Scott Lowe

JANUARY 21, 2022

Aidan Steele examines how VPC sharing could potentially improve security and reduce cost. Nick Schmidt talks about using GitOps with the NSX Advanced Load Balancer. Orca Security discusses the “Superglue” vulnerability in AWS Glue. Sander Rodenhuis wrote an article on security policies in Kubernetes.

Load Balancer 90

Load Balancer Linux Intel Cloud 90

Scott Lowe

AUGUST 6, 2021

Here’s a quick look at using Envoy as a load balancer in Kubernetes. I saw this blog post about Curiefense , an open source Envoy extension to add WAF (web application firewall) functionality to Envoy. It’s a good starting point for thinking about operating your own active-active architecture. Networking.

Open Source 105

Open Source Load Balancer WAN Architecture 105

Scott Lowe

APRIL 15, 2022

Xavier Avrillier walks readers through using Antrea (a Kubernetes CNI built on top of Open vSwitch—a topic I’ve touched on a time or two) to provide on-premise load balancing in Kubernetes. Here’s a set of 15 principles for designing and deploying scalable applications on Kubernetes. Servers/Hardware.

Linux 74

Linux Load Balancer IPv6 Licensing 74

Linux Academy

JUNE 3, 2019

In a nutshell, serverless computing lets you build and run applications without thinking about servers. Normally, when it comes to running an application from the cloud, you have to deal with setting it all up, which can take hours, days, or even weeks. Configure auto-scaling with load balancers.

Linux 92

Linux Course Open Source Load Balancer 92

Scott Lowe

JANUARY 17, 2020

Eric Sloof mentions the NSX-T load balancing encyclopedia (found here ), which intends to be an authoritative resource to NSX-T load balancing configuration and management. The next day, the Microsoft Security Response Center confirmed the vulnerability. Operating Systems/Applications.

Load Balancer 60

Load Balancer Vmware Windows Cloud 60

Scott Lowe

SEPTEMBER 27, 2019

The “TL;DR” for those who are interested is that this solution bypasses the normal iptables layer involved in most Kubernetes implementations to load balance traffic directly to Pods in the cluster. Daniel Sagi of Aqua Security explains the mechanics behind a Pod escape using file system mounts.

Load Balancer 60

Load Balancer Cloud Applications Vmware 60

Scott Lowe

AUGUST 27, 2021

Teri Radichel uses some basketball analogies to explain why defensive (proactive) security strategies are more desirable than reactive security strategies. Operating Systems/Applications. (And since Kevin didn’t define TDP—shame, shame!—see —see this post for an explanation.). So useful.).

Linux 90

Linux Load Balancer Malware Virtualization 90

Scott Lowe

JUNE 18, 2021

The first is a post on Cilium and F5 load balancer integration , while the second discusses implementing Kubernetes network policies with Cilium and Linkerd. John Gruber’s post on “Secure Intent” on Apple devices was, for me at least, an informative read. Operating Systems/Applications.

Vmware 60

Vmware Hardware Load Balancer Apple 60

Scott Lowe

AUGUST 6, 2021

Here’s a quick look at using Envoy as a load balancer in Kubernetes. I saw this blog post about Curiefense , an open source Envoy extension to add WAF (web application firewall) functionality to Envoy. It’s a good starting point for thinking about operating your own active-active architecture. Networking.

Open Source 60

Open Source Load Balancer WAN Architecture 60

Cloud Musings

DECEMBER 11, 2015

PaaS provides a platform allowing customers to develop, run, and manage web applications without the complexity of building and maintaining the infrastructure. Its unique power is associated with developing and deploying applications.

Disaster Recovery 70

Disaster Recovery Healthcare Load Balancer Applications 70

Scott Lowe

OCTOBER 14, 2017

Romain Decker has an “under the hood” look at the VMware NSX load balancer. This graphical summary of the AWS Application Load Balancer (ALB) is pretty handy. Operating Systems/Applications. Servers/Hardware. Nothing this time (sorry!).

Load Balancer 60

Load Balancer Vmware Hardware Open Source 60

Scott Lowe

AUGUST 27, 2021

Teri Radichel uses some basketball analogies to explain why defensive (proactive) security strategies are more desirable than reactive security strategies. Operating Systems/Applications. (And since Kevin didn’t define TDP—shame, shame!—see —see this post for an explanation.). So useful.).

Linux 60

Linux Load Balancer Malware Virtualization 60

Scott Lowe

NOVEMBER 9, 2018

Continuing on that Envoy theme, you may find this article by Matt Klein—one of the primary authors of Envoy—helpful in understanding some of the concepts behind modern load balancing and proxying. From an unknown author, we have this security rant on Flatpak. Operating Systems/Applications.

Load Balancer 60

Load Balancer Operating Systems Intel Hardware 60

All Things Distributed

FEBRUARY 18, 2013

Expanding the Cloud - Introducing AWS OpsWorks, a Powerful Application Management Solution. Today Amazon Web Services launched AWS OpsWorks , a flexible application management solution with automation tools that enable you to model and control your applications and their supporting infrastructure. Comments ().

Cloud 157

Cloud Applications Web Services Resources 157

Scott Lowe

AUGUST 17, 2018

Andrew Martin has a write-up with security recommendations for your Kubernetes clusters. Check out these articles talking about IPVS-based in-cluster load balancing , CoreDNS , dynamic kubelet configuration , and resizing persistent volumes in Kubernetes. Operating Systems/Applications. Servers/Hardware.

