"Dynamic configuration in .NET", Serhii Buta
Download as PPTX, PDF0 likes170 views
Serhii Buta is a backend team lead at Wirex with over 6 years of experience in .NET, focusing on distributed systems and microservices on Azure. The document explains configuration management using Azure Key Vault and App Configuration, including usage patterns and security measures. It highlights capabilities like environment isolation, access control, and scalability, emphasizing the importance of maintaining performance during large-scale ticket migrations.
"Dynamic configuration in .NET", Serhii Buta
- 1. 1
- 2. 2 About me Click to add text Serhii Buta, 6+ years of experience in .NET B2C Back End Team Lead at Wirex Develops distributed systems on Azure Cloud Has a good experience in solving infrastructure problems in microservice architecture https://twitter.com/butaserhii https://t.me/s_buta
- 3. 3
- 4. IConfiguration Internals and Patterns Key Vault & App Configuration Demo 4
- 5. 5 IConfiguration Internals Click to add text
- 6. 6
- 7. 7
- 8. 8
- 9. 9
- 10. 10
- 13. IOptions – singleton, static, no named options IOptionsSnapshot – scoped, dynamic, named options IOptionsMonitor – singleton, dynamic, named options 13
- 14. IOptions 14
- 17. 17 Azure Key Vault & Azure App Configuration
- 18. Key Vault Usage Scenario Secrets store: • Connection strings • Certificates • External services API keys • Crypto keys 18
- 19. App Configuration Usage Scenario Configuration store: • Logging configuration • Rate limits • Service specific non-secure configs • Simple business rule configs • Feature toggles 19
- 20. 20
- 21. 21 Delivery, Security & Audit
- 23. Security & Audit Environment isolation Dedicated Key Vaults/App Configurations per environment Access control Restrict access by IPs, set only required RBAC permissions IConfigurationProvider priority Order configuration providers by their security level Audit and monitoring Stream audit events to Logs Analytics and set up alerts 23
- 25. & Key Vault App Configuration Requests quota: 2k requests per 10 seconds Auto failover to paired region SLA: 99.99% Requests quota: 20k requests per 1 hour Manual failover setup SLA: 99.9% 25
- 26. 26 Split by security level Split by domain
- 27. 27 Pull & Push Configuration Updates
- 30. Tickets Migration • Keep response time <250ms for users • Millions of tickets to migrate • Migrate tickets as fast as possible but keep users SLA 30
- 31. 31 Thanks!