Academy PRO: Node.js in production. lecture 4
Download as PPTX, PDF3 likes301 views
The document is a lecture plan for a Node.js in production course, covering topics like web application stacks, security measures, performance, and deployment. It includes specific npm packages for authentication, security, logging, and process management. The plan also mentions best practices for development and deployment environments, as well as various tools for optimizing Node.js applications.
Academy PRO: Node.js in production. lecture 4
- 3. Lectures plan 1. Node.js Platform 2. Web applications - Default stack 3. Web applications - Alternative stacks 4. Node.js in Production 5. Miscellaneous
- 5. Security
- 7. Authentication - Sessions npm install express-session
- 9. Authentication - JWT npm install jwt-simple
- 11. Passport - config 307 strategies Google Twitter Facebook JWT VK Linkedin Amazon Github Bitbucket Kerberos
- 12. Passport - login
- 15. Helmet Helmet helps you secure your Express apps by setting various HTTP headers. It's not a silver bullet, but it can help!
- 16. Helmet - middlewares I contentSecurityPolicy for setting Content Security Policy dnsPrefetchControl controls browser DNS prefetching + frameguard to prevent clickjacking + hidePoweredBy to remove the X-Powered-By header + hpkp for HTTP Public Key Pinning hsts for HTTP Strict Transport Security +
- 17. Helmet - middlewares II ieNoOpen sets X-Download-Options for IE8+ + noCache to disable client-side caching noSniff to keep clients from sniffing the MIME type + referrerPolicy to hide the Referer header xssFilter adds some small XSS protections +
- 18. Helmet - CSP
- 20. CSRF - Cross-Site Request Forgery
- 22. cors
- 24. HPP - HTTP Parameters Pollution
- 28. nsp npm install nsp -g nsp check
- 29. No sudo
- 30. Security - common SQL Injections NoSQL Injections HTTPS
- 31. Performance
- 33. Child Process
- 34. Child Process - IPC parent.js sub.js
- 35. Child Process - parent child.channel child.connected child.disconnect()
- 36. Async ftw
- 37. Cluster Cluster master Cluster worker 1 Cluster worker 2 Cluster worker n... Client reqs round-robin
- 38. Cluster
- 42. Npm
- 45. leftpad
- 46. Outtakes There are people behind npm modules People happen to be assholes Npm has fixed the issue within hours Npm has updated its policy of unpublishing
- 48. Why? Waste of time High probability of bugs No bugfixes and upgrades from others
- 50. npm dedupe
- 51. yarn Sebastian McKenzie, FB Offline Mode Deterministic Network Performance Network Resilience Flat Mode
- 52. yarn brew install yarn apt-get install yarn npm install -g yarn package.json Npm package.json Npm registry
- 53. yarn.lock
- 54. yarn - bonus features npm install -> yarn npm install -s async -> yarn add async
- 55. Deployment
- 56. Environment process.env.NODE_ENV Development|staging|production Unix: export NODE_ENV=production Win: SET NODE_ENV=production NODE_ENV=production node app.js
- 58. Environment - cnfg https://github.com/boo1ean/cnfg
- 59. pm2 npm install -g pm2 pm2 start app.js Your app is now daemonized, monitored and kept alive forever.
- 60. pm2 pm2 list
- 61. Pm2 - logs pm2 logs pm2 logs newbie
- 62. Pm2 - monit pm2 monit
- 63. Pm2 - web npm i -g pm2-web pm2-web
- 64. Pm2 - clustering pm2 start ./server.js -i max
- 65. Pm2 - startup pm2 startup
- 66. Logging - access log npm i -s morgan
- 67. Logging - Mongoose log
- 68. Logging - winston npm i -s winston
- 69. Winston - transports Console File Http Winston More CouchDB Loggly MongoDB Redis Riak Additional Transports Elasticsearch SimpleDB Mail Amazon SNS Amazon CloudWatch Amazon Kinesis Firehose Graylog2 Cassandra Azure Table Airbrake Newrelic Logsene Logz.io
- 71. nginx Static content SSL Reverse proxy Reverse proxy Internet