why the internet doesn’t always work - medianama · 2016. 3. 17. · the path of content to your...

Akamai Confidential ©2012 Akamai Faster ForwardTM Akamai Confidential ©2012 Akamai Faster ForwardTM

Why the Internet Doesn’t Always Work

Lelah Manz, Chief Strategist Commerce, Akamai -‐ @lelahm


The Path of Content to your Shopper

SaaS

Internet

IaaS

Path of Response to End User

Degree of Control


The Challenges Along the Way

SaaS

Internet

IaaS


Degree of Control

Scale Mobile 3rd Party

Performance Security


Performance means business

Bounce Rates Increase

Conversion Declines

2012 Wal-‐Mart Performance Case Study: •  For every 1 second of improvement, 2% increase in conversions •  For every 100 ms of improvement incremental revenue grew by up to 1% •  SEO benefits for entry pages and reduced bounces

SF Web Performance Group – February 16, 2012 Slides available at hTp://min.us/rrmTFI0

As response )me increases …


Mobile Website & App Performance Impact Clear correlation between increase in mobile site load time & abandonment

Source: Gomez Real User Monitoring

Slower pages = higher abandonment •  Reduces revenue •  Increases costs •  Damages brand

0

5

10

15

20

25

30

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15

Aban

donm

ent R

ate (%

)

Page Load Time (sec.)

Abandonment Rate -‐ All Browsers

Abandonment Rate Across 200+ Web Sites / 177+ Million Page


Attacks are Large and Now Commonplace

•  Typical Attack Size: 3-10 Gbps

•  Large Attack Size: 100-200 Gbps

•  Attacks originate from all geographies and move between geographies during the attack

Cost of downtime for large eCommerce sites can exceed $100,000/ min.1

0

100

200

300

400

500

600

2009 2010 2011

Num

ber o

f Atta

cks

Source: 1 McAfee

14

231

506


US Holiday Season Cyber Extortion Attacks

Customer 1

Customer 2

Customer 3

Potential $15M in Lost Revenue

PROTECTED

US Customer #1

US Customer #2

US Customer #3

US Customer #4

US Customer #5

Times Above Normal Traffic

9,095x

5,803x

3,115x

2,874x

1,807x

Peak Attack Time (GMT)

11/30 2PM

12/1 2PM

11/30 2PM

12/1 1PM

12/1 1PM

Highly distributed international DDoS attacks from Asia-Pac, South America and Middle East


3rd Party Content the Impact of the Facebook Outage

Reference: Catchpoint hTp://www.catchpoint.com/


End-Users

Internet

The Web: Simple on the Outside…

Datacenter


X

End-Users

12,000 networks connected by peering points

X

… but problematic on the Inside

AT&T

Level 3

Cogent

(Cloud) Datacenters

3rd Party Content


(Cloud) Datacenters

X

X

End-Users

Akamai Server

Serving from the Edge of the Internet

AT&T

Level 3

Cogent

3rd Party Content


•  Mobile traffic is data is inherently different to fixed line traffic (‘Lossy’ wireless mile) •  Requests from mobile users to your mobile applicagon are subject to

Packet Loss Congesgon Network swgching (3G > WiFi) Lots of re-‐transmission of data

Mobile Application

Challenges of Mobile Delivery


Scale

•  Test to know your thresholds, plan for 3-‐6x peak •  Have a plan B – a smart priorigzagon mechanisms

Performance and Reliability

•  Cache where possible, and serve content from the “edge” of the internet; Use dynamic page caching techniques

• When caching is not possible, detect problems with BGP rougng and bypass them

Security

•  Detect, block and absorb aTacks from the “edge” of the internet, where they will impact your user the least

•  Have a DDos aTack runbook – know your procedures and techniques ahead of gme

Best Practices for Internet Delivery


Best Practices for Delivery to the Client

Mobile • Detect mobile devices and serve device-‐specific content •  Reduce content size through compression, minificagon, image size

•  Reduce the total number of requests for mobile website with consolidagon

3rd Party Content •  Take control over 3rd party content performance (asynchronous load, deferral, kill script)

•  Ask 3rd parges for Performance SLAs, monitor and hold accountable


Gaining Back Control

SaaS

Internet

IaaS


Scale

•  Thresholds and Load Tesgng

•  Have a Plan B for throTling

Mobile, Global, and 3rd Party •  Detect geography,

device, search engines and target content with first response

•  Opgmize content for mobile devices

•  Closely manage your 3rd party content

Performance and Security •  Cache and

accelerate •  Evaluate real end

user performance •  Secure in the Cloud

Total Control


Lelah Manz @lelahm

why the internet doesn’t always work - medianama · 2016. 3. 17. · the path of content to your...

Documents