Capacity | Fastly

Tom Daly

We’re pleased to announce that we’ve added a collection of new POPs to the Fastly global network. Since our last update, we’ve deployed additional US POPs in Chicago, Newark, Ashburn, and Los Angeles, plus a brand-new location in Rio de Janeiro, Brazil. Fastly’s global network now exceeds 15 Tbps of connected internet capacity, and we will continue to scale alongside our rapidly growing customer base.

Performance
+ 4 more

Introducing batch API for surrogate key purge

Tatsuhiko Miyagawa

Surrogate keys give Fastly customers a unique way to efficiently purge content from cache — batch API for surrogate key purge allows you to purge content even more efficiently by purging multiple surrogate keys at once. Read on to learn how to best take advantage.

Performance

Technical trainings & the future of edge delivery at Altitude

Anna MacLachlan

Altitude SF 2017 featured hands-on trainings and talks from industry leaders like Reddit, the ACLU, Slack, TED, and more. We explored the future of edge delivery, heard about emerging trends in cloud infrastructure and DevOps, and tackled complex problems in cloud security. Read on for our recap of the event (plus slides, videos, and photos).

Customers
+ 2 more

Migrating MySQL Stats to Bigtable with no downtime | Fastly

Toru Maesaka

In an effort to move forward from early architecture that we were quickly outgrowing, we recently migrated our Historical Stats database from self-managed MySQL to Google Cloud Bigtable. Read on to learn how we did it (without any downtime).

Engineering
Compute

HashiCorp on recovering from failures

Anna MacLachlan

Altitude NYC featured war stories from Fastly customers like Vogue, Spotify, and HashiCorp. Read on for our recap of Seth Vargo’s talk, where he discussed how HashiCorp was able to quickly recover from an outage (which included an alarming “purge all” moment).

DevOps
+ 2 more

Optimizing HTTP/2 server push with Fastly

Hooman Beheshti

Since we made HTTP/2 generally available in November 2016, h2 traffic has been steadily growing as more customers migrate to the new version of the protocol; since the beginning of 2017, h2 traffic has increased by over 400% and h2 requests now make up more than 25% of the total requests on Fastly’s network. HTTP/2 has numerous practical implications, but in this post we’ll focus on server push, which can save on round trip request time. Here’s how you can get the most out of server push with Fastly.

Performance

How to bootstrap self-service continuous fuzzing

Jonathan Foote

OSS-Fuzz is an innovative project that is both advancing the state of the art in OSS security engineering and immediately improving the overall quality of the software that serves the internet. In this blog post, I’ll describe how to use the open source components of google/oss-fuzz to bootstrap self-service continuous fuzzing for both private and public software using h2o, Fastly’s HTTP/2 proxy, as a running example.

Security

New York Media on surviving DDoS and building a better web

Anna MacLachlan

At Altitude 2016, New York Media’s CTO discussed surviving a massive DDoS and the steps they took to mitigate, gave us a peek inside their stack, and described how New York Media is building a better web, working towards creating a symbiotic relationship between readers, publishers, and advertisers to ensure great experiences for everyone.

Customers
+ 2 more

Extended Technical Trainings at Altitude San Francisco

Simon Wistow

[Join us June 28-29](https://www.fastly.com/altitude) for Altitude San Francisco, our annual west coast summit. This year, we’ve added a full day of extended technical trainings on June 28, followed by keynotes and main sessions on June 29. Come explore the future of edge delivery, infrastructure, and enforcement.

Customers

The New York Times on Prepping for the 2016 Election

Anna MacLachlan

At Altitude NYC, *The New York Times* CTO Nick Rockwell gave us a peek inside *The New York Times*’ stack and culture (and how he’s redefined risk from both a corporate and engineering standpoint), and described how they prepare for major events — such as the 2016 presidential election.

Customers
+ 2 more

The IoT industry’s response to emerging threats

Jose Nazario, PhD

Late last year, we took a look at how the Internet of Things (IoT) is under attack. We analyzed hundreds of individual IoT devices to see how often they were probed for vulnerabilities, with the intention of being employed for IoT botnet attacks. We did more robust vulnerability research on IoT devices that have been found vulnerable in the past and concluded that while malicious probes are constant, manufacturers have taken action to update their firmware and address security holes. Read on to hear our latest findings.

Security
Compute

CDN vs Caching: What is the Difference?

Rogier Mulhuijzen

CDN and caching can get confused for one another. Learn the differences between CDN and caching to help decide what you should use for optimal web performance.

Performance
Engineering