Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Securing the network is more work than just securing the code, because now there's a network in the way.

For all the repetition you have on this thread, can you summarize it with the actual benefit that you have gained in a serious production use?



> Securing the network is more work than just securing the code, because now there's a network in the way.

I very much disagree.

> For all the repetition you have on this thread, can you summarize it with the actual benefit that you have gained in a serious production use?

I already have summarized it. All I've done since is correct people being incorrect with regards to my summary.

If you want a specific example, here's a blog post I wrote a long time ago (the dates are incorrect since we moved websites): https://www.graplsecurity.com/post/architecting-for-performa...


The only potential benefit there was for security, specifically because of your security-based product and the async nature of its processing. And even that was just relying on the ephemeral nature of lambdas instead of other security constructs or simply resetting instances of a monolith to accomplish exactly the same thing.

Nothing in that article explained a clear need or benefit of microservices.


> because of your security-based product

Nothing in the article has to do with the product or the fact that it's security related, other than to provide a motivating use case.

> The only potential benefit there was for security

And performance.

> even that was just relying on the ephemeral nature of lambdas

I think you've failed to understand the article, which may be my fault, I haven't read it in a long time. The key is isolation. Ephemerality gives you a sort of temporal isolation. Splitting your messaging from your data storage gives you a capability based isolation. And so on.

It also means we can scale to the limits of S3/SQS - each service is itself stateless, the majority of state is managed in SQS, which could be quite loose about its consistency since every service is idempotent - arguably a form of temporal isolation.

What I've described in this article is effectively the actor model. I feel like I don't have to really justify the benefits of the actor model with regards to scale?


actor model != microservices.

What part of microservices (split functionality with completely separate runtime artifact deployed to separate servers) is needed for actors? You can have actors in a monolith.


No part of microservices is needed for actors and I didn't imply that at all. I said that microservices can be easily modeled as actors.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: