Workshop one | WarGames: defending against OWASP top 10 security risks

Any great defensive maneuver requires both preparation and training. Especially those against OWASP top 10 attacks and known malicious IPs and countries. Knowing how to use Fastly’s WAF and employ various attack mitigation strategies, including ACLs, CSPs, error handling and redirects, allows businesses to be more proactive in defending their sites and services. By the end of this workshop, you will have a black belt in testing with OWASP top 10 security risks and mitigating them on the Fastly platform.

Denise is a Solutions Architect at Fastly, where she focuses on WAF customer on-boarding and training. She is currently enrolled in MSIS courses through SANS institute, and is expected to formally start her Masters degree this spring. She is learning the latest in cybersecurity trends, exploits, and defensive techniques to better help Fastly and it's customers.

Workshop two | The Fastly app toolkit: three ways to build logic into your service

The Fastly app was designed to let you build logic at the edge in a number of ways, giving your business and your developers greater flexibility and control. In this workshop, you’ll log into the app and learn how to add load balancing, conditional origin selection, and A/B testing to your service in a mock commerce environment using three different methods — UI, code snippets, and API calls.

Lisa has been building things on the web for over 20 years, yet remains inexplicably fond of vi and regex.

Workshop one | How I learned to stop worrying and love video: going live using real-time logging

Live streaming and on-demand video can provide a powerful way to connect with customers, but viewers expect seamless, pixel-perfect streams without common video delivery inconveniences, such as downtime or lags. This workshop will demonstrate how anyone can deliver live video at scale. We’ll thoroughly explain key video delivery optimizations and, more importantly, demonstrate their efficacy using the data collected from both Fastly Log Streaming/Sumo Logic and the Mux quality of experience service.

Jim is a Senior Sales Engineer overseeing EMEA at Fastly where he helps companies improve their end users’ video experience. With 20+ years of delivering video at scale, both live and VOD, Jim has a solid track record of improving his customers’ performance while lowering cost. Prior to Fastly, Jim was VP of Technology at IGN Entertainment and COO of World Television. He holds two bachelor’s degrees, as well as a Master’s degree in interactive telecommunications from NYU.

Workshop two | Better, faster, stronger: moving logic from the app to the edge

With the ability to run custom code on our edge servers, Fastly's network offers you a fast, reliable, and efficient platform to which you can delegate a surprising amount of logic that has traditionally been held in the application layer. In this workshop, you'll get to play around in Fastly’s code-testing environment, Fiddle, to implement a series of advanced edge solutions, like segmented caching and geofencing. You’ll also learn how to apply these patterns to your own applications to reduce your origin load, dramatically improve performance, and make your applications more secure.

Andrew is a Developer Experience Engineer at Fastly, working with developers across the world to help make the web faster, more secure, more reliable, and easier to work with. Before joining Fastly, he founded a web consultancy that was ultimately acquired by the Financial Times, led the team that created the FT’s pioneering HTML5 web app, and founded the FT’s Labs division. He is also an elected member of the W3C Technical Architecture Group, a committee of nine people who guide the development of the World Wide Web.

Workshop one | Advanced VCL: restarts and service chaining

This VCL master class delves into some of the more subtle details of Varnish and Fastly internals, including two advanced topics — restarts, which are used for authentication, authorization, resilience, and migrations, and service chaining, which is the practice of employing multiple services to handle a single request. Join Fastly’s Principal Solutions Architect, Rogier “Doc” Mulhuijzen, to learn dos and don’ts for applying these techniques, and play around with them under expert supervision.

Rogier “Doc” Mulhuijzen is a Principal Solutions Architect and Varnish wizard at Fastly, where performance-tuning and troubleshooting have formed the foundation of his 21-year career. When he’s not helping customers, he sits on the Varnish Governance Board, where he helps give direction and solve issues for the Varnish open source project. Formerly an Oracle DBA and Unix admin, Rogier learned scaling while working for Ziggo, a major Dutch ISP. In his spare time, he likes to conquer all terrains by riding motorcycles, snowboarding, and sailing. Find him on Twitter as @drwilco.

