Key events and trends
Infrastructure & Cloud Solutions
-
Introducing Amazon ECS Gateway for Managed Ingress: AWS launched Amazon ECS Gateway, an account-level resource designed to provision ingress infrastructure for ECS services automatically. This solution allows platform teams to define networking, TLS, and WAF settings once, enabling application teams to opt in via a gateway connector (источник).
-
Assess Your Infrastructure Type with Deckhouse Test: The Deckhouse team released a five-question test to help engineers identify their infrastructure type, categorizing them into archetypes like "Dinosaur" (clings to VMs and scheduled snapshots), "Archaeologist" (doesn't remember what's running where), or "Cloud Master" (comfortable until the first large bill) (источник).
Kubernetes & Performance
-
Preply's Apollo Router Testing and Autoscaling Approach: A case study detailed how Preply tested Apollo Router using a Rust mock service and Vegeta, identifying a safe performance range of 1,200–1,500 requests per second. The company implemented CPU-based autoscaling for its Kubernetes environment (источник).
-
Webinar on Kubernetes Networking Troubleshooting: A webinar on November 3 will cover common Kubernetes networking issues, such as unresponsive Kube API, LoadBalancer traffic problems, and DNS resolution failures. Roman Yerema, a developer at MWS Cloud Platform, will demonstrate interactions between cloud networks, CNI, and Kubernetes, explain SNAT and Source IP, discuss
externalTrafficPolicy: Local, and provide diagnostics for real-world cases. Participants will receive a checklist for availability checks (источник).
DevSecOps & Security
-
Salesforce's Approach to Managing Security Defects at Scale: Salesforce shared its experience in handling a large volume of security defects, a challenge amplified by the rise of AI/LLM. The company developed a two-pronged approach: a strategic direction for grouping and fixing common defects across many developments, and a tactical direction for confirming specific defects and preparing Proof-of-Concepts (PoC) for unique cases (источник).
-
Mitigating GitHub Actions PR Title Vulnerability: A security recommendation highlights that GitHub Actions expressions like
${{ ... }}withinrun:blocks are interpolated before shell execution. Direct insertion ofgithub.event.pull_request.titlecan allow malicious PR titles to alter script execution. GitHub advises passing such values through an intermediate environment variable to ensure they are treated as data, not commands, emphasizing that bash will not re-parse the content of a quoted variable (источник).
Community & Knowledge Sharing
- Avito Infraween Party for Infrastructure Engineers: AvitoTech is hosting "Avito Infraween Party" on October 31, bringing together infrastructure engineers for open discussions on infrastructure tasks, case sharing, and debates with AvitoTech experts and other participants. The event will also feature an afterparty with a championship for throwing old equipment (источник).
Final analytics
The day's content focused on practical advancements and security considerations within server infrastructure, Kubernetes, and cloud environments. Key themes included enhancing cloud services with new managed ingress solutions like Amazon ECS Gateway, optimizing Kubernetes performance and networking through case studies and troubleshooting webinars, and strengthening DevSecOps practices. Salesforce's detailed approach to managing security defects illustrates a growing challenge in the era of AI-driven vulnerability discovery, stressing the need for strategic and tactical remediation plans. Furthermore, a critical security vulnerability in GitHub Actions highlighted the ongoing importance of secure coding practices and careful handling of untrusted input in CI/CD pipelines. The announcement of a community event, Avito Infraween Party, suggests an active interest in collaborative problem-solving and knowledge exchange among infrastructure engineers. Overall, the day's discussions underscore a continuous effort within the community to improve infrastructure reliability, performance, and security while fostering professional development and interaction.