Load Balancer 60

Load Balancer Storage Network Linux 60

Scott Lowe

FEBRUARY 16, 2017

The rise of the disaggregated network operating system (NOS) marches on: this time, it’s Big Switch Networks announcing expanded hardware support in Open Network Linux (ONL) , upon which its own NOS is based. Humair Ahmed takes a closer look at some Cross-VC NSX security enhancements that landed in the recent NSX 6.3

Vmware 60

Vmware Linux Storage Load Balancer 60

Scott Lowe

APRIL 6, 2017

Konstantin Ryabitsev has a series going on securing a SysAdmin Linux workstation. Part 1 covers how to choose a Linux distribution, and part 2 discusses some security tips for installing Linux on your SysAdmin workstation. Operating Systems/Applications. Intel NUC or SuperMicro E200-8D? Yes, please! (I

Vmware 60

Vmware Linux Storage Network 60

Scott Lowe

JUNE 8, 2018

Kamal Kyrala discusses a method for accessing Kubernetes Services without Ingress, NodePort, or load balancers. His points are spot-on: making the control plane highly available isn’t going to improve the availability or scalability of your applications. Operating Systems/Applications. Virtualization.

Load Balancer 60

Load Balancer Vmware Storage Intel 60

Scott Lowe

FEBRUARY 24, 2018

Viktor van den Berg writes on deploying NSX load balancers with vRA. This doesn’t make me feel very secure. Most folks have probably heard about 12 Factor Applications (see here if you haven’t or if you need a refresher); this article talks about 12 basic rules and good practices for using Kubernetes optimally.

Vmware 60

Vmware Load Balancer Network Open Source 60

Scott Lowe

JUNE 21, 2019

David Holder walks through removing unused load balancer IP allocations in NSX-T when used with PKS. Software company Agile Bits recently announced support for U2F-compatible hardware security keys in their 1Password product. Operating Systems/Applications. I haven’t tested it.). Servers/Hardware.

Network 60

Network Load Balancer Storage Applications 60

Scott Lowe

SEPTEMBER 22, 2017

Chris Binnie walks you through the process of using user namespaces to help secure your Docker hosts and containers. Virtue Security has some articles on AWS penetration testing: one on S3 buckets and one that also covers IAM and EC2. Operating Systems/Applications. Servers/Hardware. RIP Solaris. Virtualization.

Storage 60

Storage Vmware Load Balancer Network 60

Scott Lowe

JULY 13, 2018

Bernd Malmqvist talks about Avi Networks’ software-defined load balancing solution, including providing an overview of how to use Vagrant to test it yourself. Operating Systems/Applications. Lightroom is one of only a few applications that I keep around for macOS; this article gives me some alternatives.

Load Balancer 60

Load Balancer Virtualization Authentication Tools 60

Scott Lowe

SEPTEMBER 12, 2013

NFV is intended to address the problem caused by having to route/direct traffic from various sources through physical appliances designed to provide services like content filtering, security, content delivery/acceleration, and load balancing. It is hardware switch independent.

Intel 61

Intel Load Balancer Architecture Virtualization 61

Scott Lowe

DECEMBER 6, 2012

Operating Systems/Applications. I found this article on imperative vs. declarative system configuration is quite helpful in understanding Puppet’s declarative model. This VMware blog post helps explain the link between Puppet and vFabric Application Director, and why organizations may want to use both.

Vmware 109

Vmware Virtualization Storage Hardware 109

Scott Lowe

DECEMBER 17, 2015

It says the the JET (Juniper Extension Toolkit) uses “open application programming interfaces”, but fails to provide any specifics. This article listing 20 Linux server hardening tips contains some basic tips but is nevertheless a very good resource for someone looking for Linux security recommendations. Operating Systems/Applications.

Vmware 60

Vmware Linux Architecture Hardware 60

Scott Lowe

FEBRUARY 5, 2020

The private subnets won’t have Internet access, but the AWS cloud provider needs to make a call to the EC2 and Elastic Load Balancing (ELB) API endpoints. The operating system on the instances was Ubuntu 18.04. What applications are going to run on the cluster, and how will users (or other applications) access them?

Internet 60

Internet Load Balancer Cloud System 60

Scott Lowe

NOVEMBER 16, 2015

Russell Bryant has a couple great articles on OVN— how to test OVN’s “EZ Bake” release with DevStack as well as an article on implementing OpenStack security groups using OVN ACLs (which in turn leverage the integration between Open vSwitch and the Linux kernel’s conntrack module). Operating Systems/Applications.

Vmware 60

Vmware Network Load Balancer Linux 60

Scott Lowe

OCTOBER 5, 2012

Operating Systems/Applications. In any case, this article by Frank Denneman on Storage DRS load balancing frequency might be useful to you. Networking Security Storage Virtualization Automation KVM Linux OpenStack OSS OVS vCloud VMware' Servers/Hardware. Cloud Computing/Cloud Management.

Storage 92

Storage Vmware Linux Virtualization 92

Scott Lowe

FEBRUARY 10, 2015

This time around, the content is a bit heavier on cloud management and applications/operating systems, but still lots of good content all the way around (I hope, anyway). Here’s a nice article on a multi-action security workflow built using VMware NSX, vShield Endpoint, and vCenter Orchestrator. Networking.

Open Source 60

Open Source Vmware Network IBM 60