Scott Lowe

JANUARY 21, 2022

Aidan Steele examines how VPC sharing could potentially improve security and reduce cost. Nick Schmidt talks about using GitOps with the NSX Advanced Load Balancer. Orca Security discusses the “Superglue” vulnerability in AWS Glue. Sander Rodenhuis wrote an article on security policies in Kubernetes.

Load Balancer 90

Load Balancer Linux Intel Cloud 90

Scott Lowe

APRIL 15, 2022

Xavier Avrillier walks readers through using Antrea (a Kubernetes CNI built on top of Open vSwitch—a topic I’ve touched on a time or two) to provide on-premise load balancing in Kubernetes. Matt Oswalt takes readers though a fairly in-depth look at sockets and address binds in Linux. Servers/Hardware.

Linux 74

Linux Load Balancer IPv6 Licensing 74

Linux Academy

FEBRUARY 1, 2019

Linux Academy is the only way to get exam-like training for multiple Microsoft Azure certifications. Securing Storage with Access Keys and Shared Access Signatures in Microsoft Azure. Identity and security. Azure Storage Accounts: Configuration and Security. Create a Load Balanced VM Scale Set in Azure.

Course 80

Course Training Storage Microsoft 80

Scott Lowe

AUGUST 27, 2021

I have a fairly diverse set of links for readers this time around, covering topics from microchips to improving your writing, with stops along the way in topics like Kubernetes, virtualization, Linux, and the popular JSON-parsing tool jq along the way. Michael Kashin shares the journey of containerizing NVIDIA Cumulus Linux.

Linux 60

Linux Load Balancer Malware Virtualization 60

CIO Business Intelligence

JANUARY 4, 2024

In the fast-evolving world of finance, data security is of paramount importance. The Payment Card Industry Data Security Standard (PCI DSS) is a crucial framework to which financial institutions must adhere. The Payment Card Industry Data Security Standard (PCI DSS) is a crucial framework to which financial institutions must adhere.

Financial 92

Financial Architecture Resources Security 92

CTOvision

DECEMBER 11, 2015

We must approve and deploy in an environment with significant cultural, regulatory and security guardrails. Each cloud computing provider has “opinionated” ways of handling things such as load balancing, elastic scaling, service discovery, data access, and security to name just a few.

Devops 150

Devops Government Applications Load Balancer 150

Scott Lowe

APRIL 6, 2017

Here’s a handy list of deprecated Linux network commands and their replacements. Konstantin Ryabitsev has a series going on securing a SysAdmin Linux workstation. Part 1 covers how to choose a Linux distribution, and part 2 discusses some security tips for installing Linux on your SysAdmin workstation.

Vmware 60

Vmware Linux Storage Network 60

Scott Lowe

JUNE 18, 2021

Via Ivan Pepelnjak, I was pointed to Jon Langemak’s in-depth discussion of working with Linux VRFs. The first is a post on Cilium and F5 load balancer integration , while the second discusses implementing Kubernetes network policies with Cilium and Linkerd. Networking.

Vmware 60

Vmware Hardware Load Balancer Apple 60

Scott Lowe

FEBRUARY 16, 2017

The rise of the disaggregated network operating system (NOS) marches on: this time, it’s Big Switch Networks announcing expanded hardware support in Open Network Linux (ONL) , upon which its own NOS is based. I use OTR with Adium on OS X, and OTR with Pidgin on my Fedora Linux laptop.). Servers/Hardware.

Vmware 60

Vmware Linux Storage Load Balancer 60

Scott Lowe

SEPTEMBER 27, 2019

The “TL;DR” for those who are interested is that this solution bypasses the normal iptables layer involved in most Kubernetes implementations to load balance traffic directly to Pods in the cluster. Daniel Sagi of Aqua Security explains the mechanics behind a Pod escape using file system mounts. Servers/Hardware.

Load Balancer 60

Load Balancer Cloud Applications Vmware 60

Linux Academy

NOVEMBER 19, 2019

“My favorite parts about Linux Academy are the practical lab sessions and access to playground servers, this is just next level.” Creating and configuring Secure AWS RDS Instances with a Reader and Backup Solution. Setting Up an Application Load Balancer with an Auto Scaling Group and Route 53 in AWS.

Load Balancer 19

Load Balancer Backup Applications Linux 19

Scott Lowe

OCTOBER 14, 2017

Romain Decker has an “under the hood” look at the VMware NSX load balancer. This graphical summary of the AWS Application Load Balancer (ALB) is pretty handy. Abdullah Abdullah shares some thoughts on design decisions regarding NSX VXLAN control plane replication modes. Servers/Hardware.

Load Balancer 60

Load Balancer Vmware Hardware Open Source 60

Scott Lowe

SEPTEMBER 22, 2017

Vincent Bernat has a really in-depth article on IPv4 route lookup on Linux (and one on IPv6 route lookup as well). Chris Binnie walks you through the process of using user namespaces to help secure your Docker hosts and containers. John Kozej walks through how to configure vCenter HA using the NSX load balancer.

Storage 60

Storage Vmware Load Balancer Network 60

Scott Lowe

AUGUST 17, 2018

Scott McCarty explains sVirt and how it’s used to isolate Linux containers. Andrew Martin has a write-up with security recommendations for your Kubernetes clusters. Check out these articles talking about IPVS-based in-cluster load balancing , CoreDNS , dynamic kubelet configuration , and resizing persistent volumes in Kubernetes.

