Chapter 10
1 min read

The Old Bridge

Legacy Systems Fail Under Load

Old, unmaintained components behave like the collapsing bridge: they don’t break slowly — they break suddenly, and only when you depend on them most.

Old, unmaintained components behave like the collapsing bridge:
they don’t break slowly — they break suddenly, and only when you depend on them most.

There is an old saying in software engineering:

"If it works, don't touch it."

That's a dangerous mindset in security, as legacy systems often harbor unpatched vulnerabilities and can contain well-known CVEs. Those systems should be maintained at least in the following ways:

  • Regularly audit legacy systems for vulnerabilities and performance issues.
  • Plan and execute modernization strategies to replace or upgrade outdated components.
  • Rebuild the Docker images and update dependencies frequently, when possible.
  • If the system is not maintainable, try to replace it with modern, supported alternatives.

Exercise

  1. Identify any legacy systems in your infrastructure that may pose a risk under load. Create a plan to modernize or replace them.
  2. Set up regular audits to check for vulnerabilities in these systems.

A hardened warrior is someone who eats lighter meals to stay agile and healthy.