Session Hijacking Protection

2 posts · Nov 2010 – May 2020

What this trail covers

Shopify has evolved its approach to managing webserver connection handling and request dropping mechanisms to improve application resilience under high load. This includes developing dynamic query rules for ProxySQL to reroute, rewrite, or reject database queries, and implementing a tool to manage these rules at scale across thousands of instances. The system incorporates a dry-run mode for query rules to prevent accidental data corruption or downtime, and employs exponential backoff for logging

All Shopify trails

May 2020A Brief History of TLS Certificates at Shopify - ShopifyThis post details Shopify's journey in automating TLS certificate provisioning and management. It covers the initial manual provisioning for Shopify Plus, the development of the 'Notary System' for automated provisioning via API calls to certificate authorities, the scaling of this system using OpenResty and Lua for dynamic certificate loading from a database with LRU caching, and the resolution of mixed content warnings. It also discusses the adoption of Let's Encrypt and the subsequent migration to a cloud provider, including the decision to continue using the Notary system for both edge networks for synchronization simplification. Finally, it mentions the contribution of Lua middleware to the ingress-nginx Kubernetes project.
Nov 2010Session Hijacking Protection - ShopifyShopify has evolved its approach to managing webserver connection handling and request dropping mechanisms to improve application resilience under high load. This includes developing dynamic query rules for ProxySQL to reroute, rewrite, or reject database queries, and implementing a tool to manage these rules at scale across thousands of instances. The system incorporates a dry-run mode for query rules to prevent accidental data corruption or downtime, and employs exponential backoff for logging
Advertisement