Live data from Hacker News

Dear MongoDB users, we welcome you in Azure DocumentDB

azure.microsoft.com

101–110 of 119 posts

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#101
post #83

Earlier quoted context omitted.

The advantages are real. Compatibility might not be 100%, but honestly Mongo isn't magic. DocumentDB has strengths of it's own.

I'd be happy to learn about your experience developing an application against DocumentDB and its strengths. Care to share?

im actually building a fairly well massive app with documentdb and service bus. its not a user facing app, so i dont know if that counts for what you were talking about.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#103
post #72
post #14

AWS needs something like this. The missing piece for the AWS serverless story is a database that is suitable for writing real world applications. DynamoDB is far from suitable for that task, which leaves AWS serverless with no good database.

Cross datacenter replication is the missing piece from AWS. I wish they'd just roll out a hosted Cassandra or something identical

You can use scylladb.com and set it up pretty easily. Stable, distributed and fast out of the box with a lot less maintenance.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#104
post #39

Never looked at DocumentDB before. So if I get this straight, I can get a fully managed DB that can scale easily, but still have all the advantages and compatibility of a regular NoSQL like Mongo? I think that's a first, right?

Fully managed easily scalable nosql DBs have been available for many years as CouchDB variants from multiple providers.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#105

As someone that almost got bitten by MongoDB's lax auth defaults, I was happy to read that DocumentDB has enabled access control out of the box and no default username/password. Also, there's a query playground if you want to try it out quickly: https://www.documentdb.com/sql/demo

Of course, you really shouldn't be exposing databases if you don't know how to administer them. I agree that the defaults should be better, but...

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#106
post #47

Earlier quoted context omitted.

https://www.microsoft.com/en-us/TrustCenter/Privacy/default.... If you don't trust MS you can trust one of the organisations that certified them for the strictest compliance and regulations in the public cloud space.

Sounds good. But how do you exactly verify those claims? Again, you can't. You are back to square 1: trusting Microsoft acts in good faith and acts in your best interest.

How do you verify that a doctor is making the right call re how to treat your cancer? You either become a doctor yourself, or trust that they know what they're doing.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#107
post #67

Earlier quoted context omitted.

When has a SaaS operator stolen data hosted on their service?

Not agreeing with thread OP here, but I would certainly differentiate between "stealing" and "exploiting" (not in a security exploit sense). User data certainly gets exploited on _some_ SaaSs that would otherwise be unexploitable on your own stack. I'm not saying this necessarily applies to compute engines or storage as a service or whatever, but something like gmail (SaaS) where your data is used to target ads at yo…

The difference is that in the case of Gmail, monetisation is though ads and in the case of compute engine or storage the monetisation is through client payments.

If Google, Microsoft or other companies start to look at the data to exploit it hey will lose trust, the customers and the data.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#108
post #89

Earlier quoted context omitted.

> hide :27017 behind a firewall with only your app's DB access layer talking to it? Because if you can do without it, why bother? Developing an access layer costs time and money. If you can leverage the DB features to do what you need, you can make you stack simpler and more maintainable.

It does not take that much time or effort to set up useful subnet/vpc security in AWS. Put the database in your VPC, say only your application vpc can talk to it. Done. Reasonably good security practices are not that much effort, and really it's a case for respecting your users for the most part. The security trust game is starting to blow up. Yahoo just lost $250million dollars to it.

Sorry, when I said "if you can do without it", with "it" I meant the application access layer, not the vpc.

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#109
post #100
post #86

Earlier quoted context omitted.

Well, this post was a marketing post, not a product release. Product release posts in Azure are much more informative for a dev that this post.

> Product release posts in Azure are much more informative for a dev [than] this post. Who is this for then?

The dev managers that see a new buzzword and think, "ooh azure supports mongo now... we should target it for our new app, I hear that MEAN stack is really nice, it should fit right in."

Re: Dear MongoDB users, we welcome you in Azure DocumentDB

#110

As someone that almost got bitten by MongoDB's lax auth defaults, I was happy to read that DocumentDB has enabled access control out of the box and no default username/password. Also, there's a query playground if you want to try it out quickly: https://www.documentdb.com/sql/demo

It's important to be aware of security implications of leaving an unauthenticated server listening on the open internet (listening on 0.0.0.0 is not the default since some time now and if installing the rpm/deb package listening on 127.0.0.1 is the default option). Also never leave an internet facing server without a firewall. As a SaaS it's not surprising DocumentDB got security configured, and it also won't be surp…

Pretty much everything Azure does is over TLS and requires authentication.. some of the authentication for services is more convoluted than others.

Personally, I'm pretty happy with how easy it is to use the Azure Storage services (blob, tables, queues) as well as their Azure SQL offering. Far less arcane configuration options than you get with AWS's competing options. If only their compute nodes weren't so pricey.

Post reply on HN