SlideShare une entreprise Scribd logo
1  sur  45
Télécharger pour lire hors ligne
Introduction 
Net
ix CDN and Open Source 
Gleb Smirno 
glebius@nginx.com 
Nginx.conf 2014 
San Francisco 
October 21, 2014 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 1 / 1
Introduction to Net
ix CDN 
Net
ix in numbers 
I 50+ millions subscribers in 40+ countries 
I Over 1 Petabyte of data 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 2 / 1
Introduction to Net
ix CDN Net
ix trac 
2014 1H Sandvine North Amertica Trac Report 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 3 / 1
Net
ix CDN Net
ix Streaming network 
Components of Net
ix Streaming 
I Amazon Web Services 
I Website, Business Logic, Customer Authentication 
I Data Sciences, Encoding/Encryption 
I Command and Control 
I Content Streaming 
I Big 3 CDN's (Akamai, Limelight, Level3) 
I Own CDN 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 4 / 1
Net
ix CDN Running own CDN 
Reasons for running own CDN 
I Grow faster 
I Reduce costs 
1https://www.net
ix.com/openconnect 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 5 / 1
Net
ix CDN Running own CDN 
Reasons for running own CDN 
I Grow faster 
I Reduce costs 
I Control the server side of HTTP connection 
I Build a CDN specialized in Net
ix content delivery 
I Put the content closer to a client 
1https://www.net
ix.com/openconnect 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 5 / 1
Net
ix CDN Running own CDN 
Reasons for running own CDN 
I Grow faster 
I Reduce costs 
I Control the server side of HTTP connection 
I Build a CDN specialized in Net
ix content delivery 
I Put the content closer to a client 
Solution: Open Connect1 
1https://www.net
ix.com/openconnect 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 5 / 1
OpenConnect Introduction to OpenConnect 
The OpenConnect Initiative 
Amazon Cloud The Internet ISPs 
video 
encoding 
account 
authorization 
streaming 
control 
Origin 
Server 
ISP 
Cache 
IX 
Cache 
Client Client 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 6 / 1
OpenConnect Introduction to OpenConnect 
OpenConnect Appliance 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 7 / 1
OpenConnect OpenConnect hardware 
OpenConnect Appliance 
The big cache 
I 4U chassis 
I Storage 
I 36 HDDs, 4 Terabyte each 
I 6 SSDs, 0.5 Terabyte each 
I Two 10 Gbit/s Chelsio NICs 
I 8-core CPU 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 8 / 1
OpenConnect OpenConnect hardware 
OpenConnect Appliance 
The fast cache 
I 1U chassis 
I Storage 
I 14 SSDs, 1 Terabyte each 
I 40 Gbit/s Chelsio NICs 
I 8-core CPU 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 8 / 1
OpenConnect OpenConnect software 
OpenConnect Appliance software 
I FreeBSD operating system 
I nanobsd(8) based
rmware 
I some enhancements 
I NGINX web server 
I custom modules 
I BIRD routing daemon 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 9 / 1
OpenConnect OpenConnect software 
Software choice 
I Open source 
I BSD license 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 10 / 1
OpenConnect OpenConnect software 
Software choice 
I Open source 
I BSD license 
I FreeBSD 
I Known to be fast and stable 
I Strong developer community 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 10 / 1
OpenConnect OpenConnect software 
Software choice 
I Open source 
I BSD license 
I FreeBSD 
I Known to be fast and stable 
I Strong developer community 
I NGINX 
I Known to be fast and stable 
I Commercial support from Nginx, Inc. 
I Flexible framework for custom modules 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 10 / 1
OpenConnect OpenConnect software 
Software choice 
I Open source 
I BSD license 
I FreeBSD 
I Known to be fast and stable 
I Strong developer community 
I NGINX 
I Known to be fast and stable 
I Commercial support from Nginx, Inc. 
I Flexible framework for custom modules 
I FreeBSD + NGINX 
I kqueue(2) event driven model 
I send
le(2) + aio(4) mode 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 10 / 1
OpenConnect OpenConnect operation 
OpenConnect operation: serve
ll 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 11 / 1
OpenConnect OpenConnect operation 
OpenConnect: streaming numbers 
I 400,000 stream
les per appliance 
I 5000-30,000 client streams per appliance 
I 300-1000 clients per disk 
I Clients request 80Kb-300Kb ranges 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 12 / 1
Net
ix  open source Dealing with open source 
Dealing with open source 
The traditional way: 
I Take a stable, well tested version, 
fork it 
