How to quit ssh in 90 days

How to quit ssh in 90 days

Ebaa01b82b8763ac12c8219765e4c93c?s=128

Jérôme Dassonville

February 23, 2018
Tweet

Transcript

  1. 6.

    What is ssh ? SSH is a cryptographic network protocol

    for operating network services securely over an unsecured network. @jdassonvil
  2. 7.
  3. 8.

    The cools kids like ssh • You can do everything

    you want • Your family think you are talking to the matrix • You can impress your coworkers @jdassonvil
  4. 10.

    Why it’s bad • You can do everything you want

    • It doesn’t force you to define a process • It does not scale @jdassonvil
  5. 14.

    What do we do with our ssh connection ? 1.

    Manage software pieces ◦ Deploy binaries and configuration ◦ Configure load balancers and firewalls ◦ Upscale or downscale @jdassonvil
  6. 15.

    What do we do with our ssh connection ? 1.

    Manage software pieces 2. Manage the platform ◦ Configure servers ◦ Upgrades OS ◦ Clean up stuff @jdassonvil
  7. 16.

    What do we do with our ssh connection ? 1.

    Manage software pieces 2. Manage the platform 3. Troubleshoot ◦ Read the logs ◦ Check the system metrics ◦ Read the config files @jdassonvil
  8. 24.

    What do we do with our ssh connection ? 1.

    Manage software pieces 2. Manage the platform 3. Troubleshoot @jdassonvil
  9. 27.

    Deployment maturity levels Level 1: No automation Level 2: Daily

    operation are scripted Level 3: THE deploy button Level 4: Changes flow continuously to prod
  10. 30.

    What containers technology brings us A set of good old

    unix features (cgroup, namespaces) that guarantee the isolation of your applications + a packaging format + an api to control them + many more we won’t discuss
  11. 33.

    How to move to containers 1. Write a dockerfile for

    all your apps 2. Run them with pragmatism ◦ Use host network ◦ Mount host volumes ◦ Don’t try to run more services per host 3. Update your custom tools (if any)
  12. 34.

    What do we do with our ssh connection ? 1.

    Manage software pieces 2. Manage the platform 3. Troubleshoot @jdassonvil
  13. 37.

    Improving the culture • Break the habits • Don’t make

    people’s life easy on servers • Kill your pets • Monitor your ssh usage
  14. 38.

    Revoking ssh access • You might have to do it

    to comply with HIPAA/PCI/… • If not make it a real privilege