Datadog on Secure Remote Updates

August 20, 2024

Arthur Bellal

Arthur Bellal

Paul Coignet

Paul Coignet

Rory McCune

Rory McCune

Category

In modern dynamic environments there is a requirement to be able to quickly respond to signals and change the configuration of your applications and systems. As Datadog supports an ever widening set of customer use cases, it has become necessary to allow for updates to systems directly from Datadog's platform.

In this session, host Rory McCune (Senior Advocate) will be joined by Arthur Bellal (Staff Engineer) and Paul Coignet (Software Engineer II) from the fleet automation team to discuss how Datadog approached the challenge of building out a secure remote update facility.

Our expert engineers will discuss the evolution of Datadog's secure remote update facility to its current state. We will touch on some of the challenges that implementing this capability presents, including how to manage cryptographic keys to ensure the integrity of updates and supporting the high level of security needed for systems providing this facility.

We will also talk about how we addressed the requirement to scale The Update Framework (TUF) to support remote configuration for millions of Datadog agents around the world and talk about some of the new capabilities that this has unlocked in our platform.Attendees will leave this session with a better understanding of how they can provide remote update facilities for their environments in a secure manner.