I Develop your product on top of it 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 13 / 1
Net
ix  open source Dealing with open source 
Dealing with open source 
The traditional way: 
I Take a stable, well tested version, 
fork it 
I Develop your product on top of it 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 13 / 1
Net
ix  open source Dealing with open source 
Dealing with open source 
The Net
ix rules: 
I Pull the bleeding-edge version of 
software 
I Push your changes upstream 
aggressively 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 14 / 1
Net
ix  open source Dierent myths on dierent versions 
Myths about development version 
Myth #1: 
Development version is full of bugs 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 15 / 1
Net
ix  open source Dierent myths on dierent versions 
Myths about development version 
Myth #1: 
Development version is full of bugs 
Truth: most bugs are discovered in 
stable versions 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 15 / 1
Net
ix  open source Dierent myths on dierent versions 
Myths about stable version 
Myth #2: 
We will wait for a stable version, and 
someone else will
x bugs 2 
2http://en.wikipedia.org/wiki/Free rider problem 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 16 / 1
Net
ix  open source Dierent myths on dierent versions 
Myths about stable version 
Myth #2: 
We will wait for a stable version, and 
someone else will
x bugs 2 
Truth: No one will discover your bugs 
2http://en.wikipedia.org/wiki/Free rider problem 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 16 / 1
Net
ix  open source Dierent myths on dierent versions 
Discovering bugs in dierent versions 
development stable 
code is hot code is unmaintained 
no API/ABI constraints 
API/ABI must be 
preserved 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 17 / 1
Net
ix  open source Dierent myths on dierent versions 
More myths 
Myth #3: 
Not following development version saves 
us a lot of time 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 18 / 1
Net
ix  open source Dierent myths on dierent versions 
More myths 
Myth #3: 
Not following development version saves 
us a lot of time 
Truth: some day you will need to go 
forward 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 18 / 1
Net
ix  open source Opening sources 
Myths on open source 
Myth #4: 
Sharing code discloses know-how's 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 19 / 1
Net
ix  open source Opening sources 
Myths on open source 
Myth #4: 
Sharing code discloses know-how's 
Truth: know-how's reside in a tiny 
percent of code, or even outside 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 19 / 1
Net
ix  open source Opening sources 
Noble or sel
sh? 
I We want to in
uence the direction of open source 
development 
I We want to outsource maintainance of our code to 
community 
I We want more eyes to examine our code 
I We want more people to discover bugs in it 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 20 / 1
Net
ix  open source Opening sources 
Noble or sel
sh? 
I We want to in
uence the direction of open source 
development 
I We want to outsource maintainance of our code to 
community 
I We want more eyes to examine our code 
I We want more people to discover bugs in it 
I And, of course, we want to be considered noble 
givers of code to community , 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 20 / 1
Net
ix  open source Net
ix's commitment to open source 
OpenConnect performance 
I OpenConnect started in 2011 
 10 Gbps per appliance 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 21 / 1
Net
ix  open source Net
ix's commitment to open source 
OpenConnect performance 
I OpenConnect started in 2011 
 10 Gbps per appliance 
I Now, in 2014, we achieve 
 30 Gbps per appliance 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 21 / 1
Net
ix  open source Net
ix's commitment to open source 
OpenConnect performance 
I OpenConnect started in 2011 
 10 Gbps per appliance 
I Now, in 2014, we achieve 
 30 Gbps per appliance 
I Next goal is  80 Gbps per appliance 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 21 / 1
Net
ix  open source Net
ix's commitment to open source 
Areas of focus 
I network stack: sockets, TCP, drivers 
I storage: drivers, UFS 
I VM subsystem: caching 
Gleb Smirno glebius@nginx.com Net
ix CDN and Open Source October 21, 2014 22 / 1
Net
ix  open source Net
ix's commitment to open source 
Performance improvements 
I Reducing lock/cache line contention in 
I link aggregation driver 
I kernel socket buers 
I send

Contenu connexe

Tendances

How VXLAN works on Linux
How VXLAN works on LinuxHow VXLAN works on Linux
How VXLAN works on Linux
Etsuji Nakai
 
PLNOG 13: Adam Obszyński: Case Study – Infoblox Advanced DNS Protection
PLNOG 13: Adam Obszyński: Case Study – Infoblox Advanced DNS ProtectionPLNOG 13: Adam Obszyński: Case Study – Infoblox Advanced DNS Protection
PLNOG 13: Adam Obszyński: Case Study – Infoblox Advanced DNS Protection
PROIDEA
 

Tendances (20)

Building robust CDC pipeline with Apache Hudi and Debezium
Building robust CDC pipeline with Apache Hudi and DebeziumBuilding robust CDC pipeline with Apache Hudi and Debezium
Building robust CDC pipeline with Apache Hudi and Debezium
 
SIPREC RTPEngine Media Forking
SIPREC RTPEngine Media ForkingSIPREC RTPEngine Media Forking
SIPREC RTPEngine Media Forking
 
Handle Large Messages In Apache Kafka
Handle Large Messages In Apache KafkaHandle Large Messages In Apache Kafka
Handle Large Messages In Apache Kafka
 
rtpengine - Media Relaying and Beyond
rtpengine - Media Relaying and Beyondrtpengine - Media Relaying and Beyond
rtpengine - Media Relaying and Beyond
 
Best practices and lessons learnt from Running Apache NiFi at Renault
Best practices and lessons learnt from Running Apache NiFi at RenaultBest practices and lessons learnt from Running Apache NiFi at Renault
Best practices and lessons learnt from Running Apache NiFi at Renault
 
Kubernetes Networking with Cilium - Deep Dive
Kubernetes Networking with Cilium - Deep DiveKubernetes Networking with Cilium - Deep Dive
Kubernetes Networking with Cilium - Deep Dive
 
Calico and BGP
Calico and BGPCalico and BGP
Calico and BGP
 
SeaweedFS introduction
SeaweedFS introductionSeaweedFS introduction
SeaweedFS introduction
 
Kernel advantages for Istio realized with Cilium
Kernel advantages for Istio realized with CiliumKernel advantages for Istio realized with Cilium
Kernel advantages for Istio realized with Cilium
 
The Future of Service Mesh
The Future of Service MeshThe Future of Service Mesh
The Future of Service Mesh
 
Deep dive into Kubernetes Networking
Deep dive into Kubernetes NetworkingDeep dive into Kubernetes Networking
Deep dive into Kubernetes Networking
 
Aynchronous Processing in Kamailio Configuration File
Aynchronous Processing in Kamailio Configuration FileAynchronous Processing in Kamailio Configuration File
Aynchronous Processing in Kamailio Configuration File
 
Faster packet processing in Linux: XDP
Faster packet processing in Linux: XDPFaster packet processing in Linux: XDP
Faster packet processing in Linux: XDP
 
How VXLAN works on Linux
How VXLAN works on LinuxHow VXLAN works on Linux
How VXLAN works on Linux
 
What we've learned from running a PostgreSQL managed service on Kubernetes
What we've learned from running a PostgreSQL managed service on KubernetesWhat we've learned from running a PostgreSQL managed service on Kubernetes
What we've learned from running a PostgreSQL managed service on Kubernetes
 
Open shift 4 infra deep dive
Open shift 4    infra deep diveOpen shift 4    infra deep dive
Open shift 4 infra deep dive
 
Open vSwitch Introduction
Open vSwitch IntroductionOpen vSwitch Introduction
Open vSwitch Introduction
 
Project calico - introduction
Project calico - introductionProject calico - introduction
Project calico - introduction
 
A Journey to Boot Linux on Raspberry Pi
A Journey to Boot Linux on Raspberry PiA Journey to Boot Linux on Raspberry Pi
A Journey to Boot Linux on Raspberry Pi
 
PLNOG 13: Adam Obszyński: Case Study – Infoblox Advanced DNS Protection
PLNOG 13: Adam Obszyński: Case Study – Infoblox Advanced DNS ProtectionPLNOG 13: Adam Obszyński: Case Study – Infoblox Advanced DNS Protection
PLNOG 13: Adam Obszyński: Case Study – Infoblox Advanced DNS Protection
 

En vedette

Future of CDN - Next 10 Years - Ahmet Ozalp, Akamai Technologies - DigiWorld ...
Future of CDN - Next 10 Years - Ahmet Ozalp, Akamai Technologies - DigiWorld ...Future of CDN - Next 10 Years - Ahmet Ozalp, Akamai Technologies - DigiWorld ...
Future of CDN - Next 10 Years - Ahmet Ozalp, Akamai Technologies - DigiWorld ...
IDATE DigiWorld
 
Using CDN to improve performance
Using CDN to improve performanceUsing CDN to improve performance
Using CDN to improve performance
Gea-Suan Lin
 
CDNによるInternet支配の現状とICNの可能性
CDNによるInternet支配の現状とICNの可能性CDNによるInternet支配の現状とICNの可能性
CDNによるInternet支配の現状とICNの可能性
J-Stream Inc.
 
