August 2023 Summaries

Monorepo` is a single `git repository` that holds the source code for projects, contrasting the poly-repo strategy where each project exists in a separate `git repository`. A well-organized monorepo is more than just colocating different projects; it's about bringing them together to foster communication, reuse, and shorten the feedback loop between collaborating teams. Monorepos offer benefits such as code reusability, consistency, simplified scaffolding, faster feedback loops, enhanced collaboration, security, unified versioning, and better integration with build systems like Nx. However, they also come with challenges that require planning, defining boundaries, and setting up CI efficiently. Netlify has introduced an enhanced monorepo experience to simplify the deployment phase for enterprises, offering advanced heuristics to detect settings, provide site pickers, and streamline local development with the CLI.

At Netlify, they're building a world-class cybersecurity program that prioritizes cutting-edge best practices and adaptability over traditional industry approaches. They take a threat-informed risk analysis approach to identify vulnerabilities and apply resources effectively. With a strong offensive security program, automation of secure processes, and a focus on detecting adversarial behavior, Netlify aims to deliver a cohesive roadmap for their security program. By empowering organizational security and working closely with customers, they strive to achieve secure solutions that meet stringent data security requirements.

This blog post discusses the challenges of implementing a Content Security Policy (CSP) for web applications and introduces a dynamic approach to applying a CSP for the script-src directive. The importance of a CSP is highlighted, as it helps prevent malicious actors from executing scripts on a website and attacking visitors. However, setting up a CSP can be difficult due to its fragile nature and tedious maintenance requirements. To overcome these challenges, the blog post introduces the concept of dynamically-generated nonces, which guarantee integrity and prevent cross-site scripting attacks. The blog post also provides a step-by-step guide on how to implement this dynamic approach using Netlify Edge Functions, making it easier for developers to implement an effective CSP without worrying about manual maintenance.

Gatsby Adapters are a new feature that enables seamless integrations between Gatsby and other platforms by taking the production output from Gatsby and turning it into something your deployment platform understands. Gatsby Adapters are responsible for applying HTTP headers, redirects and rewrites, wrapping serverless functions with platform-specific code, and applying trailing slash behavior to URLs. The adapters can also create custom HTTP headers and upload assets to CDNs. With the introduction of Gatsby Adapters, users can now deploy and host Gatsby on their preferred platforms without needing to write additional glue code. The feature is designed to make it easier for developers to deploy and host Gatsby on various platforms, including Netlify.

Netlify is announcing the evolution of its cloud platform by unifying its Netlify and Gatsby Cloud platforms into one world-class solution. As part of this evolution, Netlify is notifying all Gatsby Cloud customers of an end of service date for Gatsby Cloud products and services, with a focus on migrating customers to Netlify Cloud. The decision to sunset Gatsby Cloud will allow Netlify to free up resources to strengthen and secure the future of Gatsby JS, while continuing to invest in making it a reliable choice for the Enterprise and offering an evolving open framework for the larger developer community. This move is expected to provide incredible value to all Gatsby customers through access to differentiated features, products, and solutions on the Netlify Platform.

Netlify has released Firewall Traffic Rules, a new feature that allows Enterprise customers to control access to their web properties based on IP address and geographic location. This feature empowers teams to create and manage traffic rules directly from within the Netlify platform, providing an added layer of protection against malicious web attacks. With Firewall Traffic Rules, teams can block or allow requests from specific IP addresses and countries, grant explicit website access for vendor and contractor networks, prevent visitors from accessing sites from countries that do not adhere to their organization's business policies, and control infrastructure bandwidth spend by blocking unwanted traffic from specific IPs, IP ranges, and countries. The feature is designed to be quick and easy to configure, with granular options for fine-tuning rules as needed.

Netlify has introduced a new feature called Netlify Secrets Controller to help teams ship faster and more securely by providing proactive security for secret keys. This feature offers stricter access control, improved logging safety, and proactive secret scanning to find variables that might be exposing sensitive values such as database passwords or vault keys. By marking environment variables as "secret" in Netlify, the feature applies an opinionated secrets policy, masks sensitive values in build logs, scans built sites and repo code for potential exposure, and provides access control for sensitive keys like database passwords and API keys. This allows teams to focus on shipping customer value without slowing down due to risk, while also reducing business risk of inadvertent or malicious exposure of secret values.

The current state of cybersecurity is complex and economically driven by attackers who have a low barrier to entry and high rewards for their efforts. Defenders are often financially constrained and must prove ROI to justify defensive toolsets, making it challenging to maintain effective security postures. Organizations must prioritize their security posture and make sure that what they put into market keeps their customers safe from cyberattacks. Security is everyone's responsibility, including development teams, marketing teams, and third-party vendors. Building security guardrails into the development process can help prevent creative workarounds and ensure a frictionless experience for developers and product teams. The rise of artificial intelligence and new tools like ChatGPT and Bard have opened up new avenues of accessibility for attackers, making it critical to prepare for the reality that even people without knowledge of computer programming can experiment in building bad actor toolkits and launch sophisticated cyberattacks.

Netlify has introduced a new verification system to automatically flag and prevent potentially malicious or spam actors from spinning up web properties on its platform. The new automated verification process is designed to protect the integrity of the platform and enterprise customers, while also empowering users to verify their identity in a self-service manner. This new system helps ensure that content hosted on Netlify meets its integrity standards, making the platform more safe and secure for all users. The system works similar to a credit score, based on the overall trustworthiness of the inbound connection. It provides an additional layer of protection for both the platform and its customers, while minimizing any inconvenience caused by potential fraudulent behavior.

Introducing the Enhanced Monorepo Experience on Netlify`, a new feature that simplifies deploying monorepo-based sites on Netlify, offers an improved setup flow for monorepos, recommends settings for a monorepo, and enhances local development experience with the Netlify CLI. The enhanced monorepo experience allows users to deploy multiple sites from a single repository by automatically identifying the package manager, build system, and frameworks used in the repository's sites, and provides a site picker to select which sites to deploy. Additionally, it streamlines scenarios where the dist directory resides at the repository root or when there's a need to share a build plugin across multiple sites. The improved local development experience with the Netlify CLI allows users to run commands like `netlify dev` from the repository root instead of changing the working directory, emulating the production behavior of the build pipeline.

Riot Games, the developer behind League of Legends, a popular online multiplayer game, was looking for a reliable web solution to support its massive user base. After researching and evaluating different options, they chose Netlify to build, deploy, and manage their websites. The switch resulted in a 65% reduction in bandwidth usage, improved website performance, and increased developer productivity. With Netlify's modern web platform, Riot Games' developers can now work independently, with more control and autonomy, and the company has seen significant cost savings as a result. The partnership between Riot Games and Netlify has enabled the creation of high-quality digital experiences that delight users while delivering superior performance.