Scott Lowe

APRIL 15, 2022

Xavier Avrillier walks readers through using Antrea (a Kubernetes CNI built on top of Open vSwitch—a topic I’ve touched on a time or two) to provide on-premise load balancing in Kubernetes. Servers/Hardware. Cabling is hardware, right? Ouch— another Azure vulnerability that allows cross-account access.

Linux 74

Linux Load Balancer IPv6 Licensing 74

Scott Lowe

AUGUST 27, 2021

Servers/Hardware. Teri Radichel uses some basketball analogies to explain why defensive (proactive) security strategies are more desirable than reactive security strategies. Rudi Martinsen has an article on changing the Avi load balancer license tier (this is in the context of using it with vSphere with Tanzu).

Linux 90

Linux Load Balancer Malware Virtualization 90

Virtualized Greek

SEPTEMBER 8, 2013

This is different from the current software first movement in that Cisco’s approach is based on their hardware first view of the network. However, if you were to go by the response to the number of vendors supporting the NSX ecosystem you’d think the entire industry is going against this hardware first religion. Arista – Top of Rack.

Vmware 78

Vmware Load Balancer Hardware HP 78

Scott Lowe

AUGUST 6, 2021

Here’s a quick look at using Envoy as a load balancer in Kubernetes. Servers/Hardware. Since taking my new job at Kong, I’ve been spending more time with Envoy, so you’ll see some Envoy-related content showing up in this Technology Short Take. I hope this collection of links has something useful for you!

Open Source 105

Open Source Load Balancer WAN Architecture 105

Scott Lowe

OCTOBER 14, 2017

Romain Decker has an “under the hood” look at the VMware NSX load balancer. Servers/Hardware. This graphical summary of the AWS Application Load Balancer (ALB) is pretty handy. Abdullah Abdullah shares some thoughts on design decisions regarding NSX VXLAN control plane replication modes. Virtualization.

Load Balancer 60

Load Balancer Vmware Hardware Open Source 60

Scott Lowe

SEPTEMBER 27, 2019

The “TL;DR” for those who are interested is that this solution bypasses the normal iptables layer involved in most Kubernetes implementations to load balance traffic directly to Pods in the cluster. Servers/Hardware. Daniel Sagi of Aqua Security explains the mechanics behind a Pod escape using file system mounts.

Load Balancer 60

Load Balancer Cloud Applications Vmware 60

Scott Lowe

AUGUST 27, 2021

Servers/Hardware. Teri Radichel uses some basketball analogies to explain why defensive (proactive) security strategies are more desirable than reactive security strategies. Rudi Martinsen has an article on changing the Avi load balancer license tier (this is in the context of using it with vSphere with Tanzu).

Linux 60

Linux Load Balancer Malware Virtualization 60

Scott Lowe

FEBRUARY 16, 2017

The rise of the disaggregated network operating system (NOS) marches on: this time, it’s Big Switch Networks announcing expanded hardware support in Open Network Linux (ONL) , upon which its own NOS is based. Servers/Hardware. Humair Ahmed takes a closer look at some Cross-VC NSX security enhancements that landed in the recent NSX 6.3

Vmware 60

Vmware Linux Storage Load Balancer 60

Scott Lowe

NOVEMBER 9, 2018

Continuing on that Envoy theme, you may find this article by Matt Klein—one of the primary authors of Envoy—helpful in understanding some of the concepts behind modern load balancing and proxying. Servers/Hardware. From an unknown author, we have this security rant on Flatpak.

Load Balancer 60

Load Balancer Operating Systems Intel Hardware 60

Scott Lowe

AUGUST 6, 2021

Here’s a quick look at using Envoy as a load balancer in Kubernetes. Servers/Hardware. Since taking my new job at Kong, I’ve been spending more time with Envoy, so you’ll see some Envoy-related content showing up in this Technology Short Take. I hope this collection of links has something useful for you!

Open Source 60

Open Source Load Balancer WAN Architecture 60

Scott Lowe

JUNE 8, 2018

Kamal Kyrala discusses a method for accessing Kubernetes Services without Ingress, NodePort, or load balancers. Servers/Hardware. What I found interesting is that the local NVMe storage is also hardware encrypted. Why is this in the networking section? Because it involves IP routing and ECMP! Virtualization.

Load Balancer 60

Load Balancer Vmware Storage Intel 60

Scott Lowe

AUGUST 17, 2018

Servers/Hardware. Andrew Martin has a write-up with security recommendations for your Kubernetes clusters. Check out these articles talking about IPVS-based in-cluster load balancing , CoreDNS , dynamic kubelet configuration , and resizing persistent volumes in Kubernetes. Nothing this time around, sorry!

