Scott Lowe

NOVEMBER 28, 2017

Naim kicks off the session with looking at the four phases users go through when they are choosing/adopting a storage solution: Choosing the right storage solution. Running it (operating it in production). The first item is storage type. With regards to security, EFS offers a number of security-related features.

System 60

System Storage Linux Architecture 60

Scott Lowe

DECEMBER 6, 2012

Operating Systems/Applications. I found this article on imperative vs. declarative system configuration is quite helpful in understanding Puppet’s declarative model. QEMU, on the other hand, is needed to emulate everything else that a VM needs: networking, storage, USB, keyboard, mouse, etc. Apparently, “Mt.

Vmware 108

Vmware Virtualization Storage Hardware 108

Scott Lowe

FEBRUARY 1, 2019

The folks over at Cilium took a look at a recent CNI benchmark comparison and unpacked it a bit. Maarten Goet has a few recommendations on securing Kubernetes on Microsoft Azure. Lior Kamrat has an article on securing Azure Container Registry for CI/CD pipelines using Azure service principals. Operating Systems/Applications.

Network 60

Network Resources Devops Vmware 60

Scott Lowe

NOVEMBER 9, 2018

The Intel Management Engine (ME) has received a bit of attention as a potential security vulnerability; in this article , authors Maxim Goryachy and Mark Ermolov expose some new concerns around the Intel ME and its undocumented Manufacturing Mode. From an unknown author, we have this security rant on Flatpak. Servers/Hardware.

Load Balancer 60

Load Balancer Operating Systems Intel Hardware 60

Scott Lowe

JULY 21, 2016

Kevin Houston has an updated blade server comparison chart that might be helpful in making hardware decisions. Via an article by Jason Scanga , I found out that a STIG (security technical implementation guide) has been released for VMware NSX. Rob Hirschfeld has an article listing some ways containers are more secure than VMs.

Vmware 60

Vmware Linux Storage Hardware 60

Scott Lowe

MARCH 23, 2017

Gabriele Gerbino has a nice write-up about Cisco’s efforts with APIs ; his article includes a brief description of YANG data models and a comparison of working with network devices via SSH or via API. Operating Systems/Applications. installation caused by duplicate NSX Manager UUIDs. Servers/Hardware. Check back next time!

Open Source 60

Open Source Storage Vmware Network 60

Scott Lowe

MAY 17, 2019

Since we’re on a bit of a security kick this time around, then the recent announcement by HyTrust of HyTrust CloudControl 6.0 Speaking of Pulumi, Kyle Galbraith wrote up a comparison of Pulumi and Terraform for infrastructure as code. Operating Systems/Applications. Servers/Hardware. seems appropriate to include.

Linux 60

Linux Dell Open Source Licensing 60

Scott Lowe

MAY 25, 2017

Anthony Shaw has a good comparison of Ansible, StackStorm, and Salt (with a particular view at applicability in a networking context). These viewpoints—that security via micro-segmentation is a compelling use case for NSX—is one I’ve seen repeated in numerous environments. Operating Systems/Applications. Virtualization.

Linux 60

Linux Open Source Network Vmware 60

Scott Lowe

MAY 25, 2017

Anthony Shaw has a good comparison of Ansible, StackStorm, and Salt (with a particular view at applicability in a networking context). These viewpoints—that security via micro-segmentation is a compelling use case for NSX—is one I’ve seen repeated in numerous environments. Operating Systems/Applications. Virtualization.

Linux 60

Linux Open Source Network Vmware 60

Scott Lowe

JANUARY 14, 2016

This is a fascinating (to me, at least) paper on the implications of non-volatile storage on today’s data centers (and data center hardware). A moderate security bug in OpenSSH (all releases between 5.4 Operating Systems/Applications. Servers/Hardware. Good stuff here—I highly recommend reading this paper. Virtualization.

Vmware 60

Vmware Devops Storage Linux 60

Scott Lowe

MARCH 5, 2013

This article by Avi Chesla points out a potential security weakness in SDN, in the form of a DoS (Denial of Service) attack where many switching nodes request many flows from the central controller. Operating Systems/Applications. Another one from Brent, this time on Provider Bridging and Provider Backbone Bridging.

Virtualization 101

Virtualization Storage Vmware Network 101

Scott Lowe

MAY 3, 2019

Diógenes Rettori has a comparison of Istio and Linkerd as solutions for service mesh. Operating Systems/Applications. Jim Handy (“The SSD Guy”) has a four-part series (I think only three parts have been published as of this post) on the two different operating modes for Intel’s Optane DIMMs (persistent memory).

Vmware 60

Vmware Open Source Intel Applications 60

Scott Lowe

MARCH 8, 2016

Cue the round of folks claiming that this is why proprietary network operating systems [NOSes] are the route the networking industry should be taking.). Cumulus Networks recently shifted their pricing and licensing model toward perpetual licenses; this article has more information and a comparison of the old vs. new models.