Workshop two | That’s so Fetch: the ins and outs of the VCL-Fetch subroutine

VCL-Fetch is one of the most important subroutines in Fastly Varnish when it comes to setting caching preferences. But it can also trigger a butterfly effect, disabling behaviors that can make debugging your configuration more difficult. We'll explore the default behavior of Fetch, the related behaviors it can affect — including shielding, node clustering, hit-for-pass, and vary in Fetch vs. Deliver — and how we identify them while debugging.

Ryan is a current Customer Support Engineer at Fastly and a former middle/high school technology teacher. His hobbies include archery, longsword, tabletop RPGs, and giving tech presentations.

Welcome

Keynote: Fastly and the future of the edge

Keynote: Fastly and the future of the edge

Keynote: Fastly and the future of the edge

Keynote: Fastly and the future of the edge

From content to logic and beyond: The future of Fastly’s edge

The edge has quickly become a place for more than just content. Logic — both simple and complex — is increasingly making itself right at home there, too. Paywall authorization, A/B testing, and dynamic ad delivery are just a few examples of the ingenious ways our customers are moving decision making to the edge. And, proof that we’ve only just begun to scratch the surface of its power. Join Fastly’s Chief Architect, Sean Leach, as he explores both the current state and the untapped potential of logic at the edge.

Sean is the Chief Architect at Fastly where he focuses on product strategy, new product initiatives, and evangelism of the Fastly platform. He has been in the critical infrastructure and security space for over 20 years at companies like Verisign, Neustar, and UltraDNS.

Credentials for the modern world: authentication with higher reliability, more privacy, and less risk

Authentication is one of the primary properties we demand from secure systems, and one of the most problematic for real services to manage. This talk will discuss new and emerging technologies that improve authentication — making it easier to get and manage credentials, safer to deploy secure services in delegated environments, and possible to verify someone's identity without unnecessarily revealing that identity to anyone else.

Richard Barnes is the Chief Security Architect for Collaboration at Cisco, helping make it possible for people to work together more securely. He also serves on the boards of the Internet Society and the Internet Security Research Group (the organizational home of Let's Encrypt), the latter of which he helped co-found a few years ago. Prior to joining Cisco, Richard was the Firefox Security Lead at Mozilla, heading up their efforts to make the web more secure.

Keeping secrets secret: how The New York Times brings Fastly and Vault together

The New York Times uses Fastly for its CDN layer and employs several services, each with many tokens. To better manage such a large number of static tokens, the NYT team needed a way to generate dynamic, short-lived tokens. Enter Vault. In this talk, you’ll learn how Fastly tokens were stored and used, how the NYT team migrated to dynamic secrets, and see a short demo on how the Vault plugin was developed.

Shawn Bower is a Docker Captain at the New York Times where he works with development teams to move their applications to the cloud. In most cases, these moves involve Google Cloud Platform and Kubernetes. Previously, Shawn was Cornell University’s Cloud Architect where he helped to move many of the university's workloads to Docker and the cloud.

QUIC and HTTP/3: what, why, and what’s coming

Fastly Distinguished Engineer, Jana Iyengar, discusses QUIC — the more responsive, secure, and agile transport protocol set to replace TCP for the web. Hear how QUIC ensures that applications’ connections are confidential, keeps flexibility for the future in mind, and promises to provide better internet performance to poorly served parts of the world. You’ll hear about the state of the world in terms of QUIC development and deployment, and Fastly’s vision for QUIC on its platform.

Jana Iyengar is a Distinguished Engineer at Fastly, focusing on transport protocols and performance, including QUIC and congestion control. He is an editor in the IETF's QUIC working group, he chairs the IRTF’s Internet Congestion Control Research Group (ICCRG), and he works on building and deploying QUIC at Fastly. Prior to Fastly, he worked on networking projects at Google, and prior to that, he was an Associate Professor of Computer Science.

