Perimeter Management at Spotify

This presentation will focus on the web load balancers and various proxy systems across Spotify perimeter. I’ll explain how we are exposing our service network to the internet and the challenges we faced while automating that.

I will cover the process which allows our developers to punch the holes in the perimeter in an easy and secure way without any SRE assistance.

Transcript

3. Internet
5. Internet Service LOM
12. weblb.gslb.spotify.com sjc.weblb.gslb.spotify.com lon.weblb.gslb.spotify.com sjc1-weblb-a1 sjc1-weblb-a1 sjc1-weblb-a1 sjc1-weblb-a1 lon3-weblb-a1 lon3-weblb-a1 lon3-weblb-a1 lon3-weblb-a1
20. Squid lon3-outbound-a1.spotify.net lon3-outbound-a1.spotify.net lon3-yopass-a1.spotify.net Application Haproxy Squid Squid lon3-outbound-a1.spotify.net Squid Bulk SMS