Ongoing management of your PHP 7 application
Download as PPTX, PDF0 likes312 views
The document discusses ongoing management strategies for PHP 7 applications, including security, scalability, and performance optimization. Key topics include security pillars, monitoring practices, and the importance of effective change management in development. It highlights the need for timely updates and technology assessments to maintain application efficiency.
![7© 2017 Rogue Wave Software, Inc. All Rights Reserved.
Security
https://en.wikipedia.org/wiki/Security
“Security is the degree of resistance to,
or protection from, harm. It applies to
any vulnerable and/or valuable asset
[…]”](https://image.slidesharecdn.com/ongoingmanagementofyourphp7application1-170928184632/85/Ongoing-management-of-your-PHP-7-application-7-320.jpg)
![41© 2017 Rogue Wave Software, Inc. All Rights Reserved.
“Being a game changer is all
about time to market. This
means having efficient
change management, being
flexible as a company [...].
Finding suppliers that are the
best at what they do helped
us do this.”
Kai Stevens, Enrise](https://image.slidesharecdn.com/ongoingmanagementofyourphp7application1-170928184632/85/Ongoing-management-of-your-PHP-7-application-41-320.jpg)
Ongoing management of your PHP 7 application
- 1. 1© 2017 Rogue Wave Software, Inc. All Rights Reserved. Ongoing management of your PHP 7 application Jan Burkl Solution consulting manager
- 2. 2© 2017 Rogue Wave Software, Inc. All Rights Reserved. Ask the PHP experts: Series overview Now: Ongoing management of your PHP 7 application Oct. 11: PHP industry roundtable Join our panel of experts in an open discussion on the latest in PHP news, technologies, programming practices, and case studies.
- 3. 3© 2017 Rogue Wave Software, Inc. All Rights Reserved. Presenter Jan Burkl Solution Consulting Manager, Central Europe Rogue Wave Software jan.burkl@roguewave.com Twitter: @janatzend
- 4. 4© 2017 Rogue Wave Software, Inc. All Rights Reserved. Watch the on-demand webinar
- 5. 5© 2017 Rogue Wave Software, Inc. All Rights Reserved. Security Tuning DIY Scaling
- 6. 6© 2017 Rogue Wave Software, Inc. All Rights Reserved. Security tips and techniques
- 7. 7© 2017 Rogue Wave Software, Inc. All Rights Reserved. Security https://en.wikipedia.org/wiki/Security “Security is the degree of resistance to, or protection from, harm. It applies to any vulnerable and/or valuable asset […]”
- 8. 8© 2017 Rogue Wave Software, Inc. All Rights Reserved.
- 9. 9© 2017 Rogue Wave Software, Inc. All Rights Reserved. Security pillars
- 10. 10© 2017 Rogue Wave Software, Inc. All Rights Reserved. Security pillars Application Stack
- 11. 11© 2017 Rogue Wave Software, Inc. All Rights Reserved. Security pillars 1/2 – PHP application • Framework – Community – Security policy • Custom code – Skillset – QA tools
- 12. 12© 2017 Rogue Wave Software, Inc. All Rights Reserved. OWASP • Open Web Application Security Project • Not-for-profit • Make software security visible • https://www.owasp.org/index.php/Top_10_2017-Top_10 – Rejected... – A1: Injection – A2: Broken Authentication and Session Management – A3: Cross-Site Scripting (XSS) – All of the above related to development (8 out of 10 in total)
- 13. 13© 2017 Rogue Wave Software, Inc. All Rights Reserved. • (Security) Training • Security audit • Application audit
- 14. 14© 2017 Rogue Wave Software, Inc. All Rights Reserved. Security pillars 2/2 - Stack • Support for PHP • Support for OS – Hardened CentOS at AWS • Support for database • Support for container orchestration – Docker Swarm, Kubernetes
- 15. 15© 2017 Rogue Wave Software, Inc. All Rights Reserved.
- 16. 16© 2017 Rogue Wave Software, Inc. All Rights Reserved. Scale quickly and efficiently
- 17. 17© 2017 Rogue Wave Software, Inc. All Rights Reserved. PHP 7 is fast 0 100 200 300 400 500 600 Magento 1.9 Drupal 7 WordPress 4.1 ZF2 Laravel PHP 5.6 PHP 7 Requests per Second
- 18. 18© 2017 Rogue Wave Software, Inc. All Rights Reserved. PHP 7 is fast https://engineering.tumblr.com/post/152998126990/php-7-at-tumblr
- 19. 19© 2017 Rogue Wave Software, Inc. All Rights Reserved. Two questions • Is your app scalable? – Maybe you know – Architecture audit • When to scale? – Monitoring • Zend Server
- 20. 20© 2017 Rogue Wave Software, Inc. All Rights Reserved.
