《DevOps for Finance》笔记01

书中还讨论了金融机构与 Google 、 Facebook等互联网企业的IT业务模式的不同：

1. Banks or investment advisers can’t run continuous, online
   behavioral experiments on their users, like Facebook has done.
   Something like this could violate securities laws.

2. 与Fackebook不同，银行或者投资顾问公司不能对用户进行持续的、在线的行为测试，否则会违反相关证券交易法。

3. DevOps practices like “Monitoring as Testing” and giving developers
   root access to production in “NoOps” environments so
   that they can run the systems themselves work for online social
   media startups, but won’t fly in highly regulated environments
   with strict requirements for testing and assurance, formal
   release approval, and segregation of duties.

4. 来自在线社交媒体公司的一些DevOps实践，如“监控即测试”，以及在"NoOps"环境下给予开发人员对生产系统的root权限，让他们能自行运行系统。这些在高度监管的环境下是不会发生的，这种环境要求严格的测试和质量保证，正式的发布许可以及职责划分。

5. Web and mobile have become important channels in financial
   services—especially in online banking and retail trading—and
   web services are used for some B2B system-to-system transactions.
   But most of what happens in financial systems is systemto-
   system through industry-standard electronic messaging protocols
   like FIX, FAST, and SWIFT, and low-latency proprietary
   APIs with names like ITCH and OUCH. This means that tools
   and ideas designed for solving web and mobile development
   and operations problems can’t always be relied on.

3.Web和移动端已经成为金融服务的重要渠道，特别是在在线银行和零售交易。另外web服务也被用于一些B2B系统间交易。但是，金融系统中最多的还是通过行业标准的通信协议，如FIX, FAST和SWIFT,以及ITCH和OUCH等专属低延迟API来进行系统间交互的。这就意味着未解决Web和移动端的开发和运维问题而设计的工具和概念并不是总是可依靠的。

4. Continuous Deployment, where developers push changes out to
   production immediately and automatically, works well in stateless
   web applications, but it creates all kinds of challenges and
   problems for interconnected B2B systems that exchange thousands
   of messages per second at low latency, and where regulators
   expect change schedules to be published up to two quarters
   in advance. This is why this book focuses on Continuous Delivery:
   building up automated pipelines so that every change is tested
   and ready to be deployed, but leaving actual deployment of
   changes to production to be coordinated and controlled by
   operations and compliance teams, not developers.

5. 持续部署，如开发将变更立即且自动地推送至线上地这种方式，在无状态应用中工作地非常好，但它对互联地B2B系统造成了各种问题和挑战。这些系统以极低的延迟每秒交换数千条消息，而管理者希望上线计划能提前到两个季度。

6. While almost all Internet businesses run 24/7, many financial
   businesses, especially the financial markets, run on a shorter
   trading day cycle. This means that a massive amount of activity
   is compressed into a small amount of time. It also means that
   there is a built-in window for after-hours maintenance and
   upgrading.
   5.当几乎所有的互联网也是7*24运行，很多金融业务，尤其是金融市场，其交易时间更短。这意味着大量的活动是被压缩在一个较短时间里的。也意味着这其中有一个内嵌的用于盘后维护和升级的窗口。

7. While online companies like Etsy must meet PCI DSS regulations
   for credit card data and SOX-404 auditing requirements,
   this only affects the “cash register” part of the business. A financial
   services organization is effectively one big cash register,
   where almost everything needs to be audited and almost every
   activity is under regulatory oversight.
   6.当互联网公司如Etsy需要符合PCI DSS信用卡数据法规和SOX-404审计要求，这只影响到了“收银”业务。而一个金融服务机构是一个非常大的收银机，几乎所有的业务是需要被审计，所有的活动都受到监管。