Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Opa – An open-source, general-purpose policy engine

github.com

Post reply on HN
Print view View original

41–43 of 43 posts

Re: Opa – An open-source, general-purpose policy engine

#41

Post by valenciarose »

tsandall wrote: post #16

Co-author of OPA here. I’m happy to answer any questions about the project!

What about translation of rule subsets to other enforcement mechanisms? ACLs and rules for physical infrastructure like switches and routers being one possible target where embedding the agent itself may be impractical. I understand that SDN dominates the core infrastructure, but more traditional infrastructure is frequently in place closer to enterprise users. The point being defense in depth, rather than relying on physical infrastructure as a sole enforcement mechanism.

Re: Opa – An open-source, general-purpose policy engine

#42

Post by tsandall »

lawrenceong wrote: post #39
tsandall wrote: post #16

Co-author of OPA here. I’m happy to answer any questions about the project!

hi again, just watched the youtube where you presented OPA on KubeCon 2018. i'm interested in it, but it appears most of your use case is around infrastructure. do you have use cases where it is applied in the application itself? for example, you mentioned Netflix used it for their infrastructure -- would Netflix use this to manage all the paying subscriber functions too? I imagine functions such as 1. what movies ar…

Hello! You can certainly use OPA to answer the kinds of policy questions in your examples. OPA is not tied to a particular domain (which is why we call it general-purpose.) Whether you're writing policy over movies, games, etc. it's all the same to OPA (JSON).

Re: Opa – An open-source, general-purpose policy engine

#43

Post by lawrenceong »

tsandall wrote: post #42
lawrenceong wrote: post #39

Earlier quoted context omitted.

hi again, just watched the youtube where you presented OPA on KubeCon 2018. i'm interested in it, but it appears most of your use case is around infrastructure. do you have use cases where it is applied in the application itself? for example, you mentioned Netflix used it for their infrastructure -- would Netflix use this to manage all the paying subscriber functions too? I imagine functions such as 1. what movies ar…

Hello! You can certainly use OPA to answer the kinds of policy questions in your examples. OPA is not tied to a particular domain (which is why we call it general-purpose.) Whether you're writing policy over movies, games, etc. it's all the same to OPA (JSON).

tks for getting back to me @tsandall. what i was wondering was OPA's performance scalability when it comes to millions of hits -- do you have any metrics or known implementations you can share with me?
Post reply on HN