Vmware 60

Vmware Linux Intel Network 60

Scott Lowe

APRIL 24, 2015

Kevin Houston’s March 2015 blade server comparisons might be a useful place to start. If you’re interested in an update on how Docker security is evolving, this article on Docker security enhancements by Daniel Walsh is a good read. Operating Systems/Applications. Cloud Computing/Cloud Management.

Vmware 60

Vmware Storage Firewall Network 60

Scott Lowe

JANUARY 14, 2016

This is a fascinating (to me, at least) paper on the implications of non-volatile storage on today’s data centers (and data center hardware). A moderate security bug in OpenSSH (all releases between 5.4 Operating Systems/Applications. Servers/Hardware. Good stuff here—I highly recommend reading this paper. Virtualization.

Devops 60

Devops Vmware Storage Open Source 60

Scott Lowe

FEBRUARY 24, 2018

This doesn’t make me feel very secure. Courtesy of Corey Quinn, here’s an awesome AWS versus Azure comparison , comic book style. Operating Systems/Applications. Servers/Hardware. Nothing this time around, sorry! Cloud Computing/Cloud Management. Speaking of Buildah…here’s a post from Tomáš Tome?ek

Vmware 60

Vmware Load Balancer Network Open Source 60

Scott Lowe

JANUARY 6, 2018

When you’re operating at the scale at which Netflix operates, this is no trivial feat. Christian Kellner talks about work done on Thunderbolt 3 security levels for GNU/Linux. Jorge Salamero Sanz (on behalf of Sysdig) provides a similar comparison, this time looking at ECS, Fargate, and EKS. Servers/Hardware.

Linux 60

Linux Vmware Comparison Network 60

Scott Lowe

AUGUST 16, 2017

Anthony Shaw has a good comparison of Ansible, StackStorm, and Salt (with a particular view at applicability in a networking context). These viewpoints—that security via micro-segmentation is a compelling use case for NSX—is one I’ve seen repeated in numerous environments. Operating Systems/Applications.

Open Source 60

Open Source Network Linux Engineering 60

Scott Lowe

AUGUST 26, 2017

Given the increasing reliance on AWS, good security posture is a must. Moritz Heiber of ThoughtWorks has a veritable treatise on using AWS with security as a first-class citizen. It’s up to you to decide whether this is a security risk or not. Operating Systems/Applications. Servers/Hardware. Virtualization.

Hardware 60

Hardware Devops Network Vmware 60

Scott Lowe

MARCH 30, 2018

Sean Howard talks about using the NSX Service Compose to create a more elegant ruleset for enforcing security policy. And while we’re discussing the Docker socket, the inimitable Jessie Frazelle shares some useful details on building container images securely on Kubernetes. Tirumarai Selvan has a comparison.

Linux 60

Linux Vmware Windows Applications 60

Scott Lowe

MARCH 17, 2016

Russell Pope at Kovarus recently wrote about using security groups to manage the VMware NSX distributed firewall. In talking with customers, I find that one of the things that really challenges their thinking is how to best utilize security groups to their maximum effect. Operating Systems/Applications. Servers/Hardware.

Vmware 60

Vmware Linux Network Open Source 60

Scott Lowe

JUNE 11, 2014

He makes comparisons among server virtualization, 10 Gigabit Ethernet, and SDN, and feels that in order for SDN to really hit this market it needs to be “not a user-facing feature, but rather a means to an end” (his words). Operating Systems/Applications. I don’t know. Check out this command. (I

Vmware 60

Vmware Storage Network Virtualization 60

Scott Lowe

JULY 13, 2018

Operating Systems/Applications. Shahidh Muhammad has a review/comparison of various tools aimed at helping developers build and deploy their apps on Kubernetes. Bernd Malmqvist talks about Avi Networks’ software-defined load balancing solution, including providing an overview of how to use Vagrant to test it yourself.

Load Balancer 60

Load Balancer Virtualization Authentication Tools 60

Scott Lowe

OCTOBER 22, 2015

Here’s hoping I’ve managed to find something of value and interest to you in this latest collection of links and articles from around the web on networking, storage, virtualization, security, and other data center-related technologies. Operating Systems/Applications. Welcome to Technology Short Take #55! Networking.

Vmware 60

Vmware Virtualization Guidelines Network 60

Sean Daniel

MAY 25, 2012

and I thought it would be great to do a little bit of a comparison now that I’ve played with it for a bit. So let’s get down to business, my impressions and comparisons between the iPad (3rd generation) and the Playbook 2.0. You can even use it as temporary storage while you travel. This comparison is helpful.

Apple 53

Apple Comparison Windows SMB 53

Scott Lowe

MARCH 10, 2015

As we evolve towards more automated/orchestrated environments, it’s important we don’t leave security behind. Here’s a post by Grant Orchard on using VMware NSX’s security groups to protect workloads deployed via vCAC (now vRA). Operating Systems/Applications. Cloud Computing/Cloud Management. Virtualization.

Vmware 60

Vmware Linux Hardware Software Development 60