Meta如何构建大规模加密监控
- Cryptographic monitoring at scale has been instrumental in helping our engineers understand how cryptography is used at Meta.
- 大规模的加密监控在帮助我们的工程师了解加密在Meta中的使用方面发挥了重要作用。
- Monitoring has given us a distinct advantage in our efforts to proactively detect and remove weak cryptographic algorithms and has assisted with our general change safety and reliability efforts.
- 监控在我们主动检测和移除弱加密算法的努力中给了我们明显的优势，并帮助我们提高了整体变更的安全性和可靠性。
- We’re sharing insights into our own cryptographic monitoring system, including challenges faced in its implementation, with the hope of assisting others in the industry aiming to deploy cryptographic monitoring at a similar scale.
- 我们分享了我们自己的加密监控系统的见解，包括在实施过程中遇到的挑战，希望能帮助行业内其他希望在类似规模上部署加密监控的人。
Meta’s managed cryptographic library, FBCrypto, plays an important role within Meta’s infrastructure and is used by the majority of our core infrastructure services. Given this, having a robust monitoring system in place for FBCrypto has been instrumental in ensuring its reliability as well as in helping our engineers understand how cryptography is used at Meta so they can make informed development decisions.
Meta管理的加密库FBCrypto在Meta的基础设施中扮演着重要角色，并被我们大多数核心基础设施服务所使用。因此，建立一个健全的监控系统对于确保FBCrypto的可靠性以及帮助我们的工程师了解加密在Meta中的使用情况，从而做出明智的开发决策，至关重要。
Monitoring the health of our library allows us to detect and revert bugs before they reach production services. The data from our monitoring service provides insight into the usage of FBCrypto, allowing us to make data-driven decisions when deciding what improvements to make to the library. For example, it helps us identify components that need more attention either because they are on a hot path or are less stable.
监控我们库的健康状况使我们能够在错误到达生产服务之前检测并恢复它们。来自我们监控服务的数据提供了对FBCrypto使用情况的洞察，使我们在决定对库进行哪些改进时能够做出数据驱动的决策。例如，它帮助我们识别需要更多关注的组件，因为它们要么处于热点路径，要么不太稳定。
Understanding exactly how clients are using said library is a common pain point in managing any widely distributed library. But the improved understanding of FBCrypto provided by our monitoring helps us maintain a high bar for security posture...