Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Zanzibar: Consistent, Global Authorization System

ai.google

Post reply on HN
Print view View original

11–20 of 137 posts

Re: Zanzibar: Consistent, Global Authorization System

#11

Post by draw_down »

Boulth wrote: post #7
colesantiago wrote: post #6

I love reading about Google's systems, but I wish I could work on those problems at scale, that is my dream really. I wonder what more systems Google has that we don't know about. I know Borg has become what we know as k8s but surely there must be more things that Google has made internally that are not open source. Curious about this and would like to know more about it from anyone in the trenches at Google.

On the other hand Google engineers are vendor-locked-in using Google specific tech one way or another.

Come on.

Re: Zanzibar: Consistent, Global Authorization System

#13

Post by lopsidedBrain »

Boulth wrote: post #7
colesantiago wrote: post #6

I love reading about Google's systems, but I wish I could work on those problems at scale, that is my dream really. I wonder what more systems Google has that we don't know about. I know Borg has become what we know as k8s but surely there must be more things that Google has made internally that are not open source. Curious about this and would like to know more about it from anyone in the trenches at Google.

On the other hand Google engineers are vendor-locked-in using Google specific tech one way or another.

Um, not really. Care to elaborate? If something is available open-sourced we're typically free to use it, as long as we are abiding by the license conditions.

Re: Zanzibar: Consistent, Global Authorization System

#14

Post by delroth »

sonnyblarney wrote: post #9

What's interesting to me here is not the ACL thing, it's how in a way 'straight forward' this all seems to be. It's the large architecture of a fairly basic system, done I supposed 'professionally'. I'm curious to know how this works organizationally. What kind of architects involved because this system would have to interact with any number of others, so how do they do requirements gathering? Do they just 'have expe…

Zanzibar is basically the brainchild of a Bigtable Tech Lead + a Principal Engineer from Google's security and privacy team [1]. This led to a very sound and robust original design for the system. But it also greatly evolved over time as the system scaled up and got new clients with new requirements and new workloads.

[1] https://twitter.com/LeaKissner/status/1136626971566149633

Re: Zanzibar: Consistent, Global Authorization System

#15

Post by alexeldeib »

ktta wrote: post #5
jsty wrote: post #4

Earlier quoted context omitted.

They do give p99 latencies in the table on page 10

99 - 99.9 - That is amazing.

This is absolutely incredible. Since we saw login with Apple yesterday, makes me wonder if any of the other big companies can compete with this. Curious about Facebook/Netflix/Amazon.

Netflix seems zippy, but I've never looked at the request timings, which could differ pretty dramatically from UI load times. I imagine Google also dwarfs their login scale. Would be interesting to see numbers capturing full load time from clicking the login UI to successful redirect (or however you would measure this without including the time of the page load post-login).

Re: Zanzibar: Consistent, Global Authorization System

#16

Post by [deleted] »

colesantiago wrote: post #6

I love reading about Google's systems, but I wish I could work on those problems at scale, that is my dream really. I wonder what more systems Google has that we don't know about. I know Borg has become what we know as k8s but surely there must be more things that Google has made internally that are not open source. Curious about this and would like to know more about it from anyone in the trenches at Google.

[deleted]

Re: Zanzibar: Consistent, Global Authorization System

#17

Post by duality »

gregorygoc wrote: post #8
colesantiago wrote: post #6

I love reading about Google's systems, but I wish I could work on those problems at scale, that is my dream really. I wonder what more systems Google has that we don't know about. I know Borg has become what we know as k8s but surely there must be more things that Google has made internally that are not open source. Curious about this and would like to know more about it from anyone in the trenches at Google.

The harsh truth of working at Google is that in the end you are moving protobufs from one place to another. They have the most talented people in the world but those people still have to do some boring engineering work.

What is the right data format to move around? JSON?

Re: Zanzibar: Consistent, Global Authorization System

#18

Post by stingraycharles »

Am I alone in thinking that 99.999% measured availability for a service so completely in the critical path for almost everything is relatively low?

Phrased another way, when it is not availability, do end users experience service disruption, and if not, how is that mitigated?

Re: Zanzibar: Consistent, Global Authorization System

#19

Post by eeZah7Ux »

colesantiago wrote: post #6

I love reading about Google's systems, but I wish I could work on those problems at scale, that is my dream really. I wonder what more systems Google has that we don't know about. I know Borg has become what we know as k8s but surely there must be more things that Google has made internally that are not open source. Curious about this and would like to know more about it from anyone in the trenches at Google.

Borg is very different from k8s!
Post reply on HN