Scott Lowe

MAY 25, 2017

Anthony Shaw has a good comparison of Ansible, StackStorm, and Salt (with a particular view at applicability in a networking context). These viewpoints—that security via micro-segmentation is a compelling use case for NSX—is one I’ve seen repeated in numerous environments. Check out the GitHub repository. Virtualization.

Linux 60

Linux Open Source Network Vmware 60

Scott Lowe

MAY 25, 2017

Anthony Shaw has a good comparison of Ansible, StackStorm, and Salt (with a particular view at applicability in a networking context). These viewpoints—that security via micro-segmentation is a compelling use case for NSX—is one I’ve seen repeated in numerous environments. Check out the GitHub repository. Virtualization.

Linux 60

Linux Open Source Network Vmware 60

Scott Lowe

FEBRUARY 1, 2019

The folks over at Cilium took a look at a recent CNI benchmark comparison and unpacked it a bit. Maarten Goet has a few recommendations on securing Kubernetes on Microsoft Azure. Lior Kamrat has an article on securing Azure Container Registry for CI/CD pipelines using Azure service principals. Cloud Computing/Cloud Management.

Network 60

Network Resources Devops Vmware 60

Scott Lowe

JANUARY 14, 2016

Cumulus VX, if you aren’t aware, is a community-supported virtual appliance version of Cumulus Linux aimed at helping folks preview and test “full-blown” Cumulus Linux (which, of course, requires compatible hardware). A moderate security bug in OpenSSH (all releases between 5.4 Servers/Hardware. and 7.1p2) was discovered.

Vmware 60

Vmware Devops Storage Linux 60

Scott Lowe

MARCH 17, 2016

At DevOps Networking Forum 2016, I had the opportunity to share a presentation on some Linux networking options. Russell Pope at Kovarus recently wrote about using security groups to manage the VMware NSX distributed firewall. I knew Microsoft was cozying up to Linux, but I honestly didn’t expect they would port SQL Server to Linux.

Vmware 60

Vmware Linux Network Open Source 60

Scott Lowe

JANUARY 6, 2018

Christian Kellner talks about work done on Thunderbolt 3 security levels for GNU/Linux. Jorge Salamero Sanz (on behalf of Sysdig) provides a similar comparison, this time looking at ECS, Fargate, and EKS. Tony Bourke has a two-part series on ZFS and Linux and encryption ( part 1 , part 2 ). Servers/Hardware.

Linux 60

Linux Vmware Comparison Network 60

Scott Lowe

MARCH 30, 2018

Sean Howard talks about using the NSX Service Compose to create a more elegant ruleset for enforcing security policy. And while we’re discussing the Docker socket, the inimitable Jessie Frazelle shares some useful details on building container images securely on Kubernetes. Tirumarai Selvan has a comparison.

Linux 60

Linux Vmware Windows Applications 60

Scott Lowe

MARCH 5, 2013

This article by Avi Chesla points out a potential security weakness in SDN, in the form of a DoS (Denial of Service) attack where many switching nodes request many flows from the central controller. Cormac Hogan has a series going titled “Pluggable Storage Architecture (PSA) Deep Dive” ( part 1 here , part 2 here , part 3 here ).

Virtualization 102

Virtualization Storage Vmware Network 102

Scott Lowe

MARCH 8, 2016

Cumulus Networks recently shifted their pricing and licensing model toward perpetual licenses; this article has more information and a comparison of the old vs. new models. Since we are talking about Docker images: here’s a post on creating a good, secure Docker base image. ZFS will be in the next Ubuntu Linux LTS release.

Vmware 60

Vmware Linux Intel Network 60

Scott Lowe

JANUARY 14, 2016

Cumulus VX, if you aren’t aware, is a community-supported virtual appliance version of Cumulus Linux aimed at helping folks preview and test “full-blown” Cumulus Linux (which, of course, requires compatible hardware). A moderate security bug in OpenSSH (all releases between 5.4 Servers/Hardware. and 7.1p2) was discovered.

Devops 60

Devops Vmware Storage Open Source 60

Scott Lowe

AUGUST 16, 2017

Anthony Shaw has a good comparison of Ansible, StackStorm, and Salt (with a particular view at applicability in a networking context). These viewpoints—that security via micro-segmentation is a compelling use case for NSX—is one I’ve seen repeated in numerous environments. Check out the GitHub repository.

Open Source 60

Open Source Network Linux Engineering 60

Scott Lowe

JUNE 11, 2014

He makes comparisons among server virtualization, 10 Gigabit Ethernet, and SDN, and feels that in order for SDN to really hit this market it needs to be “not a user-facing feature, but rather a means to an end” (his words). Erik Smith at EMC has published a series of articles on “virtual storage networks.”

Vmware 60

Vmware Storage Network Virtualization 60

Dataconomy

JUNE 9, 2023

Here is a comparison table of static vs dynamic code analysis: Static code analysis Dynamic code analysis Focuses on examining the code itself to identify potential issues related to logic and techniques. Analyzes the code without executing it, typically through automated tools or manual code review.

Analysis 65

Analysis Software Development Applications Tools 65

Scott Lowe

APRIL 24, 2015

Kevin Houston’s March 2015 blade server comparisons might be a useful place to start. If you’re interested in an update on how Docker security is evolving, this article on Docker security enhancements by Daniel Walsh is a good read. Here are some general guidelines for configuring syslog forwarding on a Cisco ASA firewall.

Vmware 60

Vmware Storage Firewall Network 60

Scott Lowe

MARCH 23, 2017

Gabriele Gerbino has a nice write-up about Cisco’s efforts with APIs ; his article includes a brief description of YANG data models and a comparison of working with network devices via SSH or via API. It’s short and light on details, but it does provide an example snippet of Python code to illustrate what can be done with Netmiko.

Open Source 60

Open Source Storage Vmware Network 60

Scott Lowe

MARCH 10, 2015

I highly recommend you read the entire post, but in short the five skills Matt recommends are software skills (which includes configuration management and software development tools like Git ), Linux, deep protocol knowledge, hypervisor and container networking, and IPv6. NixOS seems to be an interesting re-think of a Linux distribution.

Vmware 60

Vmware Linux Hardware Software Development 60

Scott Lowe

OCTOBER 22, 2015

Here’s hoping I’ve managed to find something of value and interest to you in this latest collection of links and articles from around the web on networking, storage, virtualization, security, and other data center-related technologies. Welcome to Technology Short Take #55! Networking. Servers/Hardware. Dell is buying EMC.

Vmware 60

Vmware Virtualization Guidelines Network 60

Scott Lowe

AUGUST 22, 2014

You’ll need to be sure that the TCP port you select for Docker to use (I used TCP port 2345) is accessible, so modify any security groups assigned to the instances to allow inbound TCP traffic on that port from the appropriate sources. Interoperability Virtualization Automation Docker Linux OpenStack'

Virtualization 71

Virtualization Linux Network Fashion 71

The Verge

SEPTEMBER 28, 2021

Amazon says all of the processing and storage for these maps happens locally on the device and nothing is stored in the cloud. The Astro can only be paired to a single phone at a time — a security measure to help prevent unauthorized access or use. For those interested, the Astro’s functionality is built on top of Fire OS and Linux.

Video 141

Video Cloud Development Software 141

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Open Source 52

Open Source Tools Security Software 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Open Source 52

Open Source Tools Security Software 52