Financial security: exploring the WAF behind Wealthfront

Wealthfront delivers an automated investment experience that puts sophisticated wealth management tools into the hands of the many. Join Wealthfront’s Head of Security Engineering, Solomon, to hear how Fastly helps his team keep its customers’ hard-earned assets and personal information under equally sophisticated lock and key.

Terraform + Fastly: now better, together

Fastly is made up of developers who want to build great things. It’s why the company invests in the community and in frictionless tools that automate the rote and free up time for deeper experimentation. In that spirit, sweeping updates have been made that reconcile Fastly's Terraform provider with key Fastly app functionality. Get a glimpse into the latest updates, plus a future roadmap for ongoing Terraform upgrades.

Davy is the Sr. Director of Application Engineering at Fastly, where she is responsible for Fastly’s customer interfaces. Before Fastly, Davy was an Engineering Manager at GitHub. She holds a BA in both astrophysics and computer science, and a Master’s degree in computer science.

Cats, memes, and everything in between: how Giphy delivers billions of GIFS at scale

In a world where visual communication has become a part of global culture, there’s no better way to punctuate a text or slack message than with a perfectly chosen GIF. Discover how Fastly enables Giphy to join our conversations by delivering billions of GIFs to millions of users — every single day.

Powering the world’s checkout counter: behind Stripe’s multi-CDN strategy

Stripe is a technology company that builds economic infrastructure for the internet. Businesses of every size use the company’s software to accept online payments and run technically sophisticated financial operations in more than 100 countries. Aside from using CDNs to serve static assets on Stripe’s sites, the company also uses them to serve its secure hosted payment page, a.k.a. checkout. Recently, Stripe began employing a multi-CDN strategy to amplify resiliency. This talk will share the motivation and logistics behind this shift, and the results Stripe has observed from this new approach.

Powering the world’s checkout counter: behind Stripe’s multi-CDN strategy

Stripe is a technology company that builds economic infrastructure for the internet. Businesses of every size use the company’s software to accept online payments and run technically sophisticated financial operations in more than 100 countries. Aside from using CDNs to serve static assets on Stripe’s sites, the company also uses them to serve its secure hosted payment page, a.k.a. checkout. Recently, Stripe began employing a multi-CDN strategy to amplify resiliency. This talk will share the motivation and logistics behind this shift, and the results Stripe has observed from this new approach.

Rack and Roll: How Fastly’s network grows with purpose

From concept to delivery, the process of adding a new POP to the Fastly network has evolved. Our new “Rack and Roll” POP delivery program is a highly sophisticated waltz involving both technical and logistical partnerships. Go behind the scenes with Senior Director of Hardware Systems Engineering, Davin Camara, and Supply Chain Manager, Kat Diamantine, to see how we choose future POP locations and build, test, and ship our hardware.

Davin Camara is the Senior Director, Hardware Systems Engineering at Fastly leading the engineering and sourcing of Fastly’s compute, network, and datacenter hardware. Prior to Fastly, Davin was Director, Hardware Engineering at Salesforce where he created the Hardware Innovation and Test Lab.

Rack and Roll: How Fastly’s network grows with purpose

From concept to delivery, the process of adding a new POP to the Fastly network has evolved. Our new “Rack and Roll” POP delivery program is a highly sophisticated waltz involving both technical and logistical partnerships. Go behind the scenes with Senior Director of Hardware Systems Engineering, Davin Camara, and Supply Chain Manager, Kat Diamantine, to see how we choose future POP locations and build, test, and ship our hardware.

Kat Diamantine is the Supply Chain Manager at Fastly where she oversees the annual Capex budget, procurement and hardware lifecycle, vendor management, and global logistics. Prior to Fastly, Kat got her start at EdgeCast Networks, now Verizon Media.