Thursday, May 5, 2011

AlterEgo 2-Factor Authentication

File this under the "Why didn't I think of that" category. MailChimp just released a super cool new product called AlterEgo that enables 2-factor authentication for web apps using an IPhone application.

Check out:
If you've done anything with production systems, then you've probably used 2-factor auth and have always found it to be a pain, especially if you've had to add it to some software you're building. This product looks to bring a simplified version of 2-factor auth to webapps that can provide a really nice additional layer of security to webapps that need it. I'd love to hear from anyone who has used this product, either as a user or as an integration.

Monday, April 4, 2011

Centripetal Product Review of Devolutions Remote Desktop Manager

remotedesktopmanager-logoThis is a continuation of a series of product reviews of the products that make our cloud infrastructure work and make it workable. The product we’d like to show off today is one of those products that has just made the pain of managing a large server farm a whole lot easier.

Our deployment consists of numerous dedicated and cloud based servers in Rackspace datacenters in Texas, Chicago and London as well as Amazon cloud datacenters in California, Virginia, Ireland and Singapore. We run Microsoft Windows based servers as well as Redhat and Gentoo based Linux systems. Managing this type of an infrastructure has always been left up to Ops teams in my past jobs who had large teams and suites of pricey tools at their disposal. But as a small startup we needed a way for a couple of key members of our team to be able to access all our servers from one place in an easy fashion. Devolutions Remote Desktop Manager has been a life saver for us. Remote Desktop is a simple tool that organizes all of our remote servers in once place with built in configuration to work across all of them in unison with ease.

Among all of it’s features the ones that have come to be the most useful to me have been the ability to manage all of our systems, regardless of OS or location, from one console; the ability to have a central password store integrated into the tool; and the embedded, tabbed view of multiple remote sessions at once.

Manage Everything


rdm1One of the beautiful things about running a startup in this day in age is the vast resources available through cloud based deployments. A small startup company like ours has the ability to deploy hundreds of servers across all geographic locations in the world with the click of a mouse. Managing these can all be done from the comfort of our offices overlooking the beach in Southern California. However, managing this many servers can get to be quite a burden so any tool that can ease that burden is a blessing. With a disparate set of systems in our deployment we needed a tool that would allow us to view everything together in one place. Remote Desktop Manager rdm_sessionhas the ability. The Dashboard view within the tool allows me to look at all of my servers. I organize them by data center and region and then stick all of the Windows servers and Linux Servers in there together. Opening up a remote session is as easy as double clicking on a machine. The configuration of each machine is where I can setup what that session is, Windows RDP or Linux SSH console or whatever else. This ability is more rare than one might think in this type of a tool.




Central Credential Store

rdm_dsWith this many servers, managing passwords is a serious pain. In addition, as a small company with just a couple of people who know how to access most things we needed a way for the knowledge to be accessible in the case of something happening to key people. Remote Desktop Manager has the ability to store credentials for all types of remote sessions. This can be managed centrally by our one full time operation person while still allowing access to the others that need the occasional access. There seem to be a lot of different options for storing this that include higher levels of security as well as things as simple as a centrally accessed Access database, SQL Server, XML or even Dropbox storage.



Tabbed View

One of my favorite features of Remote Desktop Manager is the ability to have multiple sessions open at once and view them all within the RDM program within a tabbed view. This makes opening up a bunch of servers and going back and forth between them a breeze. The name of the server appears in the tab at the top, as opposed to just opening up multiple RDP sessions where I have no idea what is what. This is a God-send when I am needing to compare config files across servers, monitor event logs, or need to install a new release across multiple servers at once. I can still open the sessions up in full screen if I need to, but I don’t find myself doing that a whole lot lately.


Summary

All in all Devolutions Remote Desktop Manager has been a great tool. The only thing I have found myself wanting is an automated way to reach out to my Amazon or Rackspace account to suck in new servers as opposed to manually entering remote connection information, but that is a minor issue compared to the pain that this tool has removed from my day to day life of jumping around our remote, distributed cloud infrastructure. Thanks to the guys over at Devolutions for an awesome product.

Tuesday, March 22, 2011

Centripetal Product Review of CloudBerry S3 Explorer Pro

Part of building, running and maintaining a Software as a Service application like ours means having great tools at your disposal to make things easier. I wanted to highlight one of those tools that I've become particularly dependent on in my day to day work for keeping things running smoothly. The tool is CloudBerry S3 Explorer Pro by CloudBerry Labs.

