Information is Power

THANKS!

Zequi Vazquez @RabbitLair Information is Power

Ezequiel ”Zequi”Vazquez

Backend Developer

Sysadmin & DevOps

Hacking & Security

Speaker since 2013






Database Contents (?)


Application/Service Logs (?)


User Activity (?)


I bet you can think of more information sources


Too much information and no control


We need to transform information into data


Identify our high level goalsImprove performance

Identify points of failure

Know users behavior

Be aware of SLAs observance

. . .


Metrics definition


Capacity planning


Data storage


From bottom to top


Firewall & IDS/IPS metrics

Scanners (network, sqlmap, spiders)

Bruteforce attacks

Incoming and outcoming connections

Ip addresses, user agents and more

Identify and block (?)


Network metrics

Number of connections/rejections

Speed, bandwidth consumption, latency

Specially relevant on cloud environments


Infrastructure metrics

Monitorize all services on your system

Service response time & uptime

Consider scaling, prepare for peaks

Centralize logs: one log to rule them all


Cache metrics

Available memory & usage

Hit/Miss ratio

Evisceration ratio


System metrics

Identify bottlenecks!

Memory management & swapping

IO usage & free space

Keep an eye on CPU

syslog!


PHP metrics

Number of threads

Memory per thread

Timeouts

Number of requests per second

Opcache usage


Application metrics

Plan error handling and messages smartly

Profiling: log request times

User behavior: It is not spying (?)

SQL queries


Hundreds of options


Nagios

Zabbix

Spiceworks


Munin

Monit

New Relic


Logstash

Splunk

Scribe

Kafka


Did someone mentioned cloud?


Identify your goals

Collect data wisely

Learn to read your metrics

Use data to empower your site



Thank you!

@RabbitLair

zequi[at]lullabot[dot]com


Technology

Information is Power