3 Risks of Status Quo for Your DNS

Scenario: Interior, a war room, unfathomable graphs on the wall blinking.

A twitter timeline is shown. Tweets start flying by complaining of buffering. A woman looks up from her laptop, underlighting her face. A red phone rings; the CEO just experienced rebuffering.

Woman: "Mother of god".

A look of panic shoots across her face. She opens the Mux dashboard.

Woman: "Oh, it's just Akafrontly playing up again. Easy fix. Good thing the Mux Dashboard helps me see real time QoE data, and lets me drill down into what’s causing the problem".

She types furiously for a few seconds and the problem resolves.

Friends and colleagues cheer. The woman is promoted, and the stock price doubles. Her husband cooks her favorite dinner that night and her children do their homework without complaining.

Watch this session to learn how you can achieve redundancy, high-availability, and great end-user performance utilizing NS1 managed and dedicated DNS solutions.

With the increase in connected devices and introduction of cloud technologies, the traditional media landscape continues to experience shifts in the way consumers interact. Video has become an even more powerful tool for organizations across all industries to reach their global audiences. This talk will show how the Amazon Web Services is helping companies build highly available and redundant video workloads that provide the scale and performance demanded by today’s consumer.

Watch this session to learn how you can achieve redundancy, high-availability, and great end-user performance utilizing NS1 managed and dedicated DNS solutions.

Taming the complex distributed systems we're responsible for requires changing not just the tools and technical approaches we use; it also requires changing who is involved in production, how they collaborate, and how we measure success. In this talk, you'll learn about several practices core to production excellence: giving everyone a stake in production, collaborating to ensure observability, measuring with Service Level Objectives, and prioritizing improvements using risk analysis.

Scenario: Interior, a war room, unfathomable graphs on the wall blinking.

A twitter timeline is shown. Tweets start flying by complaining of buffering. A woman looks up from her laptop, underlighting her face. A red phone rings; the CEO just experienced rebuffering.

Woman: "Mother of god".

A look of panic shoots across her face. She opens the Mux dashboard.

Woman: "Oh, it's just Akafrontly playing up again. Easy fix. Good thing the Mux Dashboard helps me see real time QoE data, and lets me drill down into what’s causing the problem".

She types furiously for a few seconds and the problem resolves.

Friends and colleagues cheer. The woman is promoted, and the stock price doubles. Her husband cooks her favorite dinner that night and her children do their homework without complaining.

The team at Walmart Labs supports the delivery of hundreds of applications a year globally. Doing so successfully requires fast delivery in a way that works to meet different business, location, and overall application needs. Attend this talk and learn how the team:

- Leverages flexible templates to meet customer needs
- Deploys CDN configurations with Terraform
- Meets specific standards for delivering applications

DNSSEC is a system to verify the authenticity of data in the DNS, and allows us to detect DNS spoofing and cache poisoning. Many organizations today leverage multiple distinct DNS providers to serve their DNS zones, for increased redundancy and survivability. Deploying DNSSEC in such an environment presents challenges when each provider signs zone data with their own keys.

In this talk, we will give an overview of DNSSEC, and describe joint work we have done with NS1 to develop a system to successfully enable "Multi-Signer" DNSSEC deployments.

DNSSEC is a system to verify the authenticity of data in the DNS, and allows us to detect DNS spoofing and cache poisoning. Many organizations today leverage multiple distinct DNS providers to serve their DNS zones, for increased redundancy and survivability. Deploying DNSSEC in such an environment presents challenges when each provider signs zone data with their own keys.

In this talk, we will give an overview of DNSSEC, and describe joint work we have done with NS1 to develop a system to successfully enable "Multi-Signer" DNSSEC deployments.

The team at Walmart Labs supports the delivery of hundreds of applications a year globally. Doing so successfully requires fast delivery in a way that works to meet different business, location, and overall application needs. Attend this talk and learn how the team:

- Leverages flexible templates to meet customer needs
- Deploys CDN configurations with Terraform
- Meets specific standards for delivering applications

Running largescale critical live streaming events requires content owners to be nimble, remove single points of failure, and ensure redundancy and failover within their workflows to flawlessly deliver streams to end-users over a myriad of devices and platforms.

When live streaming an event, the ultimate goal is to provide the best viewer experience, meaning the process flow needs to be optimized to reduce glass-to-glass latency or delays.