How to build CDN for your website
How to build CDN for your websiteHow to build CDN for your website
How to build CDN for your website
Martin Kulov
 

En vedette (20)

Netflix and Open Source
Netflix and Open SourceNetflix and Open Source
Netflix and Open Source
 
Netflix Global Cloud Architecture
Netflix Global Cloud ArchitectureNetflix Global Cloud Architecture
Netflix Global Cloud Architecture
 
Future of CDN - Next 10 Years - Ahmet Ozalp, Akamai Technologies - DigiWorld ...
Future of CDN - Next 10 Years - Ahmet Ozalp, Akamai Technologies - DigiWorld ...Future of CDN - Next 10 Years - Ahmet Ozalp, Akamai Technologies - DigiWorld ...
Future of CDN - Next 10 Years - Ahmet Ozalp, Akamai Technologies - DigiWorld ...
 
Netflix Open Connect: Delivering Internet TV to the world
Netflix Open Connect: Delivering Internet TV to the worldNetflix Open Connect: Delivering Internet TV to the world
Netflix Open Connect: Delivering Internet TV to the world
 
Monitoring CDN Performance
Monitoring CDN PerformanceMonitoring CDN Performance
Monitoring CDN Performance
 
Content Delivery Network
Content Delivery NetworkContent Delivery Network
Content Delivery Network
 
How Content Delivery Networks Work
How Content Delivery Networks WorkHow Content Delivery Networks Work
How Content Delivery Networks Work
 
セキュリティCDN: Imperva Incapsula
セキュリティCDN: Imperva IncapsulaセキュリティCDN: Imperva Incapsula
セキュリティCDN: Imperva Incapsula
 
Using CDN to improve performance
Using CDN to improve performanceUsing CDN to improve performance
Using CDN to improve performance
 
Netflix Architecture Tutorial at Gluecon
Netflix Architecture Tutorial at GlueconNetflix Architecture Tutorial at Gluecon
Netflix Architecture Tutorial at Gluecon
 
Yow Conference Dec 2013 Netflix Workshop Slides with Notes
Yow Conference Dec 2013 Netflix Workshop Slides with NotesYow Conference Dec 2013 Netflix Workshop Slides with Notes
Yow Conference Dec 2013 Netflix Workshop Slides with Notes
 
CDNによるInternet支配の現状とICNの可能性
CDNによるInternet支配の現状とICNの可能性CDNによるInternet支配の現状とICNの可能性
CDNによるInternet支配の現状とICNの可能性
 
Video Streaming. NGINX RTMP in particular
Video Streaming. NGINX RTMP in particularVideo Streaming. NGINX RTMP in particular
Video Streaming. NGINX RTMP in particular
 
CONTENT DELIVERY NETWORK
CONTENT DELIVERY NETWORK CONTENT DELIVERY NETWORK
CONTENT DELIVERY NETWORK
 
Africa Regional Insights
Africa Regional InsightsAfrica Regional Insights
Africa Regional Insights
 
Integrating multiple CDN providers at Etsy - Velocity Europe (London) 2013
Integrating multiple CDN providers at Etsy - Velocity Europe (London) 2013Integrating multiple CDN providers at Etsy - Velocity Europe (London) 2013
Integrating multiple CDN providers at Etsy - Velocity Europe (London) 2013
 
BigData & CDN - OOP2011 (Pavlo Baron)
BigData & CDN - OOP2011 (Pavlo Baron)BigData & CDN - OOP2011 (Pavlo Baron)
BigData & CDN - OOP2011 (Pavlo Baron)
 
Webinar Slides : Migrating to MySQL, MariaDB Galera and/or Percona XtraDB Clu...
Webinar Slides : Migrating to MySQL, MariaDB Galera and/or Percona XtraDB Clu...Webinar Slides : Migrating to MySQL, MariaDB Galera and/or Percona XtraDB Clu...
Webinar Slides : Migrating to MySQL, MariaDB Galera and/or Percona XtraDB Clu...
 
Netflix Culture: Freedom & Responsibility 넷플릭스 문화: 자유와 책임 (한국어 번역)
Netflix Culture: Freedom & Responsibility      넷플릭스 문화: 자유와 책임 (한국어 번역)Netflix Culture: Freedom & Responsibility      넷플릭스 문화: 자유와 책임 (한국어 번역)
Netflix Culture: Freedom & Responsibility 넷플릭스 문화: 자유와 책임 (한국어 번역)
 
How to build CDN for your website
How to build CDN for your websiteHow to build CDN for your website
How to build CDN for your website
 

