In this presentation, you will learn how to change the configuration of your programs in runtime — without deployment or restart. First, I will talk about the internal structure and primary components of IConfiguration, and then focus on the practical aspects of working with the configuration service: - how to adapt the program to work with a dynamic configuration; connection of configuration providers in the Azure ecosystem: Key Vault and Azure App Configuration; Connect a push-based configuration update model.

1. 1

2. 2
About me
Click to add text
Serhii Buta, 6+ years of experience in .NET
B2C Back End Team Lead at Wirex
Develops distributed systems on Azure Cloud
Has a good experience in solving infrastructure
problems in microservice architecture
https://twitter.com/butaserhii
https://t.me/s_buta

3. 3

4. IConfiguration Internals and Patterns
Key Vault & App Configuration
Demo
4

5. 5
IConfiguration Internals
Click to add text

6. 6

7. 7

8. 8

9. 9

10. 10

11. 11
KEY11=PURPLE
KEY12=PURPLE
KEY21=BLUE
KEY22=BLUE
KEY11=GREEN
KEY22=GREEN
KEY11=GREEN
KEY12=PURPLE
KEY21=BLUE
KEY22=GREEN
+ =
Combine & Overwrite

12. 12
IConfiguration Usage Patterns

13. IOptions – singleton, static, no named options
IOptionsSnapshot – scoped, dynamic, named options
IOptionsMonitor – singleton, dynamic, named options
13

14. IOptions
14

15. IOptionsSnapshot
15

16. IOptionsMonitor
16

17. 17
Azure Key Vault &
Azure App Configuration

18. Key Vault
Usage Scenario
Secrets store:
• Connection strings
• Certificates
• External services API keys
• Crypto keys
18

19. App Configuration
Usage Scenario
Configuration store:
• Logging configuration
• Rate limits
• Service specific non-secure configs
• Simple business rule configs
• Feature toggles
19

20. 20

21. 21
Delivery, Security & Audit

22. 22
Configuration Delivery Process

23. Security & Audit Environment isolation
Dedicated Key Vaults/App Configurations per environment
Access control
Restrict access by IPs, set only required RBAC permissions
IConfigurationProvider priority
Order configuration providers by their security level
Audit and monitoring
Stream audit events to Logs Analytics and set up alerts
23

24. 24
Scalability & Reliability

25. &
Key Vault App Configuration
Requests quota:
2k requests per 10 seconds
Auto failover to paired region
SLA: 99.99%
Requests quota:
20k requests per 1 hour
Manual failover setup
SLA: 99.9%
25

26. 26
Split by security level Split by domain

27. 27
Pull & Push Configuration
Updates

28. 28
Push Configuration Example

29. 29
Demo
https://git.io/JRYVF

30. Tickets Migration
• Keep response time <250ms
for users
• Millions of tickets to migrate
• Migrate tickets as fast as
possible but keep users SLA
30

31. 31
Thanks!