Whether you’re considering migrating to PHP 7 or are already there, you need to know the specifics of how to keep your application running smoothly, efficiently, and with minimum downtime. Take these techniques proven by our customers to make your PHP 7 application shine.

1. 1© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Ongoing management of
your PHP 7 application
Jan Burkl
Solution consulting manager

2. 2© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Ask the PHP experts: Series
overview
Now: Ongoing management of your PHP 7 application
Oct. 11: PHP industry roundtable
Join our panel of experts in an open discussion on the latest in PHP news,
technologies, programming practices, and case studies.

3. 3© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Presenter
Jan Burkl
Solution Consulting Manager, Central Europe
Rogue Wave Software
jan.burkl@roguewave.com
Twitter: @janatzend

4. 4© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Watch the on-demand webinar

5. 5© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Security
Tuning
DIY
Scaling

6. 6© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Security tips and techniques

7. 7© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Security
https://en.wikipedia.org/wiki/Security
“Security is the degree of resistance to,
or protection from, harm. It applies to
any vulnerable and/or valuable asset
[…]”

8. 8© 2017 Rogue Wave Software, Inc. All Rights Reserved.

9. 9© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Security pillars

10. 10© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Security pillars
Application
Stack

11. 11© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Security pillars 1/2 – PHP application
• Framework
– Community
– Security policy
• Custom code
– Skillset
– QA tools

12. 12© 2017 Rogue Wave Software, Inc. All Rights Reserved.
OWASP
• Open Web Application Security Project
• Not-for-profit
• Make software security visible
• https://www.owasp.org/index.php/Top_10_2017-Top_10
– Rejected...
– A1: Injection
– A2: Broken Authentication and Session Management
– A3: Cross-Site Scripting (XSS)
– All of the above related to development (8 out of 10 in total)

13. 13© 2017 Rogue Wave Software, Inc. All Rights Reserved.
• (Security) Training
• Security audit
• Application audit

14. 14© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Security pillars 2/2 - Stack
• Support for PHP
• Support for OS
– Hardened CentOS at AWS
• Support for database
• Support for container orchestration
– Docker Swarm, Kubernetes

15. 15© 2017 Rogue Wave Software, Inc. All Rights Reserved.

16. 16© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Scale quickly and efficiently

17. 17© 2017 Rogue Wave Software, Inc. All Rights Reserved.
PHP 7 is fast
0
100
200
300
400
500
600
Magento 1.9 Drupal 7 WordPress 4.1 ZF2 Laravel
PHP 5.6 PHP 7
Requests per Second

18. 18© 2017 Rogue Wave Software, Inc. All Rights Reserved.
PHP 7 is
fast
https://engineering.tumblr.com/post/152998126990/php-7-at-tumblr

19. 19© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Two questions
• Is your app scalable?
– Maybe you know
– Architecture audit
• When to scale?
– Monitoring
• Zend Server

20. 20© 2017 Rogue Wave Software, Inc. All Rights Reserved.

21. 21© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Orchestration
Deployment

22. 22© 2017 Rogue Wave Software, Inc. All Rights Reserved.
(More than) Compute power
• Virtual machines?
• Cloud? (AWS, Azure, Google, ...)
• Container? (Docker, Rocket, ...)

23. 23© 2017 Rogue Wave Software, Inc. All Rights Reserved.

24. 24© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Automation

25. 25© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Tuning best practices

26. 26© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Tuning best practices
Performance?

27. 27© 2017 Rogue Wave Software, Inc. All Rights Reserved.

28. 28© 2017 Rogue Wave Software, Inc. All Rights Reserved.
First step - Monitoring
Left shift XDebug Z-Ray XHProf
Infrastructure
monitoring
Nagios Monit Munin
App
monitoring
Code tracing
Zend Server
monitoring
rules
ELK

29. 29© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Find the bottleneck

30. 30© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Be careful with diagrams 1/3
db_exec()
812 ms
ws_call()
336 ms
render()
145 ms
helper()
17 ms
translate()
12 ms
user
()
10
ms
permission()
8 ms

31. 31© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Be careful with diagrams 2/3
db_exec()
36 ms
ws_call()
336 ms
render()
145 ms
helper()
17 ms
translate()
12 ms
user()
10 ms
permission()
8 ms

32. 32© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Be careful with diagrams 3/3
db_exec()
36 ms ws_call()
8 ms
render()
145 ms
helper()
17 ms
translate()
12 ms
user()
10 ms
permission()
8 ms

33. 33© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Optimize wisely

34. 34© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Do not over-architect

35. 35© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Caching
• OpCode Cache
• Data Cache
– Zend Server Data Cache
– Memcache
– Redis
• Page Cache
– Zend Server Page Cache
– Varnish

36. 36© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Job Queue
• Parallel execution
• Run scripts offline
• Run scripts on other systems
• Distribute the load – space and time

37. 37© 2017 Rogue Wave Software, Inc. All Rights Reserved.

38. 38© 2017 Rogue Wave Software, Inc. All Rights Reserved.
“We wanted to be able to
scale up and sell other
services on the same
foundation, not just build
telecom functionality.”
Youri Treur
director e-commerce and support at Simpel

39. 39© 2017 Rogue Wave Software, Inc. All Rights Reserved.
When and why do-it-yourself fails

40. 40© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Dev, DevOps
• Application migration
• Framework migration
• Tests
• Tools
• OS upgrade
• Best practices
Management
• Time-to-market
• Reduce risk
• Minimize costs

41. 41© 2017 Rogue Wave Software, Inc. All Rights Reserved.
“Being a game changer is all
about time to market. This
means having efficient
change management, being
flexible as a company [...].
Finding suppliers that are the
best at what they do helped
us do this.”
Kai Stevens, Enrise

42. 42© 2017 Rogue Wave Software, Inc. All Rights Reserved.

43. 43© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Danke Schön!
jan.burkl@roguewave.com

44. 44© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Watch the on-demand webinar

45. 45© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Q&A

46. 46© 2017 Rogue Wave Software, Inc. All Rights Reserved.
ZendCon 2017

47. 47© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Stay tuned
Oct. 11: PHP industry roundtable
Join our panel of experts in an open discussion on the latest in PHP news,
technologies, programming practices, and case studies.
Register now.

48. 48© 2017 Rogue Wave Software, Inc. All Rights Reserved.