Similaire à Netflix CDN and Open Source

Chris Swan at QCon 2014: Using Docker in Cloud Networks
Chris Swan at QCon 2014: Using Docker in Cloud NetworksChris Swan at QCon 2014: Using Docker in Cloud Networks
Chris Swan at QCon 2014: Using Docker in Cloud Networks
Cohesive Networks
 
Open source technology
Open source technologyOpen source technology
Open source technology
aparnaz1
 

Similaire à Netflix CDN and Open Source (20)

SecurifyLabs & Tiki @ Countermeasure 2014
SecurifyLabs & Tiki @ Countermeasure 2014SecurifyLabs & Tiki @ Countermeasure 2014
SecurifyLabs & Tiki @ Countermeasure 2014
 
Docker Chicago Meetup - July 2014
Docker Chicago Meetup - July 2014Docker Chicago Meetup - July 2014
Docker Chicago Meetup - July 2014
 
Ryan Koop's Docker Chicago Meetup Demo March 12 2014
Ryan Koop's Docker Chicago Meetup Demo March 12 2014Ryan Koop's Docker Chicago Meetup Demo March 12 2014
Ryan Koop's Docker Chicago Meetup Demo March 12 2014
 
Chris Swan at QCon 2014: Using Docker in Cloud Networks
Chris Swan at QCon 2014: Using Docker in Cloud NetworksChris Swan at QCon 2014: Using Docker in Cloud Networks
Chris Swan at QCon 2014: Using Docker in Cloud Networks
 
All Things Open : Crash Course in Open Source Cloud Computing
All Things Open : Crash Course in Open Source Cloud Computing All Things Open : Crash Course in Open Source Cloud Computing
All Things Open : Crash Course in Open Source Cloud Computing
 
Crash Course in Cloud Computing
Crash Course in Cloud ComputingCrash Course in Cloud Computing
Crash Course in Cloud Computing
 
Open source technology
Open source technologyOpen source technology
Open source technology
 
Welcome to the Web 3.0
Welcome to the Web 3.0Welcome to the Web 3.0
Welcome to the Web 3.0
 
Module: Welcome to Web 3.0
Module: Welcome to Web 3.0Module: Welcome to Web 3.0
Module: Welcome to Web 3.0
 
OpenStack Ottawa MeetUp - April 3rd 2018
OpenStack Ottawa MeetUp - April 3rd 2018OpenStack Ottawa MeetUp - April 3rd 2018
OpenStack Ottawa MeetUp - April 3rd 2018
 
When to use Serverless? When to use Kubernetes?
When to use Serverless? When to use Kubernetes?When to use Serverless? When to use Kubernetes?
When to use Serverless? When to use Kubernetes?
 
stackconf 2022: It’s Time to Debloat the Cloud with Unikraft
stackconf 2022: It’s Time to Debloat the Cloud with Unikraftstackconf 2022: It’s Time to Debloat the Cloud with Unikraft
stackconf 2022: It’s Time to Debloat the Cloud with Unikraft
 
stackconf 2021 | Continuous Security – integrating security into your pipelines
stackconf 2021 | Continuous Security – integrating security into your pipelinesstackconf 2021 | Continuous Security – integrating security into your pipelines
stackconf 2021 | Continuous Security – integrating security into your pipelines
 
Docker Overview - Rise of the Containers
Docker Overview - Rise of the ContainersDocker Overview - Rise of the Containers
Docker Overview - Rise of the Containers
 
Moby Open Source Summit North America 2017
Moby Open Source Summit North America 2017Moby Open Source Summit North America 2017
Moby Open Source Summit North America 2017
 
Security in a containerized world - Jessie Frazelle
Security in a containerized world - Jessie FrazelleSecurity in a containerized world - Jessie Frazelle
Security in a containerized world - Jessie Frazelle
 
Architecting the Future: Abstractions and Metadata - All Things Open
Architecting the Future: Abstractions and Metadata - All Things OpenArchitecting the Future: Abstractions and Metadata - All Things Open
Architecting the Future: Abstractions and Metadata - All Things Open
 
Developer's Guide to JavaScript and Web Cryptography
Developer's Guide to JavaScript and Web CryptographyDeveloper's Guide to JavaScript and Web Cryptography
Developer's Guide to JavaScript and Web Cryptography
 
VulnTotal: Cross-validate vulnerability coverage of VulnerableCode
VulnTotal: Cross-validate vulnerability coverage of VulnerableCodeVulnTotal: Cross-validate vulnerability coverage of VulnerableCode
VulnTotal: Cross-validate vulnerability coverage of VulnerableCode
 
Apache HttpD Web Server - Hardening and other Security Considerations
Apache HttpD Web Server - Hardening and other Security ConsiderationsApache HttpD Web Server - Hardening and other Security Considerations
Apache HttpD Web Server - Hardening and other Security Considerations
 

