Backstage
Pedro Dias
petermdias@gmail.com
@pedromdias
http://pedromadias.wordpress.com
Who am i?

Petrol-head in the weekends
Lecturer at Polytechnic of Tomar
System Engineer at Ptisp.pt
Independent consultant/advisor
Geek without vacations in the last 12 years
System engineer?
Numbers
~2800 wordpress’s
~550 drupal’s
~4700 joomla’s
~280 moodle’s
50 hosting servers
~6000 .PT domains
~7000 other TLD domains
App Security

A nightmare...
  Each account is a black box to the provider
    Core updates?
    Modules/plugins updates?
  Backups are your best friend and enemy
  simultaneously
Damage control/prevention
Manual verification
  Logistic problem
Security tools automation
  wpscan
  joomscan
  maldet
  ...
Workflow

Customer sends an email requesting scan
  Email is processed
  Scan request is sent to the account’s target server
Account gets scanned
Report is sent to the customer and administrators
Monitorization
Typical LAMP stack

          Application

                PHP

       Apache         mySQL

            Linux
Improving a little

     Application

           PHP           Caching (APC,
  Apache         mySQL   memcached, ...)

       Linux
Swapping stack - LEMP

           Application

           PHP-FPM

        nginx           mySQL

                Linux
Lets scale

    Application

    PHP-FPM
                  mySQL
      NGINX
                  Linux
      Linux       VM 0
      VM 1
Scale!
                Loadbalancer

  Application      Application

  PHP-FPM          PHP-FPM

   NGINX            NGINX

    Linux            Linux
                                        ...
   VM 1            VM 2

                   mySQL

                    Linux
                                 VM 0   ...
Cloud
Autoscale
  Scale cluster creating more nodes
    Needs a template node
  Scale each node


Redundancy
  Equally distribute nodes over all the hypervisors
Cloud architecture
IaaS
Platforms
   Onapp
   Openstack
   Cloudstack
Product
   Amazon EC2
   Google Compute

Wordpress Meetup ISCTE