We manage our complete backend logging, monitoring and reporting systems based on Amazon S3 at the core. There are lots of tools we run on top of that from custom built applications to Hadoop and everything in between. We currently have 10's of millions of individual files ranging in size from 100 bytes to over 1 GB. In Amazon's S3 environment we we manage over 100 buckets, spanning all Amazon worldwide regions with each containing complex directory structures that define content and date partitioning of the data in the files. We also run a lot of different portions of our applications through the Amazon CDN which is seemlessly integrated into S3. With all the applications and code we have dedicated to S3 specific functionality you'd think that we would never have a need to actually just look at the raw S3 structure and browse around for files or other things like that, but it has become a daily need to go in for one reason or another. When I have a need to go directly to S3 for something Cloudberry S3 Explorer Pro has been my tool of choice. It is indispensable when looking for individual files when debugging, doing copy or move jobs, or scripting more complex file jobs.

Debugging

A typical day finds me debugging an issue for one of our business team members. Many times I find that I need to go directly to the transaction logs of some server to determine exactly what happens. We store all of these in S3 in order to run transaction reports across them with Hadoop and other tools. Cloudberry Explorer has made the job so much easier because I can look at my different buckets through the lens of a typical filesytem that I am used to and can browse around, download and open files with a click of the mouse and can even make quick updates when I need to. Cloudberry gives me a beautiful user interface for working with some of the more advanced features of S3 like ACL's, Bucket Policies, Cloudfront distributions, External Buckets and more and it makes these features much more accessible than the straight Amazon S3 API for quick tasks I need to do. If I ad to work within the confines of the Amazon API or even the Amazon Web interface for doing this debugging I would be entirely hamstrung and my life would be in shambles from the craziness of things.....

Copy or Move Jobs

Another thing that I find myself doing a lot is moving files around within S3. We use specific naming conventions for S3 files to denote the working state of a file. We also use different buckets in each Amazon region to reduce cross datacenter chatter. But there are often times that I find I just need to copy or move a whole slew of files from one place to another. Recently I actually had the need to move over 1 million files between buckets. For this I use Cloudberry. Moving and Copying is a drag and drop task within Cloudberry. And for some of those bigger jobs (like the million files) I can use up to 100 threads to get the job done more quickly. The ease of sing Cloudberry for these types of tasks has gotten me to be a little too dependent on the tool, I've actually spun up Amazon Ec2 instances just to put Cloudberry on to do large copy/move jobs and then tore them down. That allowed me to have more CPU power going as well as even more threads working on my job.

Scripting 

One thing that we've recently discovered is that everything that is available in the CloudBerry S3 Explorer Pro version is also available in Windows Powershell snapins. We've utilized these
extensively to script out tasks that we find ourselves doing over and over again. While we have our own tools that use the Amazon S3 API to interact with S3 from within our applications, I've found that the Cloudberry Powershell snapins are more reliable and much easier to use due to the scripting capabilities of Powershell. Now each time I find myself doing something in Cloudberry I ask if it is something that I should script out for future use. Often times I find that a few minutes adding new capabilities to my script toolbox using these snapins ends up saving countless hours down the road. 

Summary

If you're using Amazon S3 for anything you're doing in your business you need to go out and get a license for CloudBerry S3 Explorer Pro. This tool is one of the most useful tools that I have found, not only do I use it daily but I bought licenses for everyone on our engineering team and they all use it pretty much daily as well. Cloudberry also makes tools for many of the other cloud based storage solutions. Pretty cool. Thanks a lot to the guys over at Cloudberry Labs for such a great tool!


Mike Davis

Tuesday, January 25, 2011

Review All Your Invoices

The blog has been getting a little neglected lately, but we're still working on the products. We just released a new feature that allows customers to access their past invoices. We always email you your invoice as soon as your credit card is charged, but now you are able to go into the system and view all of your past invoices. Simply login to app.centripetalsoftware.com and click on the Account tab at the top. This will show you a summary list of all of your invoices.





From there you can click on any one of the invoices to access a detailed invoice that you can print out.





This is all done by accessing payment information that is stored in our Level 1 PCI DSS Compliant payment processor's system. So all of your credit card information is secure and no information will be available that could compromise your security.