Dernier

TECUNIQUE: Success Stories: IT Service provider
TECUNIQUE: Success Stories: IT Service providerTECUNIQUE: Success Stories: IT Service provider
TECUNIQUE: Success Stories: IT Service provider
mohitmore19
 
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
masabamasaba
 
AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
AI Mastery 201: Elevating Your Workflow with Advanced LLM TechniquesAI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
VictorSzoltysek
 
%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...
%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...
%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...
masabamasaba
 

Dernier (20)

VTU technical seminar 8Th Sem on Scikit-learn
VTU technical seminar 8Th Sem on Scikit-learnVTU technical seminar 8Th Sem on Scikit-learn
VTU technical seminar 8Th Sem on Scikit-learn
 
%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain
%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain
%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain
 
Chinsurah Escorts ☎️8617697112 Starting From 5K to 15K High Profile Escorts ...
Chinsurah Escorts ☎️8617697112  Starting From 5K to 15K High Profile Escorts ...Chinsurah Escorts ☎️8617697112  Starting From 5K to 15K High Profile Escorts ...
Chinsurah Escorts ☎️8617697112 Starting From 5K to 15K High Profile Escorts ...
 
call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️
call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️
call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️
 
Define the academic and professional writing..pdf
Define the academic and professional writing..pdfDefine the academic and professional writing..pdf
Define the academic and professional writing..pdf
 
TECUNIQUE: Success Stories: IT Service provider
TECUNIQUE: Success Stories: IT Service providerTECUNIQUE: Success Stories: IT Service provider
TECUNIQUE: Success Stories: IT Service provider
 
Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...
Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...
Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...
 
Right Money Management App For Your Financial Goals
Right Money Management App For Your Financial GoalsRight Money Management App For Your Financial Goals
Right Money Management App For Your Financial Goals
 
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
 
%in ivory park+277-882-255-28 abortion pills for sale in ivory park
%in ivory park+277-882-255-28 abortion pills for sale in ivory park %in ivory park+277-882-255-28 abortion pills for sale in ivory park
%in ivory park+277-882-255-28 abortion pills for sale in ivory park
 
AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
AI Mastery 201: Elevating Your Workflow with Advanced LLM TechniquesAI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
 
Generic or specific? Making sensible software design decisions
Generic or specific? Making sensible software design decisionsGeneric or specific? Making sensible software design decisions
Generic or specific? Making sensible software design decisions
 
%in Stilfontein+277-882-255-28 abortion pills for sale in Stilfontein
%in Stilfontein+277-882-255-28 abortion pills for sale in Stilfontein%in Stilfontein+277-882-255-28 abortion pills for sale in Stilfontein
%in Stilfontein+277-882-255-28 abortion pills for sale in Stilfontein
 
Payment Gateway Testing Simplified_ A Step-by-Step Guide for Beginners.pdf
Payment Gateway Testing Simplified_ A Step-by-Step Guide for Beginners.pdfPayment Gateway Testing Simplified_ A Step-by-Step Guide for Beginners.pdf
Payment Gateway Testing Simplified_ A Step-by-Step Guide for Beginners.pdf
 
Direct Style Effect Systems - The Print[A] Example - A Comprehension Aid
Direct Style Effect Systems -The Print[A] Example- A Comprehension AidDirect Style Effect Systems -The Print[A] Example- A Comprehension Aid
Direct Style Effect Systems - The Print[A] Example - A Comprehension Aid
 
Microsoft AI Transformation Partner Playbook.pdf
Microsoft AI Transformation Partner Playbook.pdfMicrosoft AI Transformation Partner Playbook.pdf
Microsoft AI Transformation Partner Playbook.pdf
 
%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein
%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein
%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein
 
%+27788225528 love spells in Vancouver Psychic Readings, Attraction spells,Br...
%+27788225528 love spells in Vancouver Psychic Readings, Attraction spells,Br...%+27788225528 love spells in Vancouver Psychic Readings, Attraction spells,Br...
%+27788225528 love spells in Vancouver Psychic Readings, Attraction spells,Br...
 
%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...
%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...
%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...
 
