Rootconf 2019
2019-06-21..2019-06-22
Bangalore, India
Rootconf ·
[Rootconf 2014, Rootconf 2015, Rootconf 2019, Rootconf 2025 Annual Conference]
as the organisers put it
Rootconf is a growing community of systems and operations engineers, DevOps programmers, software engineers and SRE who come together to share real world knowledge about building reliable systems.
who it's for
site reliability engineers, operations engineers, platform engineers, devops programmers, infrastructure security engineers, database engineers, kubernetes administrators, observability engineers
topics
SSH certificate authority scaling; eBPF tracing and XDP; ProxySQL for MySQL scaling; Vitess resharding and VReplication; POLARDB shared-storage architecture; Nix reproducible builds; Kafka streams at scale; Virtual Kubelet auto-scaling; Pod Security Policies hardening; Ansible network automation; OpenSCAP infrastructure automation; bug bounty programme operations
| title | author | length |
|---|---|---|
| Load balancing: an in-depth study to scale @ 80K TPS | Shrey Agarwal | 29m |
Description Referencing the 13 yr old article of willy tarreau ( 2006 ) 5 categories of LB Evaluation params of LBs DNS Load Balancing Detail Layer ¾… | ||
| Implementing security from day one at a fintech startup | Himanshu Kumar Das | 40m |
Information security domain has become vast with lots of industry standards, frameworks, tools, etc. However, all business at the end of the day cares about is… | ||
| Functional programming and Nix for reproducible, immutable infrastructure | Brian McKenna | 36m |
Atlassian Marketplace uses Nix end-to-end: Nix expressions compile to content‑addressed .drv files, builds are bit-for-bit reproducible and cached, and Docker… | ||
| Software/site reliability of distributed systems | Piyush Verma | 51m |
Consider a sample application: A number that user sends an SMS text to of the form “Remind date format about y.” When it’s due, a service calls you back. User… | ||
| Decomposing a monolith - engineering and operational strategies we have gleaned from our experience | Sudheer Kumar Meesala | 36m |
Decomposing a monolith -- engineering and operational strategies we have gleaned from our experience at Endurance Sudheer Kumar Meesala has spent the last few… | ||
| Scalable distributed systems from grounds up in Elixir | Udit Kumar | 27m |
A live game engine called Inside It Out runs in production as a mostly-MVP and demonstrates concrete choices: using the BEAM process model with GenServer +… | ||
| Kafka streams at scale | Deepak Goyal | 33m |
Problem Statement: Stateful Realtime Processing of multi-million events. Intro Kafka Streams and event flow (2 slides) Challenges in Kafka Streams a. Fault… | ||
| POLARDB architecture | Øystein Grøvlen | 42m |
POLARDB uses a shared storage layer called Polar Store with chunk servers, DMA networking, NVDIMM-like low-latency media and NVMe SSDs; a user-space libpolofs… | ||
| OLTP or OLAP: why not both? | Jiten Vaidya | 49m |
Covers Vitess history and architecture with concrete demos: a live Vitess resharding and demo, walkthrough of VReplication explained and a VReplication demo… | ||
| Network automation with Ansible | Trishna Guha | 28m |
The talk will cover the key features like provisioning, configuration management of Networking devices and How Ansible becomes one Solution for all of it… | ||
| SSH Certificates: a way to scale SSH access | Pulkit Vaishnav | 29m |
Claims that SSH certificate auth scales SSH access across thousands of servers by using OpenSSH’s CA model, shows exact commands (creates CA with ssh-keygen… | ||
| SRE -- culture and strategy @ TrustingSocial | Talina Shrotriya | 35m |
Company runs across five data centers and three clouds, ingesting 1 TB metrics/week and scaling an SRE bench from 4 to 15 in nine months. Concrete claims… | ||
| eBPF: exploring use case of BPF kernel infrastructure | T K Sourabh | 33m |
Starts with a concrete claim: eBPF runs safe bytecode in‑kernel with a verifier, maps and helper calls loaded via the bpf syscall and compiled by LLVM/libbpf… | ||
| Virtuous Cycles: Enabling SRE via automated feedback loops | 39m | |
Claims that auto-remediation succeeds when backed by concrete telemetry and simple control loops: implements jitter for client retries to collapse… | ||
| Scale MySQL beyond limits with ProxySQL | Ratnadeep Debnath | 37m |
Zapier swaps vertical RDS scaling for a centralized proxy layer and chooses ProxySQL over HAProxy Nginx MaxScale because it is transaction-aware, supports… | ||
| Virtual nodes to auto-scale applications on Kubernetes | Vivek Sridhar | 23m |
Demo shows virtual nodes registering as Kubernetes nodes and running pods via Azure Container Instances so horizontal scaling happens without provisioning VMs… | ||
| Automate your IX’s RS Config | Anurag Bhatia | 20m |
Generates Bird or OpenBGPD configs from Arouteserver, pulling peers from PeeringDB and supporting RPKI validation, BGP communities and graceful shutdown… | ||
| How to run a successful bug bounty programme | Shadab Siddiqui | 46m |
Shows a concrete result: an automated JIRA workflow that turns incoming reports into tracked tickets, uses post‑functions and groovy scripts to auto‑prioritise… | ||
| OSINT for Proactive Defense | Shubham Mittal | 34m |
In today’s age, when every organization has an online presence in multiple shape (eg. social media, code repositories, cloud infrastructure, etc.), it’s… | ||
| Securing Infrastructure with OpenScap: The Automation Way! | Jaskaran Narula | 28m |
Security Content Automation Protocol (SCAP) which is a collection of standards managed by National Institute of Standards and Technology (NIST). It was created… | ||
| How convenience Is Killing open standards | Bernd Erk | 41m |
Claim: major cloud providers push serverless and serverless surpasses containers so teams face practical vendor lock‑in. Evidence: Google Cloud lists managed… | ||
| Using Pod Security Policies to harden your Kubernetes cluster | Suraj Deshmukh | 41m |
In a multi-tenant Kubernetes cluster there is a high probability that a malicious user can break out of the pods and snoop over the traffic on the network or… | ||
| Deploying and managing CSP: the browser-side firewall | Lavakumar Kuppan | 42m |
Description Introduction to client-side Data Exfiltration attacks Introduction to Content-Security Policy Content Security Policy to prevent Data Exfiltration… | ||
| Let's talk about routing security | Anurag Bhatia | 32m |
Global routing shows about 7.5 lakh prefixes in tables with roughly 79.5% valid IRR objects, ~7.7% missing and ~12.7% mismatched, so 20% of the routing table… | ||
| Building reproducible Python applications for secured environments | Kushal Das | 28m |
Builds a reproducible Debian package pipeline that actually works: uses pip --no-binary to fetch source tarballs, builds wheels locally, records and verifies… | ||
| Learnings from running my Home Server (and why you should run one too) | Abhay Rana | 29m |
Personal home server runs since a DIY PC build in Sept 2017, hosting ~35 containerised services with Docker and Terraform, monitored by Prometheus, fronted by… | ||
| Log analytics platform - build or buy: case study of Moonfrog Labs | Denis Dsouza | 31m |
Decision point is clear: Moonfrog builds a self-managed ELK stack that ingests ~300GB/day, targets 99.90% uptime, and keeps frequently queried data for 8 days… | ||
| nothing matches | ||