ApacheCon 2016

Apache CloudStack is a high-availability orchestration platform for public and private Infrastructure as a Service clouds. With so many moving parts in the typical IaaS cloud, troubleshooting the issues that inevitably arise can challenge even the most seasoned IT professional. This talk will help cloud administrators understand, troubleshoot, and (most importantly) solve common issues faced during the implementation and maintenance of CloudStack. Particular problem areas will be covered including networking and VLANs, Security Groups, hosts (hypervisors), system VMs, virtual routers, and log files. Real-world examples will be used wherever possible.

Apache Ignite is one of the fastest growing apache project. The presentation will take the audience on a roadmap discovery of Ignite moving to a convergent storage model. We'll discuss the reasons, real-life use cases and technology approaches to deliver a consistent & universal data processing platform regardless of where data resides relative to HDD, flash or DRAM.

With Docker in the cloud offerings such as Carina and other similar services, it is fairly easy to create extremely cheap SaaS solutions. This talk will explore specifically how to programatically configure Docker (using Apache jclouds) to repeatedly deploy different applications to the cloud and make them available to multiple users.

Building software using open-source libraries is the new normal but the bad guys are trying to spoil the party having figured out that re-usable code means reusable vulnerabilities. In this presentation we will show you how the threat landscape has changed and how the end-to-end open-source software supply chain is being attacked with actual exploits and real examples. We will show you what hackers are doing and how to protect yourself and your team from these attacks so you can carry on shipping safe and secure open-source projects. We will cover:

Bad security advice from Q & A sites
Malicious code editor plugins
When bad things happen to good build and package managers
Trusting binary repositories like Maven central
Vulnerabilities and backdoors in open-source libraries
Hiding bad things in source code management
Abusing continuous integration systems to mine Bitcoins