SRE Conf 2023

Beyond Proxy: Authentication, Hybrid Cloud Connectivity & Encryption using Apache Traffic Server.
Apache Traffic Server software is a fast, scalable and extensible HTTP/1.1 & HTTP/2 compliant caching forward and reverse proxy server. Its opensource and used by several major CDNs and content owners.
Due to the nature and scale of Hadoop Big Data, some crucial use-cases present unique challenges; solving them, requires
leveraging existing technologies in unique ways to build solutions that meet the business requirements but primarily, keeping operating costs low.

1. Enforcing Okta OAuth for user authentication
2. Enabling Hybrid Connecitivty with Encrpytion in Transit (across On-Prem datacenters and multi Cloud)

are two such use-cases that are implemented using by extending Apache Traffic Server functionality to meet the requirements of velocity, security,
scalability, operability in a cost effective manner. Extending Apache Traffic Server functionality enabled us to achieve our goals with minimum possible code changes at the application end and also keeping the application transparent & vendor agnostic.
In this presentation, we will go through our experience of implementing the aforementioned use-cases with ATS and the lessons learnt.