Going on the Road Less Bumpy
summary
A new PKI is built from scratch to serve IoT and replace a legacy CA stack, written in Go and interfacing with dedicated HSMs via a community P11 wrapper. Design choices: hide ASN.1/C binary PKI details behind a lightweight developer API, favor vertical tuning then rack-level scaling, and optimize HTTP buffering to gain 5x throughput. Operational targets shift from ~30 million web certs to billions of devices; early load estimates prove ~10× higher than expected and the platform meets throughput and compliance constraints.
AI-written summary · about
chapters (10)
- 0:00Start
- 1:35Traffic Stats
- 4:26Iot
- 6:56Scalability
- 9:53Step Scaling Model
- 10:24Vertical Scaling
- 20:05Prototyping a New Platform
- 22:07Avoiding Variable Shadowing
- 23:53Subtests
- 24:57The Ecosystem