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
 

Netflix CDN and Open Source

  • 1. Introduction Net ix CDN and Open Source Gleb Smirno glebius@nginx.com Nginx.conf 2014 San Francisco October 21, 2014 Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 1 / 1
  • 2. Introduction to Net ix CDN Net ix in numbers I 50+ millions subscribers in 40+ countries I Over 1 Petabyte of data Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 2 / 1
  • 3. Introduction to Net ix CDN Net ix trac 2014 1H Sandvine North Amertica Trac Report Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 3 / 1
  • 4. Net ix CDN Net ix Streaming network Components of Net ix Streaming I Amazon Web Services I Website, Business Logic, Customer Authentication I Data Sciences, Encoding/Encryption I Command and Control I Content Streaming I Big 3 CDN's (Akamai, Limelight, Level3) I Own CDN Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 4 / 1
  • 5. Net ix CDN Running own CDN Reasons for running own CDN I Grow faster I Reduce costs 1https://www.net ix.com/openconnect Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 5 / 1
  • 6. Net ix CDN Running own CDN Reasons for running own CDN I Grow faster I Reduce costs I Control the server side of HTTP connection I Build a CDN specialized in Net ix content delivery I Put the content closer to a client 1https://www.net ix.com/openconnect Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 5 / 1
  • 7. Net ix CDN Running own CDN Reasons for running own CDN I Grow faster I Reduce costs I Control the server side of HTTP connection I Build a CDN specialized in Net ix content delivery I Put the content closer to a client Solution: Open Connect1 1https://www.net ix.com/openconnect Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 5 / 1
  • 8. OpenConnect Introduction to OpenConnect The OpenConnect Initiative Amazon Cloud The Internet ISPs video encoding account authorization streaming control Origin Server ISP Cache IX Cache Client Client Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 6 / 1
  • 9. OpenConnect Introduction to OpenConnect OpenConnect Appliance Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 7 / 1
  • 10. OpenConnect OpenConnect hardware OpenConnect Appliance The big cache I 4U chassis I Storage I 36 HDDs, 4 Terabyte each I 6 SSDs, 0.5 Terabyte each I Two 10 Gbit/s Chelsio NICs I 8-core CPU Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 8 / 1
  • 11. OpenConnect OpenConnect hardware OpenConnect Appliance The fast cache I 1U chassis I Storage I 14 SSDs, 1 Terabyte each I 40 Gbit/s Chelsio NICs I 8-core CPU Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 8 / 1
  • 12. OpenConnect OpenConnect software OpenConnect Appliance software I FreeBSD operating system I nanobsd(8) based
  • 13. rmware I some enhancements I NGINX web server I custom modules I BIRD routing daemon Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 9 / 1
  • 14. OpenConnect OpenConnect software Software choice I Open source I BSD license Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 10 / 1
  • 15. OpenConnect OpenConnect software Software choice I Open source I BSD license I FreeBSD I Known to be fast and stable I Strong developer community Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 10 / 1
  • 16. OpenConnect OpenConnect software Software choice I Open source I BSD license I FreeBSD I Known to be fast and stable I Strong developer community I NGINX I Known to be fast and stable I Commercial support from Nginx, Inc. I Flexible framework for custom modules Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 10 / 1
  • 17. OpenConnect OpenConnect software Software choice I Open source I BSD license I FreeBSD I Known to be fast and stable I Strong developer community I NGINX I Known to be fast and stable I Commercial support from Nginx, Inc. I Flexible framework for custom modules I FreeBSD + NGINX I kqueue(2) event driven model I send
  • 18. le(2) + aio(4) mode Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 10 / 1
  • 19. OpenConnect OpenConnect operation OpenConnect operation: serve
  • 20. ll Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 11 / 1
  • 21. OpenConnect OpenConnect operation OpenConnect: streaming numbers I 400,000 stream
  • 22. les per appliance I 5000-30,000 client streams per appliance I 300-1000 clients per disk I Clients request 80Kb-300Kb ranges Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 12 / 1
  • 23. Net ix open source Dealing with open source Dealing with open source The traditional way: I Take a stable, well tested version, fork it I Develop your product on top of it Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 13 / 1
  • 24. Net ix open source Dealing with open source Dealing with open source The traditional way: I Take a stable, well tested version, fork it I Develop your product on top of it Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 13 / 1
  • 25. Net ix open source Dealing with open source Dealing with open source The Net ix rules: I Pull the bleeding-edge version of software I Push your changes upstream aggressively Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 14 / 1
  • 26. Net ix open source Dierent myths on dierent versions Myths about development version Myth #1: Development version is full of bugs Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 15 / 1
  • 27. Net ix open source Dierent myths on dierent versions Myths about development version Myth #1: Development version is full of bugs Truth: most bugs are discovered in stable versions Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 15 / 1
  • 28. Net ix open source Dierent myths on dierent versions Myths about stable version Myth #2: We will wait for a stable version, and someone else will
