Reblaze Case Study on GCP
- 1. 1 Proactive Data Driven Security Superior Web Security Founder and CTO - Reblaze tzury@reblaze.com Tzury Bar Yochay
- 2. 22 and how... What We Do
- 3. 3 Reblaze provides a comprehensive web security solution. Traffic is routed through our cloud platform, which we analyze and inspect in real time to protect our clients. We run on all major clouds (though, we obviously love Google the most). What We Do
- 4. 4 Who Uses Reblaze ● Governments ● Banks ● Insurance companies ● Academic institutions ● Healthcare organizations ● SaaS providers ● eCommerce websites ● Trading and gaming platforms ● Anyone who cares about web security
- 6. 6 ➔ Comprehensive ➔ Immediate ➔ Dynamic ➔ Intelligent ➔ Performant Reblaze Core Foundations
- 8. 8 DNS DDoS Traffic Analysis CDN Global Load Balancing Web Application Firewall Intrusion Prevention Anti Scraping SSL A Unified Platform That Replaces Them All. Comprehensive
- 9. 9 Immediate Scaling Scales in seconds to handle spikes and floods in your traffic — K8S Containers, Pods and Nodes are spawned in seconds. Immediate Analysis Reblaze quickly identifies and blocks hostile traffic, while allowing legitimate traffic through. DPI latency is only ~1.5 ms. Immediate Information Real-time streaming processing, transforming big data into useful information, which helps our emergency response and operations teams to make the right decisions quickly, especially under the pressure of a massive DDoS attack. Immediate
- 10. 10
- 11. 11 Dynamic Every single request is stored in Google BigQuery: Fully managed, petabyte scale, low cost analytics data warehouse. User behavior enforcement based on dynamic, real-time analysis.
- 12. 12 Prediction at Scale Integration to Google global load balancing enables us to automatically scale our platform and handle spikes in traffic using our predictive data models. Build Machine Learning Models Easily Seamlessly transition from training to prediction. Your data scientists understand their data, let them model and analyze it at its source. Or, alternatively, use our off-the-shelf solutions. Intelligent
- 13. 13 Global Load Balancing with IP Anycast A single anycast IP front-ends all your backend instances in regions around the world. Over One Million Queries Per Second Cloud Load Balancing supports 1+ Million queries per second with consistent high performance and low latency. Content Delivery Network (CDN) Reblaze leverages Google's globally distributed CDN, to accelerate content delivery for our protected websites and applications. High Performance — GCP
- 19. 19 Typical Customer Environment Reblazer FE Reblazer BE Reblazer FE Reblazer BE Reblazer FE Reblazer BE © Console FE Console BE Reblazer FE Reblazer BE Reblazer FE Reblazer BE Reblazer FE Reblazer BE Cloud Storage Load Balancer BigQuery Zone B Zone A © Nginx Tornado MongoDB BigQuery Libs Dynamic analysis POD - Console Reblaze Web Proxy Syslog BigQuery Libs
Editor's Notes
- #2: Hello everyone, My name is Tzury Bar Yochay, I am a co-founder and CTO of Reblaze, and I am here to share with you our experience with Google Cloud Platform in general and Kubernetes and Google Container Engine in particular, but first, before moving on, id’ like to thank our friends at Google for this opportunity, today.
- #7: To achieve all this cloud was the natural choice, not only because it was easier to get it done the right way on the cloud, rather, for some of our goals, cloud is the only way. And we will elaborate about this right away.
- #8: Fragmented web of solutions. Specific solutions for specific problems and threats. A comprehensive security concept must be done otherwise.
- #9: Right, the CDN and the load balancing is not our proprietary technology, yet, they are seamlessly integrated and fully controlled by our product via API.
- #10: In security, immediate response is the key. The sooner you detect and prevent, the better. You have no control over your traffic, let alone the ability to protect it is your 'blind' If you have no idea what is going on.
- #12: Policies are dynamically changing in response to trend changes in the traffic.
- #14: It provides cross-region load balancing including automatic multi-region failover which gently moves traffic in fractions if backends become unhealthy. In contrast to DNS-based Global Load Balancing solutions, Cloud Load Balancing reacts instantaneously to changes in users, traffic, network, backend health and other related conditions. Traffic enters Cloud Load Balancing through 32 distinct global load balancing locations, maximizing the distance traveled on Google's fast private network backbone. Cloud CDN lowers network latency, offloads origins, and reduces serving costs. Once you've set up HTTP(S) Load Balancing, simply enable Cloud CDN with a single checkbox.
- #20: Explain the structure