Skip to Content
Google系统架构解密: 构建安全可靠的系统
book

Google系统架构解密: 构建安全可靠的系统

by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield
September 2021
Beginner to intermediate
392 pages
12h 13m
Chinese
Posts & Telecom Press
Content preview from Google系统架构解密: 构建安全可靠的系统
弹性设计
125
其次再考虑以下选项:
3.
如果你所在组织的规模或风险规避能力能证明
,对主动自动化进行投入能实现弹性,请
考虑部署降低负载和限流功能;
4.
评估防御
DoS
攻击的有效性(参见第
10
);
5.
如果你构建的是低依赖性解决方案
,请引入一个流程或机制来确保它在一段时间内能保
持低依赖性。
你可能很难克服对提升弹性投入而面临的阻力,因为它的收益体现在不出问题上。但以下
这些论点可能会有所帮助。
部署故障域和控制爆炸半径将对未来的系统产生持久的影响。隔离技术可以鼓励或强制
良好的划分运营故障域。一旦实现到位,它们将不可避免地让实施和部署不必要的耦合
或脆弱系统难以实现。
定期变更密钥和轮换的技术和演示不仅可以为安全事件做好准备,还可以提供加密的灵
活性。例如,可以升级加密原语。
部署服务的高可用性实例带来的额外成本相对较低,这提供了一种经济实惠的方式来考
察你可以在多大程度上提高服务的可用性。弃用它的成本也很低。
降低负载和限流的功能,以及在
8.3
节中涉及的其他方法
,可以降低公司需要维护的资
源成本。由此产生的用户可见的改进通常适用于最有价值的产品功能。
在防御
DoS
攻击时,可控降级至关重要,有助于提高第一反应的速度和效率。
低依赖性的解决方案相对比较昂贵,在实践中很少使用。要确定它们是否物有所值,了
解一下需要多长时间才能提出业务关键型服务的所有依赖项,这有助于确定这些服务是
否物有所值。然后你可以比较一下成本,并得出结论:把时间投入到别处是否更好。
无论你组合出什么样的弹性解决方案 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

管理Kubernetes

管理Kubernetes

Brendan Burns, Craig Tracey
Python机器学习基础教程

Python机器学习基础教程

Andreas C. Müller, Sarah Guido
解密金融数据

解密金融数据

Justin Pauley

Publisher Resources

ISBN: 9787115569257