Load Balancer 60

Load Balancer Storage Network Linux 60

Scott Lowe

APRIL 6, 2017

Servers/Hardware. Konstantin Ryabitsev has a series going on securing a SysAdmin Linux workstation. Part 1 covers how to choose a Linux distribution, and part 2 discusses some security tips for installing Linux on your SysAdmin workstation. Intel NUC or SuperMicro E200-8D?

Vmware 60

Vmware Linux Storage Network 60

Scott Lowe

JUNE 21, 2019

David Holder walks through removing unused load balancer IP allocations in NSX-T when used with PKS. Servers/Hardware. Software company Agile Bits recently announced support for U2F-compatible hardware security keys in their 1Password product. I haven’t tested it.). Nothing this time around, sorry!

Network 60

Network Load Balancer Storage Applications 60

Scott Lowe

FEBRUARY 24, 2018

Viktor van den Berg writes on deploying NSX load balancers with vRA. Servers/Hardware. This doesn’t make me feel very secure. IPVLAN is a low-latency means of providing IP connectivity to containers. Alen Komljen provides an introductory overview of service meshes in Kubernetes. Nothing this time around, sorry!

Vmware 60

Vmware Load Balancer Network Open Source 60

Scott Lowe

SEPTEMBER 22, 2017

Servers/Hardware. Chris Binnie walks you through the process of using user namespaces to help secure your Docker hosts and containers. Virtue Security has some articles on AWS penetration testing: one on S3 buckets and one that also covers IAM and EC2. Nothing this time around, but stay tuned for something next time.

Storage 60

Storage Vmware Load Balancer Network 60

Scott Lowe

DECEMBER 17, 2015

If you’d like to play around with Cumulus Linux but don’t have a compatible hardware switch, Cumulus VX is the answer. Servers/Hardware. This article listing 20 Linux server hardening tips contains some basic tips but is nevertheless a very good resource for someone looking for Linux security recommendations. Virtualization.

Vmware 60

Vmware Linux Architecture Hardware 60

Scott Lowe

NOVEMBER 16, 2015

Russell Bryant has a couple great articles on OVN— how to test OVN’s “EZ Bake” release with DevStack as well as an article on implementing OpenStack security groups using OVN ACLs (which in turn leverage the integration between Open vSwitch and the Linux kernel’s conntrack module). Servers/Hardware. Cloud Computing/Cloud Management.

Vmware 60

Vmware Network Load Balancer Linux 60

Scott Lowe

OCTOBER 5, 2012

Servers/Hardware. In any case, this article by Frank Denneman on Storage DRS load balancing frequency might be useful to you. Networking Security Storage Virtualization Automation KVM Linux OpenStack OSS OVS vCloud VMware' There’s a lot to digest there (for me, anyway, there is a lot to digest).

Storage 92

Storage Vmware Linux Virtualization 92

Scott Lowe

SEPTEMBER 12, 2013

Recep will cover the hardware side of ONP; Gershon will cover the software side of ONP (referred to as ONS). ONP fits into this picture by performing VTEP functions in hardware (at line rate). Some of these services naturally should run on the top-of-rack (ToR) switch, like load balancing or security services.

Intel 61

Intel Load Balancer Architecture Virtualization 61

Scott Lowe

DECEMBER 6, 2012

First up is Brent Salisbury’s how to build an SDN lab without needing OpenFlow hardware. Not unsurprisingly, one of the key advantages of STT that’s highlighted is its improved performance due to TSO support in NIC hardware. Servers/Hardware. I needed to fill in some other knowledge gaps first.) Until the 1.3

Vmware 109

Vmware Virtualization Storage Hardware 109

Fountainhead

OCTOBER 6, 2009

A specific angle I want to address here is that of infrastructure automation ; that is, the dynamic manipulation of physical resources (virtualized or not) such as I/O, networking, load balancing, and storage connections - Sometimes referred to as "Infrastructure 2.0". a Fabric), and network switches, load balancers, etc.

Load Balancer 100

Load Balancer Virtualization Data Center Network 100

Scott Lowe

FEBRUARY 10, 2015

Tom’s key point is that disaggregating software from hardware—which is kind of a given if you’re buying whitebox networking gear—gives you the (potential) flexibility to repurpose network gear based on the software running on it. Servers/Hardware. However, it’s at least possible with whitebox networking gear.

Open Source 60

Open Source Vmware Network IBM 60

Data Center Knowledge

JULY 17, 2013

The user level elements that are managed within such an IaaS cloud are virtual servers, cloud storage and shared resources such as load balancers and firewalls. Security policies. Managing the cloud stack itself is typically done through the vendor-provided UIs, and augmented by 3rd party tools. Cloud Application Management.

Data Center 203

Data Center Cloud Data Applications 203