3 ms·
If we are talking engineering there are OT systems that are not patchable. You cannot blue/green docker deploy machine that is running industrial system. It is
by ozim 7y ago
If we are talking engineering there are OT systems that are not patchable. You cannot blue/green docker deploy machine that is running industrial system. It is all nice and easy if you run web farm where you can just balance stuff to other server.
For the first one, I would say you could make admins use "clear Chromebooks" but probably no one is going to pay for that.
For other banal ones, I would say it is good to remind people about "management bypasses" are not good idea.
- closeparen 7y agoIf just one machine is running an industrial system that can’t go down, you have a serious problem. Hot standby predates web servers.
- AstralStorm 7y agoDepends on the kind of control it's doing. Industrial control requiring milliseconds level availability is extremely hard to fail over. This is how e.g. chip fabs and chemical plants get such loses on power outages. A power plant might be on order of single second of sustain. The solution there is to actually make the full scale redundancy and compartmentalization or accept the losses. Most of the time we're not dealing with that.