Join James Royalty as he walks you through:

* how to provide the most exceptional user experience
* each step of the workflow -- capturing the event on camera, encoding, processing, and delivering
* choosing the most effective streaming protocol

Continuous Integration and Continuous Delivery both brought fundamental changes to how we build, operate, and maintain infrastructure at scale. Our knowledge of the systemic properties of complex systems has improved, leading us into a new era. Much of this knowledge has been at the expense of reliability "best practices" that feel very intuitive, but are not backed up by data. Forward-looking enterprises reject those myths and are now discussing their CI/CD, and now Continuous Verification strategy.

This session will provide a brief introduction to VoltMesh & VoltStack which provides a unified Network & Security stack, an ADN (Application Delivery Network), and a distributed application management solution across Hybrid, Multi-Cloud or Edge. It will be followed by a demo highlighting how a Developer/DevOps Admin can take their k8s app and:

- Discover and Securely Deliver access to the app via our Globally Distributed Kubernetes GW across hybrid/multi-cloud environments with the help of NS1 for DNS.

- Increased Application Performance by using Volterra’s Globally Distributed Application Delivery Network (ADN)

- NetOps/SecOps teams can configure Enterprise-wide policies, with end-to-end observability of Infrastructure & Application logs and metrics.

In a nutshell, Continuous Verification comes down to making sure that DevOps teams put as many checks as possible into their CI/CD pipelines. These checks use external systems to validate the performance, security, and cost of your app without asking your engineers to do that manually. The systems that provide the data which decided whether your deployment goes to production or not, can also be used to help your engineers understand where the bottlenecks are in the process. With more checks in your automated pipeline, you have fewer manual tasks, less overhead, and better decisions to deploy to production or not. All that together means you get to spend more time at the beach!

Enterprise networking has profoundly shifted in recent months, as remote work becomes the new normal and promises to stay for a foreseeable future. With the Internet critical to enterprise communication and business continuity, application performance now relies on a best-effort and vulnerable fabric. This session will explore — with real-world examples — how application monitoring must evolve in a post-pandemic world, with Internet visibility at its forefront.

Watch this webinar to see how DNS is used to apply world class cyber threat intelligence in order to protect organisations, and gain an insight into how integrated cyber security solutions reduce the time to detection and reduce risk.

In application networking, we’re used to traffic flowing like a river; users travel down predetermined paths until they reach their destination. Concepts like Infrastructure-as-Code, CI/CD, and Progressive delivery are taking a greater stage in developer environments, and the need for application networks to become more dynamic has grown equally. We now expect the ability to shape this river WHILE it’s being traveled on. This sounds good on paper, but how can we use something like HashiCorp Consul to adopt “DevOps focused” concepts like Progressive Delivery? What does consuming this capability actually look like? In this session we’ll take our boat on that river, and look at how we can use Consuls Service Mesh to shape it’s flow and accelerate its delivery.

We can't think of a worse "Egg-on-your-Face" moment than waking up to a bunch of 'Help! Our certs have expired' messages on Slack - especially if you prefer your eggs scrambled, like I do.

So a short while ago, and a few months shy of our own certificate renewal deadline, we at Gannett decided this was an opportune time to revisit how we manage our certificates and their renewals. Specifically, how can we offer a more self-serve and automated approach to the provisioning and renewal of certificates in Kubernetes for our ourselves, our customers and their applications? And since our main DNS provider is NS1, how can we leverage them as a trusted certificate solver? As we've already exposed a simple way for our customers to add and update the some of their DNS records in NS1(using External DNS), perhaps we can do something similar for our TLS certificates on our platform. Watch this session to learn how we at Gannett have been using both External DNS and Cert-Manager.io to streamline the DNS management for our customer's applications, as well as their TLS certificates, always with NS1 as our main provider."

During a migration of data centers you may find yourself with sharded user data living in both your new data center and your previous hosting location. When a user’s full data set lives in one region or hosting facility, the best experience will come from routing their requests to that region directly so as to minimize accessing data across data centers. During Fitbit’s live migration to Google Cloud, we were migrating sharded user data from our existing home to GCP in batches big and small over the course of several weeks, effectively giving their data a new home. Once a user’s data was moved, we wanted their user experience to realize the benefits of accessing data with as little delay as possible.

This story is how Fitbit leveraged edge routing of client requests to keep traffic pegged nearest to where the user's data was stored while our data was being migrated. We’ll discuss in detail our implementation of this routing layer, including automation of route updates and monitoring of routing decisions. We’ll also provide tips for how to plan the movement of your data incrementally, so that you can make optimal use of these routing techniques. Progressive movement of user data and traffic will be a challenge for any service that is too large to move in one go. These techniques and lessons will help you plan and execute that move with the best results for your users.