Hacker News new | ask | show | jobs
by antoncohen 3013 days ago
I know people are saying this is just like Cloudflare, but there might be some real value differentiation here. Google has been doing some really advanced things in this area for a long time. I think I saw a research paper or talk from 5-10 years ago about how Google shows the impact of network policies before applying them, I just searched for it and couldn't find it[1]. The things like Preview Mode and Rich Rules Language could be very advanced.

[1] But I did find this page about their network research: https://research.google.com/teams/netsys/

2 comments

What kind of network policies? Millions of years ago, Google used Cariden software to simulate what happened when links went down, QoS changes were applied, etc. From what I recall, at some point, the size of the network, new special hardware and the need for more flexibility outgrew the tool's capabilities, so IIRC it was supplanted by in-house solutions that were more real-time and fit into the new SDN architecture.
Preview mode isnt that special, at least in this version: https://cloud.google.com/armor/docs/security-policy-concepts

Http load balancers already log all requests. Security policies decisions will also be logged, but in preview mode won't actually affect the traffic.

EDIT: looks like advanced rules are in alpha for only certain customers...