  • 29. x bugs 2 2http://en.wikipedia.org/wiki/Free rider problem Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 16 / 1
  • 30. Net ix open source Dierent myths on dierent versions Myths about stable version Myth #2: We will wait for a stable version, and someone else will
  • 31. x bugs 2 Truth: No one will discover your bugs 2http://en.wikipedia.org/wiki/Free rider problem Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 16 / 1
  • 32. Net ix open source Dierent myths on dierent versions Discovering bugs in dierent versions development stable code is hot code is unmaintained no API/ABI constraints API/ABI must be preserved Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 17 / 1
  • 33. Net ix open source Dierent myths on dierent versions More myths Myth #3: Not following development version saves us a lot of time Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 18 / 1
  • 34. Net ix open source Dierent myths on dierent versions More myths Myth #3: Not following development version saves us a lot of time Truth: some day you will need to go forward Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 18 / 1
  • 35. Net ix open source Opening sources Myths on open source Myth #4: Sharing code discloses know-how's Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 19 / 1
  • 36. Net ix open source Opening sources Myths on open source Myth #4: Sharing code discloses know-how's Truth: know-how's reside in a tiny percent of code, or even outside Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 19 / 1
  • 37. Net ix open source Opening sources Noble or sel
  • 38. sh? I We want to in uence the direction of open source development I We want to outsource maintainance of our code to community I We want more eyes to examine our code I We want more people to discover bugs in it Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 20 / 1
  • 39. Net ix open source Opening sources Noble or sel
  • 40. sh? I We want to in uence the direction of open source development I We want to outsource maintainance of our code to community I We want more eyes to examine our code I We want more people to discover bugs in it I And, of course, we want to be considered noble givers of code to community , Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 20 / 1
  • 41. Net ix open source Net ix's commitment to open source OpenConnect performance I OpenConnect started in 2011 10 Gbps per appliance Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 21 / 1
  • 42. Net ix open source Net ix's commitment to open source OpenConnect performance I OpenConnect started in 2011 10 Gbps per appliance I Now, in 2014, we achieve 30 Gbps per appliance Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 21 / 1
  • 43. Net ix open source Net ix's commitment to open source OpenConnect performance I OpenConnect started in 2011 10 Gbps per appliance I Now, in 2014, we achieve 30 Gbps per appliance I Next goal is 80 Gbps per appliance Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 21 / 1
  • 44. Net ix open source Net ix's commitment to open source Areas of focus I network stack: sockets, TCP, drivers I storage: drivers, UFS I VM subsystem: caching Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 22 / 1
  • 45. Net ix open source Net ix's commitment to open source Performance improvements I Reducing lock/cache line contention in I link aggregation driver I kernel socket buers I send
  • 46. le(2) kernel memory buers Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 23 / 1
  • 47. Net ix open source Net ix's commitment to open source Performance improvements I Reducing lock/cache line contention in I link aggregation driver I kernel socket buers I send
  • 48. le(2) kernel memory buers I Reducing complexity, structuring code in I kernel owtable I NGINX send
  • 49. le(2) code Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 23 / 1
  • 50. Net ix open source Net ix's commitment to open source Performance improvements I Reducing lock/cache line contention in I link aggregation driver I kernel socket buers I send
  • 51. le(2) kernel memory buers I Reducing complexity, structuring code in I kernel owtable I NGINX send
  • 52. le(2) code I Introducing multithreading in I UFS softupdates Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 23 / 1
  • 53. Net ix open source Net ix's commitment to open source Various improvements bug
  • 54. xes I NGINX core and modules I IPv6 network stack I UFS journaling Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 24 / 1
  • 55. Net ix open source Net ix's commitment to open source Completely new features I Per-CPU statistical counters: I Precise: do not lose updates I Fast: do not use any locking, neither critical sections Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 25 / 1
  • 56. Net ix open source Net ix's commitment to open source Completely new features I Per-CPU statistical counters: I Precise: do not lose updates I Fast: do not use any locking, neither critical sections I Completely new send
  • 57. le(2) implementation: I Doesn't block on disk I/O! I Allows to specify readahead I Allows to deny VM caching Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 25 / 1
  • 58. Net ix open source Net ix's commitment to open source Working with community I unmapped I/O I VM radix Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 26 / 1
  • 59. Net ix open source Net ix's commitment to open source Future and work in progress I cc net ix: new TCP congestion control algorithm I hardware assisted TCP pacing I kernel-side TLS ooad I SSD I/O performance improvements I multithreading pagedaemon I NUMA support Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 27 / 1
  • 60. Net ix open source Net ix's commitment to open source Questions? Gleb Smirno glebius@nginx.com Net ix CDN and Open Source October 21, 2014 28 / 1