Load Balancer 60

Load Balancer Storage Network Linux 60

Scott Lowe

OCTOBER 5, 2012

Only a true geek would be interested in this, but here’s some information on running OpenBSD in KVM on Linux. Given my past interest in OpenBSD and my present interest in KVM on Linux, this might be something I’ll be trying myself soon. There’s a lot to digest there (for me, anyway, there is a lot to digest).

Storage 92

Storage Vmware Linux Virtualization 92

Scott Lowe

NOVEMBER 16, 2015

Russell Bryant has a couple great articles on OVN— how to test OVN’s “EZ Bake” release with DevStack as well as an article on implementing OpenStack security groups using OVN ACLs (which in turn leverage the integration between Open vSwitch and the Linux kernel’s conntrack module). More on Clair from TechCrunch here.).

Vmware 60

Vmware Network Load Balancer Linux 60

Scott Lowe

DECEMBER 17, 2015

If you’d like to play around with Cumulus Linux but don’t have a compatible hardware switch, Cumulus VX is the answer. This article listing 20 Linux server hardening tips contains some basic tips but is nevertheless a very good resource for someone looking for Linux security recommendations. Virtualization.

Vmware 60

Vmware Linux Architecture Hardware 60

Linux Academy

AUGUST 13, 2019

Domain 2: Security . Define AWS Cloud security and compliance concepts. Identify resources for security support . The basic security and compliance aspects of the AWS platform and the shared security model. IAM, Trusted Advisor – security, why it’s important, differences between users /groups/roles.

Cloud 16

Cloud Study Training Web Services 16

Scott Lowe

JUNE 23, 2015

Additionally, Docker is working to improve the security of Docker Hub (this is probably a reflection of the recent study pointing out the number of images that have security flaws) through a variety of mechanisms. Decrease time for security review. On-premise registry. Networking. Directory integration. million downloads).

Open Source 60

Open Source Windows Applications Engineering 60

Scott Lowe

SEPTEMBER 12, 2013

NFV is intended to address the problem caused by having to route/direct traffic from various sources through physical appliances designed to provide services like content filtering, security, content delivery/acceleration, and load balancing. In this case, it sounds like Wind River’s customers are OEMs/ODMs, not end users.

Intel 61

Intel Load Balancer Architecture Virtualization 61

Scott Lowe

DECEMBER 6, 2012

These articles are a bit long in the tooth, but CSS Corp has a useful series of articles on bundling various Linux distributions for use with OpenStack: bundling CentOS , bundling CentOS with VNC , bundling Debian , and bundling OpenSUSE. Feel free to share something in the comments! Cloud Computing/Cloud Management.

Vmware 109

Vmware Virtualization Storage Hardware 109

All Things Distributed

FEBRUARY 18, 2013

OpsWorks promotes conventions and sane defaults, such as template security groups, but also supports the ability to customize any aspect of an applicationâ??s You can deploy your application in the configuration you choose on Amazon Linux and Ubuntu. Operational Control â?? s configuration.

Cloud 157

Cloud Applications Web Services Resources 157

Scott Lowe

FEBRUARY 10, 2015

The “gotcha” is that these software stacks haven’t been written yet, so the idea of repurposing hardware from switch to firewall to load balancer is still a bit of a unicorn. Here’s a nice article on a multi-action security workflow built using VMware NSX, vShield Endpoint, and vCenter Orchestrator. Servers/Hardware.

Open Source 60

Open Source Vmware Network IBM 60

Scott Lowe

AUGUST 20, 2014

This method may be a bit more complicated, but naturally offers a bit more security. OS X provides an SSH agent by default, but on Linux systems you will probably have to manually run an SSH agent and add the appropriate SSH key: eval `ssh-agent -s` ssh-add ~/.ssh/keyfile.pem. Linux CLI Docker OSS' Tunneling Through SSH.

Linux 61

Linux System Load Balancer Examples 61

ForAllSecure

JANUARY 27, 2021

Vamosi: Today, John has taken his juvenile curiosity in breaking things down to become a security researcher with Huntress Labs. Hammond: As a security researcher, I am hierarchically in their Threat OPs department. What’s a good entry point for starting CTFs or information security for that matter? Vamosi: Wait.

Open Source 52

Open Source Load Balancer Security Google 52

ForAllSecure

JANUARY 27, 2021

Vamosi: Today, John has taken his juvenile curiosity in breaking things down to become a security researcher with Huntress Labs. Hammond: As a security researcher, I am hierarchically in their Threat OPs department. What’s a good entry point for starting CTFs or information security for that matter? Vamosi: Wait.

Open Source 52

Open Source Load Balancer Security Google 52

Scott Lowe

JUNE 19, 2016

Golub gives a “shout out” to the technologies underpinning modern Linux containers (namespaces, cgroups, etc., Built-in routing mesh: Swarm-wide overlay networking offering container-native load balancing (using IPVS), DNS-based service discovery with no separate cluster to setup or manage and interoperability with existing load balancers.

Load Balancer 60

Load Balancer Open Source Windows Tools 60