bbrazil

30 ms·

241.
by bbrazil 11y ago
> The irony is that Docker is based on software that underpins Google’s vast online empire. Doesn't Rocket also use cgroups?
242.
Prometheus Monitoring Spreads Through the Internet(prometheus.io)
7 points by bbrazil 11y ago|0 comments
243.
by bbrazil 11y ago
I'd recommend My Philosophy on Alerting by Rob Ewaschuk - https://docs.google.com/document/d/199PqyG3UsyXlwieHaqbGiWVa... as a good approach to take. We've fleshed this out a bit more in the Prometheus b
244.
by bbrazil 11y ago
"in anger" means used in a real-life situation, not just playing around.
245.
by bbrazil 12y ago
> Monitoring first: we have a strong desire to increase this but we're a bit at a loss as to what a good light-weight solution is here Prometheus is designed with this in mind. Instrumentation is easy to add and takes care of things
246.
by bbrazil 12y ago
What's base 32 used for?
247.
by bbrazil 12y ago
HAProxy is fundamentally a L3/L4 proxy, with some specific HTTP features (all the nice throttling stuff can use only L3/L4 signals for example).
248.
by bbrazil 12y ago
Looks like Prometheus support is in the works too: https://github.com/grafana/grafana-plugins/pull/13 That repo also has Atlas, Zabbix and KairosDB plugins.
249.
by bbrazil 12y ago
If that was the craziest thing I was doing, I'd be doing well :)
250.
by bbrazil 12y ago
> cc would be reachable via 50.jfoo.ubar.cc.borg.google.com. I've implemented similar at my current job, as that sort of naming is very convenient. http://www.boxever.com/using-google-apps-openid-connect-with... has
251.
by bbrazil 12y ago
One of the changes hinted at here is that you can now specify that a task will always run using the 'always' tag - handy for things like ec2_facts which was a long requested feature ( https://github.com/ansible&#x2F
252.
by bbrazil 12y ago
That's a security point, not a reliability point. They will be more reliable, as you don't need to talk to e.g. MySQL that might be down or slow. The disadvantage is that they're difficult to revoke. Cryptography is used to v
253.
by bbrazil 12y ago
We've recently been looking at adding JWT, and one of the things I looked out for was that we were protected against downgrade attacks. This was done both as a check of the current library code, and an explicit check on our side that t
254.
by bbrazil 12y ago
Such a token doesn't require you to have a database to lookup and maintain the user session/permissions in, which can lead to more reliable and lower latency designs.
255.
by bbrazil 12y ago
Be wary if you do anything with signed data before you verify the signature. http://www.thoughtcrime.org/blog/the-cryptographic-doom-prin...
256.
by bbrazil 12y ago
This could be handy for package distribution, is there mention of the propagation delay?
257.
by bbrazil 12y ago
With a 3s average response time and presumably replication across multiple disks, you've plenty of scope to schedule requests in a way that they won't affect performance. In 3s on one disk you can do roughly 5k seeks and read up t
258.
by bbrazil 12y ago
My guess would be disk drives that are otherwise used for I/O intensive purposes, and where there's tons of unused/wasted space. 4MB/s is only around 4% of the bandwidth of a modern 1TB hard disk.
259.
by bbrazil 12y ago
I'd tend to agree. I've found many times that when a system is hard to monitor that it's also difficult to manage more generally, and that a rearchitecture is in order.
260.
by bbrazil 12y ago
https://github.com/tools/godep/blob/master/Readme.md explains it. It's not really a package manager, though you can get some of the same results. It's more pulling in exact build dependencies.
261.
by bbrazil 12y ago
The closest is godep, which lets you take snapshots. We're having lots of fun with this with Prometheus, quite a bit of work is ongoing to get it into Debian due to this for example.
262.
by bbrazil 12y ago
If you can read the private key from just one of these machines then you can impersonate any of them.
263.
by bbrazil 12y ago
You'd usually transfer many metrics in a single HTTP request, so the cost is amortized in most cases.
264.
by bbrazil 12y ago
HTTP collection doesn't really add a lot of overhead. You might be interested in the https://github.com/prometheus/collectd_exporter as collectd works in a similar way. For machine monitoring http://www
265.
by bbrazil 12y ago
You may want to look at the console templates, as they don't have any dependencies: http://prometheus.io/docs/visualization/consoles/
266.
by bbrazil 12y ago
> having much more (all?) of the information right there to browse makes a big difference. I think it's important to have structure in your consoles so you can follow a logical debugging path, such as starting at the entry point of
267.
by bbrazil 12y ago
> huge page of graphs each with dozens to hundreds of graph lines From experience that much data on a page makes it quite difficult to comprehend, even for experts. I've seen hundreds of graphs on a single console, which was complet
268.
by bbrazil 12y ago
For comparison I tried out >1k cpu plots in Prometheus on a m1.large with 2xHDDs. It took 20s with a cold cache.
269.
by bbrazil 12y ago
> Can you collect enough measurements for the time series database to be useful? Yes, instrument everything. See http://prometheus.io/docs/practices/instrumentation/#how-to-... > I worry that I would ha
270.
by bbrazil 12y ago
> the March 2014 comparison of Influx is outdated IMO. I think we expected that, feel free to add comments on the doc for things that are different now.

More ›