A Week’s Happenings From A StackStorm Perspective

March 20, 2015

by Evan Powell

The last couple of weeks we have hit an inflection point in that downloads are running at 5-7x February levels, IRC chats are getting more and more substantive, and folks like Rackspace and others are contributing to StackStorm (thank you! – let’s automate all the things – intelligently – together :)).

Here are some highlights including a few events at which we attended and spoke:

  • Security BSides Ljubljana – our own Tomaz Muraus spoke at BSides in Slovenia about using StackStorm as IFTTT-like software for responding to security events. Being Tomas, he didn’t just speak with some nice looking slides – he also demo’d and made available the code for the remediations he demonstrated.

Please take a look here:  Tomaz’s amazing slides

Remediation demo

  • SREcon15 – StackStorm exhibited at SREcon where there was a rockstar group of speakers discussing running systems at massive scale. As is typically the case, the side conversations were at least as valuable as the already useful sessions. As the leading open source solution for event driven automation at scale, we of course took a special interest in Pedro Canahuati’s  keynote which discussed at some length a real inspiration for us – Facebook’s FBAR (not FUBAR). The slides are not yet posted, as far as I can tell.  You should follow him at @collidr if you do not already.  His title is Director, Production Engineering & Site Reliability at Facebook.

One comment Pedro made, which he confirmed via Twitter, is that he estimates that Facebook saves 16,680 hours *a day* thanks to their event driven automation, aka FBAR. Next time you unfriend someone (or like! a kitten photo), think about the StackStorm like wiring that makes possible your Facebook happiness. That’s thousands of engineers that are being freed from countless mundane actions by FBAR which it seems is now a fundamental underpinning of Facebook.

Here is a somewhat dated write up on Facebook’s FBAR from Facebook, posted back in 2011. It still does a good job of explaining the fundamental approach – which is again similar to what StackStorm gives you. We will post the slides and so forth from Pedro’s talk here as well when they become available.

  • Datacenter Dynamics 2015: Last but not least, I spent some time in NYC helping keynote the Datacenter Dynamics conference. This is the leading set of conferences attended by the data center building, powering and operating market. It was great to catch up with some friends and users in NYC and to hear perspectives on the transformation of the data center. My talk was on the importance of software defined infrastructure which I’ve written and spoken about extensively elsewhere.

I was really happy to see the adoption of Open Compute in this environment. Cole Crawford (@coleinthecloud) clearly did amazing work bringing essentially open source hardware from a provocative idea to a reality in his time starting and running Open Compute. Don Duet from Goldman Sachs  – their “co-head of Technology” – shared that 70% of their purchases of compute this year will be Open Compute. That’s significant and disruptive, especially when you consider that Don has elsewhere indicated that one of Goldman Sachs’ early private clouds is at over 300,000 cores.

I listened very attentively to all of Don’s comments at the conference because while Goldman is not afraid to go off on their own, they are also extremely thoughtful about how to collaborate with the broader community as Don’s role on the board of Open Compute indicates. One thing Don chose to mention when being interviewed by the New York Times on stage was that Goldman Sachs is building event driven automation that will be made more intelligent via the kind of machine intelligence we have spoken about leveraging ourselves in the future.  I look forward to collaborating with Goldman Sachs more in this area.

So, in short, when you look at the world from where we sit you see others recognizing the power of event driven automation all around you.

Top tier investment banks (which are pretty much technology companies these days), hyper scale operators, and now tens of thousands of folks that have downloaded StackStorm are using event driven automation in ever more interesting ways.

Please take a look at the links above to learn more about what others are saying – and to grab simple examples of the use of StackStorm in responding to security events.

Next week will be at least as exciting. While our CTO and co-founder Dmitri Zimine will be participating in a symposium on approaches to event driven automation back in the DC area with tier one financials and intelligence agencies and academicians, we will also all be riding a wave of ever more users who are providing all sorts of feedback, most of it shared politely 🙂

We will also be publishing a major operational pattern as code via a guest post on the New Relic site very shortly and will republish that on our own blog as well, along with more details and of course the code itself. There is even a snazzy video that will walk users through how to use StackStorm for a particular auto remediation use case in conjunction with New Relic and others.

Stay tuned, keep automating, and let me know your thoughts at @epowell101, or in the comments below, or on our IRC at #stackstorm on freenode. If you haven’t already, we invite you to check out our product by installing StackStorm and following the quick start instructions — it will take less than 30 minutes to give you a taste of our automation.