03s0201SAE安全实践-丛磊

SAESinaAppEngineteamweibo@SinaAppEngineforQConBeijing12416SAEComputingServices,StorageService,CloudAppStore,CloudServiceStore,MobileCloud,SWSSinaCloud.com2009.82009.112011.5.182011.72010.10.10TeamfoundedSinaAppEnginealpha1SinaAppEnginealpha2vDiskSinaAppEngineBeta2OpensignupPaymentCloudAppStore2010.22010.9SinaAppEngineBetaSAEbornTmpFS,HTTPs...RDC,KVDB...2011.11MultilanguageJava&Python2012.3MobileCloudRuby&CloudFoundry12416SAE050000100000150000200000200920102011.62012.3050000100000150000200000200920102011.62012.30150000000300000000450000000600000000200920102011.62012.3hits/day2011SLA:99.95%1241612416SAE12416SAE•10,000RMB/y•1000RMB/y•15,000RMB/y12416SAEZend12416PaaSIaaSAppStoreServiceStoreEnterprisepublicCloudPublicCloudSinaWebServiceMobileCloud()SAE12416SAE-SWSOpenStackbugfixes12416SAECronImageTaskQueueMailDeferredJobFetchURLSocketProxyMySQL/RDCMemcacheXCounterStorageRankKVDBTmpFSCDNWordSegment......12416••••12416SAESAEVPC12416SAE-MySQLinstance@VMMySQLinstance@VMClientClientClientMySQLinstance@VMMySQL2009.1112416SAE-MySQL2010.6MySQLinstance@PMClientClientClientSAERDCRelationalDBClusterSQL12416SAE-••Storage•MemcacheX(LRU)•KVDB•Rank•Counter12416SAE--ClientNamespace-bindingSAEServiceClientClientClientembeddedauthinCembeddedauthinCembeddedauthinCTCPProtocol12416SAE--SHA256RESTsignatureSAEServiceClientClientClientHTTPProtocolRESTrequest+signaturesignature==SHA256(request+access-key+secret-key)request12416SAE--GDSmoothRuntimeRuntimeRuntimeRPC12416SAE-MySQL12416SAE-MySQLKVDBTaskQueueCounter/Rank12416SAE-VPC(VirtualPublicCloud)12416SAE-VPC(VirtualPublicCloud)RouterCommonPublicPoolEnterprisePoolXXXVIPPoolXXXBankPool12416SAE--IP--12416SAE-12416SAE-PHPPythonJava12416Level1onZend-I/O--cpuLevel2onApache---libcDLLSAE-PHPYourCodePHPZendSAEZendSandboxHTTPServerSandboxPOSIXEnvironment12416SAE-PythonYourCodePythonVMWSGIPOSIXEnvironmentLevel1onPythonVM-IO--CPU-libcDLLLevel2onPosix-SE-Linux12416SAE-JavaYourCodeSecurityManagerSAEClassLoaderJettySandboxPOSIXEnvironmentLevel1onJVM-policy-SAEClassLoader--CPU-JVMLevel2onPosix-SE-Linux12416•••SAE-:12416SAE-12416SAE-•SVN•12416SAE-•PHPPHPRuntimeZendOptimizer•Java•Python.pycZendGuard12416SAE-•-FetchURL(HTTP/HTTPS)•-SocketProxy(TCP)•PaaS&IaaSClientOuterInternetProxy12416SAE-12416SAE-//12416SAE-VIP/+12416SAE-SAE12416SAE-SAE12416SAE-SAE\*************????12416SAE-••12416SAE-•SAE•SAE7*24SLA-SAE=devcenter&catId=245-SLA12416SAE-•””•==•SAE12416Q&[e-mail]/kobeSAE12416