Maintaining service availability
Systems, devices, and techniques are disclosed for maintaining service availability. Files including code written using a Domain Specific Language (DSL) for network security may be received. A knowledge graph including connections between services may be generated from the code written using the DSL in the files. A service that will have an availability issue may be determined based on the connections between services in the knowledge graph. The service that will have the availability issue may be replicated. The replication of the service that will have the availability issue may occur before the service has the availability issue.
1. A computer-implemented method comprising:
receiving, at a computing device, files comprising code written using a Domain Specific Language (DSL) for network security;
generating, by the computing device, from the code written using the DSL in the files a knowledge graph comprising one or more connections between services;
determining, by the computing device, from the knowledge graph that at least one service will have an availability issue based on the connections between services in the knowledge graph; and
replicating, by the computing device, the at least one service that will have the availability issue.
2. The computer-implemented method of claim 1 , wherein the replicating, by the computing device, the at least one service that will have the availability issue, occurs before the at least one service has the availability issue.
3. The computer-implemented method of claim 1 , wherein the availability issue for the service comprises the service having more incoming connections than a threshold number of connections for the service.
4. The computer-implemented method of claim 1 , wherein the service comprises a service of an application on a cloud computing server system.
5. The computer-implemented method of claim 1 , wherein the files comprising code written using the DSL are received during installation of applications on a cloud computing server system.
6. The computer-implemented method of claim 1 , wherein the knowledge graph further comprises policies defined in the files comprising written using the DSL.
7. The computer-implemented method of claim 6 , wherein the policies are network security policies the allow connections between services.
8. A computer-implemented system comprising:
a storage; and
a processor that receives files comprising code written using a Domain Specific Language (DSL) for network security,
generates from the code written using the DSL in the files a knowledge graph comprising one or more connections between services;
determines from the knowledge graph that at least one service will have an availability issue based on the connections between services in the knowledge graph; and
replicates the at least one service that will have the availability issue.
9. The computer-implemented system of claim 8 , wherein the replicating, by the computing device, the at least one service that will have the availability issue, occurs before the at least one service has the availability issue.
10. The computer-implemented system of claim 8 , wherein the availability issue for the service comprises the service having more incoming connections than a threshold number of connections for the service.
11. The computer-implemented system of claim 8 , wherein the service comprises a service of an application on a cloud computing server system.
12. The computer-implemented system of claim 8 , wherein the files comprising code written using the DSL are received during installation of applications on a cloud computing server system.
13. The computer-implemented system of claim 8 , wherein the knowledge graph further comprises policies defined in the files comprising written using the DSL.
14. The computer-implemented system of claim 13 , wherein the policies are network security policies the allow connections between services.
15. A system comprising: one or more computers and one or more non-transitory storage devices storing instructions which are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising:
receiving, at a computing device, files comprising code written using a Domain Specific Language (DSL) for network security;
generating, by the computing device, from the code written using the DSL in the files a knowledge graph comprising one or more connections between services;
determining, by the computing device, from the knowledge graph that at least one service will have an availability issue based on the connections between services in the knowledge graph; and
replicating, by the computing device, the at least one service that will have the availability issue.
16. The system of claim 15 , wherein the replicating, by the computing device, the at least one service that will have the availability issue, occurs before the at least one service has the availability issue.
17. The system of claim 15 , wherein the availability issue for the service comprises the service having more incoming connections than a threshold number of connections for the service.
18. The system of claim 15 , wherein the service comprises a service of an application on a cloud computing server system.
19. The system of claim 15 , wherein the files comprising code written using the DSL are received during installation of applications on a cloud computing server system.
20. The system of claim 15 , wherein the knowledge graph further comprises policies defined in the files comprising written using the DSL.