I found this article on their IAM/ABAC service interesting: https://www.ubicloud.com/docs/architecture/attribute-based-a...
I always wonder how the big cloud providers manage to scale their IAM services (from a distributed systems perspective) given they presumably need both low latency and some reasonable level of consistency. Anyone have any pointers to architectural descriptions/publications?
In the article, mentioned Linux is mentioned as the underlying OS. Wonder what approach Ubicloud takes (if any) to have actual diversity in the software stack for the purpose of reliability and security. My assumption here being, that different OSes, while increasing the attack vector also make it more likely that the whole fleet is not susceptible to the same software problem or vulnerability at roughly the same time. Just something I started pondering about after seeing Hetzner, which is quite popular in the BSD land.
Ubicloud is such a good idea. There's no reason why the major cloud providers need be considered more than data center providers. AWS 'bare metal' instances should be priced as a commodity, just as the data centers it used to rent space from are. OSS software can and should do pretty much everything above that layer, with room for commercially licensed software as well, of course.