- 21. 21© 2017 Rogue Wave Software, Inc. All Rights Reserved. Orchestration Deployment
- 22. 22© 2017 Rogue Wave Software, Inc. All Rights Reserved. (More than) Compute power • Virtual machines? • Cloud? (AWS, Azure, Google, ...) • Container? (Docker, Rocket, ...)
- 23. 23© 2017 Rogue Wave Software, Inc. All Rights Reserved.
- 24. 24© 2017 Rogue Wave Software, Inc. All Rights Reserved. Automation
- 25. 25© 2017 Rogue Wave Software, Inc. All Rights Reserved. Tuning best practices
- 26. 26© 2017 Rogue Wave Software, Inc. All Rights Reserved. Tuning best practices Performance?
- 27. 27© 2017 Rogue Wave Software, Inc. All Rights Reserved.
- 28. 28© 2017 Rogue Wave Software, Inc. All Rights Reserved. First step - Monitoring Left shift XDebug Z-Ray XHProf Infrastructure monitoring Nagios Monit Munin App monitoring Code tracing Zend Server monitoring rules ELK
- 29. 29© 2017 Rogue Wave Software, Inc. All Rights Reserved. Find the bottleneck
- 30. 30© 2017 Rogue Wave Software, Inc. All Rights Reserved. Be careful with diagrams 1/3 db_exec() 812 ms ws_call() 336 ms render() 145 ms helper() 17 ms translate() 12 ms user () 10 ms permission() 8 ms
- 31. 31© 2017 Rogue Wave Software, Inc. All Rights Reserved. Be careful with diagrams 2/3 db_exec() 36 ms ws_call() 336 ms render() 145 ms helper() 17 ms translate() 12 ms user() 10 ms permission() 8 ms
- 32. 32© 2017 Rogue Wave Software, Inc. All Rights Reserved. Be careful with diagrams 3/3 db_exec() 36 ms ws_call() 8 ms render() 145 ms helper() 17 ms translate() 12 ms user() 10 ms permission() 8 ms
- 33. 33© 2017 Rogue Wave Software, Inc. All Rights Reserved. Optimize wisely
- 34. 34© 2017 Rogue Wave Software, Inc. All Rights Reserved. Do not over-architect
- 35. 35© 2017 Rogue Wave Software, Inc. All Rights Reserved. Caching • OpCode Cache • Data Cache – Zend Server Data Cache – Memcache – Redis • Page Cache – Zend Server Page Cache – Varnish
- 36. 36© 2017 Rogue Wave Software, Inc. All Rights Reserved. Job Queue • Parallel execution • Run scripts offline • Run scripts on other systems • Distribute the load – space and time
- 37. 37© 2017 Rogue Wave Software, Inc. All Rights Reserved.
- 38. 38© 2017 Rogue Wave Software, Inc. All Rights Reserved. “We wanted to be able to scale up and sell other services on the same foundation, not just build telecom functionality.” Youri Treur director e-commerce and support at Simpel
- 39. 39© 2017 Rogue Wave Software, Inc. All Rights Reserved. When and why do-it-yourself fails
- 40. 40© 2017 Rogue Wave Software, Inc. All Rights Reserved. Dev, DevOps • Application migration • Framework migration • Tests • Tools • OS upgrade • Best practices Management • Time-to-market • Reduce risk • Minimize costs
- 41. 41© 2017 Rogue Wave Software, Inc. All Rights Reserved. “Being a game changer is all about time to market. This means having efficient change management, being flexible as a company [...]. Finding suppliers that are the best at what they do helped us do this.” Kai Stevens, Enrise
- 42. 42© 2017 Rogue Wave Software, Inc. All Rights Reserved.
- 43. 43© 2017 Rogue Wave Software, Inc. All Rights Reserved. Danke Schön! jan.burkl@roguewave.com
- 44. 44© 2017 Rogue Wave Software, Inc. All Rights Reserved. Watch the on-demand webinar
- 45. 45© 2017 Rogue Wave Software, Inc. All Rights Reserved. Q&A
- 46. 46© 2017 Rogue Wave Software, Inc. All Rights Reserved. ZendCon 2017
- 47. 47© 2017 Rogue Wave Software, Inc. All Rights Reserved. Stay tuned Oct. 11: PHP industry roundtable Join our panel of experts in an open discussion on the latest in PHP news, technologies, programming practices, and case studies. Register now.
- 48. 48© 2017 Rogue Wave Software, Inc. All Rights Reserved.