go-zero 开源项⽬成⻓史 About me • go-zero 作者 • 阿⾥云MVP • 腾讯云TVP • ArchSummit 明星讲师 • GopherChina 主持⼈&⾦牌讲师 • 极客时间 Go 专题出品⼈ • 腾讯云开发者⼤会讲师 TOC ● go-zero 的由来 ● go-zero 的现状 ● go-zero 的成⻓阶段 ● go-zero 推⼴思路 推⼴思路 ● go-zero 社区发展思考 ● go-zero 的未来 go-zero 的由来 • 源起 2013 • 业务驱动、业务⽀撑 • 经历过的业务 • 经历过的 Go 发展阶段 go-zero 的现状 • star 增⻓趋势 • contributors • ⽤户 • 社区⽤户 • 企业⽤户 • 质量标准 • 需求 • PR 标准 go-zero go-zero 数据统计 star 增⻓趋势 Contributors 社区⽤户 企业⽤户 代码质量 功能评估 & 代码合并 • 功能评估 • 如⾮必要，勿增实体 • MVP，最⼩化接⼝ • 社区需求驱动 • PR要求 • CI检测，格式、安全、单测 • 修改或新增代码必须单测覆盖 go-zero 发展阶段 • ⼀年⼀万星 • 两年两万星 • 第三个年头

Is std::mdspan a Zero-overhead Abstraction? Oleksandr Bacherikov Snap IncWhat is std::mdspan? It’s a view over a multi-dimensional array. It’s designed primarily to be used as a function parameter right? 24 Wrong! std::layout_stride supports only all strides specified at runtime. If we target zero overhead, we have to specify one of the strides as 1 at compile time.What does the Standard offer

云原生go-zero微服务框架设计思考 万俊峰Kevin@好未来 关于我 万俊峰Kevin ● go-zero作者 ● 好未来资深专家 ● 晓黑板研发负责人 ● 十多年研发团队管理经验 ● 近20年开发和架构经验 Agenda ● go-zero之前世今生 ● go-zero是如何设计的 ● go-zero如何高效解决问题 go-zero之前世今生 go-zero的由来 ● ● 架构的选型 ● 如何无痛切换 go-zero是什么？ ● Web & RPC微服务框架 ● 微服务代码生成工具goctl ● 通用API定义规范 go-zero的设计原则 ● 保持简单，第一原则 ● 弹性设计，面向故障编程 ● 工具大于约定和文档 ● 尽可能约束做一件事只有一种方式 ● 对业务开发友好，封装复杂度 go-zero是如何设计的 客户端 API端 Service端 数据上报到prometheus go-zero如何高效解决问题 支持的特性 ● tag支持：path, form, json ● default, optional, options, range 解析校验 ● httpx.Parse(...) ● 参数错误自动返回400 ● 支持自定义错误返回方式 http请求自动解析校验 https://github.com/tal-tech/go-zero https://zero

Privilege Escalation Who: •Ransomware gangs •advanced adversaries •Game hackers How: •Looking at the trust between medium to high integrity levels •Configurations •Filesystem Lateral movement Who: •Financial Controlled Heap MemoryWhy Remote Code Execution (RCE)? ● High Impact and Exploitability ○ High Value of Zero-Days ● Expanded Attack Surface ○ Cloud computing ○ Remote work ○ Increase in internet-connected Surface? Start by defining Trust BoundariesWhat is a Trust Boundary? Anytime there is a crossing of the trust between an untrusted component to a trusted componentDefining Trust Boundaries Downloads from

enables: correlated and centralized logs, container security, east/west traffic management, a zero-trust model, a whitelist, Role-Based Access Control (RBAC), continuous monitoring, signature-based the service mesh 6. Zero Trust down to the container level. Zero trust requires strict controls, never trust anything by default and always verify. Key aspects of zero trust at the container level

microservice security ● R&D on Next Generation Access Control (NGAC) ● Exclusively co-host annual zero trust multi-cloud conference Best in Class Team ● Creators of the service mesh Istio, gRPC, Apache configurations to be added to the group will directly use Istio APIs. Tetrate OSS Projects ● Wazero: the zero dependency WebAssembly runtime for Go developers ● Istio Security Scanner ● Envoy Gateway: Manages safe enterprise-grade Istio distro ● Func-e: Make running Envoy easy Wazero ● wazero is the only zero dependency WebAssembly runtime written in Go. ● Contribute to Go/TinyGo/Rust ● Using WasmPlugin API

extra_safety_checks: false # # signing_metadata_url_base (NoneType, str) # # Base URL for obtaining trust metadata updates (i.e., the �*.root.json� # # and �key_mgr.json� files) used to verify metadata and _NONDIGIT_RE _BOUNDS _BOUNDS _BOUND_DELTAS _FLOAT_PATTERN _PARSE_TD_RE _PARSE_TD_KW_MAP parse_td ZERO HOUR UTC EPOCH_AWARE EPOCH_NAIVE LocalTZ DSTSTART_2007 DSTEND_2007 DSTSTART_1987_2006 DSTEND_1987_2006 using stop=None, as this will yield an infinite sequence of dates. ZERO HOUR class ConstantTZInfo(name='ConstantTZ', offset=ZERO) Bases: datetime.tzinfo A tzinfo subtype whose offset remains constant

extra_safety_checks: false # # signing_metadata_url_base (NoneType, str) # # Base URL for obtaining trust metadata updates (i.e., the �*.root.json� # # and �key_mgr.json� files) used to verify metadata and fish shell initialization. (#12811) • Directly suppress use of binstar (conda) token when fetching trust metadata. (#12889) • Add a new “auth handler” plugin hook for conda. (#12911) • Lock index cache with isort and add pre-commit isort hook. (#12554) • Add functional tests around conda’s content trust code. (#11805) • Enable flake8 checks that are now handled by black. (#12620) 4.4. Release notes

extra_safety_checks: false # # signing_metadata_url_base (NoneType, str) # # Base URL for obtaining trust metadata updates (i.e., the �*.root.json� # # and �key_mgr.json� files) used to verify metadata and fish shell initialization. (#12811) • Directly suppress use of binstar (conda) token when fetching trust metadata. (#12889) • Add a new “auth handler” plugin hook for conda. (#12911) • Lock index cache with isort and add pre-commit isort hook. (#12554) • Add functional tests around conda’s content trust code. (#11805) • Enable flake8 checks that are now handled by black. (#12620) Contributors • @beeankha

extra_safety_checks: false # # signing_metadata_url_base (NoneType, str) # # Base URL for obtaining trust metadata updates (i.e., the �*.root.json� # # and �key_mgr.json� files) used to verify metadata and _NONDIGIT_RE _BOUNDS _BOUNDS _BOUND_DELTAS _FLOAT_PATTERN _PARSE_TD_RE _PARSE_TD_KW_MAP parse_td ZERO HOUR UTC EPOCH_AWARE EPOCH_NAIVE LocalTZ DSTSTART_2007 DSTEND_2007 DSTSTART_1987_2006 DSTEND_1987_2006 using stop=None, as this will yield an infinite sequence of dates. ZERO HOUR class ConstantTZInfo(name='ConstantTZ', offset=ZERO) Bases: datetime.tzinfo A tzinfo subtype whose offset remains constant