Scott Lowe

APRIL 15, 2022

Xavier Avrillier walks readers through using Antrea (a Kubernetes CNI built on top of Open vSwitch—a topic I’ve touched on a time or two) to provide on-premise load balancing in Kubernetes. Operating Systems/Applications. Servers/Hardware. Cabling is hardware, right? Cloud Computing/Cloud Management.

Linux 74

Linux Load Balancer IPv6 Licensing 74

Scott Lowe

APRIL 6, 2017

Konstantin Ryabitsev has a series going on securing a SysAdmin Linux workstation. Part 1 covers how to choose a Linux distribution, and part 2 discusses some security tips for installing Linux on your SysAdmin workstation. Operating Systems/Applications. Intel NUC or SuperMicro E200-8D? Cloud Computing/Cloud Management.

Vmware 60

Vmware Linux Storage Network 60

Scott Lowe

FEBRUARY 16, 2017

The rise of the disaggregated network operating system (NOS) marches on: this time, it’s Big Switch Networks announcing expanded hardware support in Open Network Linux (ONL) , upon which its own NOS is based. Humair Ahmed takes a closer look at some Cross-VC NSX security enhancements that landed in the recent NSX 6.3

Vmware 60

Vmware Linux Storage Load Balancer 60

Scott Lowe

SEPTEMBER 27, 2019

The “TL;DR” for those who are interested is that this solution bypasses the normal iptables layer involved in most Kubernetes implementations to load balance traffic directly to Pods in the cluster. Daniel Sagi of Aqua Security explains the mechanics behind a Pod escape using file system mounts.

Load Balancer 60

Load Balancer Cloud Applications Vmware 60

Scott Lowe

AUGUST 27, 2021

Teri Radichel uses some basketball analogies to explain why defensive (proactive) security strategies are more desirable than reactive security strategies. Operating Systems/Applications. (And since Kevin didn’t define TDP—shame, shame!—see —see this post for an explanation.). Virtualization.

Linux 60

Linux Load Balancer Malware Virtualization 60

Scott Lowe

OCTOBER 14, 2017

Romain Decker has an “under the hood” look at the VMware NSX load balancer. This graphical summary of the AWS Application Load Balancer (ALB) is pretty handy. Operating Systems/Applications. Servers/Hardware. Nothing this time (sorry!). Ben Evans has a four-part series (so far) on vSAN.

Load Balancer 60

Load Balancer Vmware Hardware Open Source 60

Scott Lowe

NOVEMBER 9, 2018

Continuing on that Envoy theme, you may find this article by Matt Klein—one of the primary authors of Envoy—helpful in understanding some of the concepts behind modern load balancing and proxying. From an unknown author, we have this security rant on Flatpak. Operating Systems/Applications. Good stuff!

Load Balancer 60

Load Balancer Operating Systems Intel Hardware 60

Scott Lowe

AUGUST 17, 2018

Andrew Martin has a write-up with security recommendations for your Kubernetes clusters. Check out these articles talking about IPVS-based in-cluster load balancing , CoreDNS , dynamic kubelet configuration , and resizing persistent volumes in Kubernetes. Operating Systems/Applications. Servers/Hardware.

Load Balancer 60

Load Balancer Storage Network Linux 60

Scott Lowe

JUNE 8, 2018

Kamal Kyrala discusses a method for accessing Kubernetes Services without Ingress, NodePort, or load balancers. AWS adds local NVMe storage to the M5 instance family; more details here. What I found interesting is that the local NVMe storage is also hardware encrypted. Operating Systems/Applications.

Load Balancer 60

Load Balancer Vmware Storage Intel 60

Scott Lowe

AUGUST 6, 2021

Here’s a quick look at using Envoy as a load balancer in Kubernetes. It’s a good starting point for thinking about operating your own active-active architecture. Operating Systems/Applications. I hope this collection of links has something useful for you! Networking. Servers/Hardware.

Open Source 60

Open Source Load Balancer WAN Architecture 60

Scott Lowe

SEPTEMBER 22, 2017

Chris Binnie walks you through the process of using user namespaces to help secure your Docker hosts and containers. Virtue Security has some articles on AWS penetration testing: one on S3 buckets and one that also covers IAM and EC2. Operating Systems/Applications. Servers/Hardware. Cloud Computing/Cloud Management.

Storage 60

Storage Vmware Load Balancer Network 60

Scott Lowe

OCTOBER 5, 2012

Erik Smith, notably known for his outstanding posts on storage and FCoE, takes a stab at describing some of the differences between SDN and network virtualization in this post. Operating Systems/Applications. Is Cisco’s Insieme effort producing a storage product? storage enhancements. Servers/Hardware.

Storage 92

Storage Vmware Linux Virtualization 92

Scott Lowe

JUNE 21, 2019

David Holder walks through removing unused load balancer IP allocations in NSX-T when used with PKS. Software company Agile Bits recently announced support for U2F-compatible hardware security keys in their 1Password product. Operating Systems/Applications. I haven’t tested it.). Servers/Hardware.

Network 60

Network Load Balancer Storage Applications 60

Scott Lowe

FEBRUARY 24, 2018

Viktor van den Berg writes on deploying NSX load balancers with vRA. This doesn’t make me feel very secure. Operating Systems/Applications. IPVLAN is a low-latency means of providing IP connectivity to containers. Alen Komljen provides an introductory overview of service meshes in Kubernetes.

Vmware 60

Vmware Load Balancer Network Open Source 60

Scott Lowe

JULY 13, 2018

Bernd Malmqvist talks about Avi Networks’ software-defined load balancing solution, including providing an overview of how to use Vagrant to test it yourself. Operating Systems/Applications. It looks like there will be a follow-up to this article as well, so you may want to check back on Ajay’s site.

Load Balancer 60

Load Balancer Virtualization Authentication Tools 60

Scott Lowe

NOVEMBER 16, 2015

Russell Bryant has a couple great articles on OVN— how to test OVN’s “EZ Bake” release with DevStack as well as an article on implementing OpenStack security groups using OVN ACLs (which in turn leverage the integration between Open vSwitch and the Linux kernel’s conntrack module). Operating Systems/Applications.

Vmware 60

Vmware Network Load Balancer Linux 60

Scott Lowe

DECEMBER 17, 2015

This article listing 20 Linux server hardening tips contains some basic tips but is nevertheless a very good resource for someone looking for Linux security recommendations. Operating Systems/Applications. William Lam breaks down the real value of load balancing your PSC in this in-depth article. Why, yes, thanks.

Vmware 60

Vmware Linux Architecture Hardware 60

Scott Lowe

DECEMBER 6, 2012

Operating Systems/Applications. I found this article on imperative vs. declarative system configuration is quite helpful in understanding Puppet’s declarative model. QEMU, on the other hand, is needed to emulate everything else that a VM needs: networking, storage, USB, keyboard, mouse, etc. Apparently, “Mt.

Vmware 109

Vmware Virtualization Storage Hardware 109

Scott Lowe

SEPTEMBER 12, 2013

NFV is intended to address the problem caused by having to route/direct traffic from various sources through physical appliances designed to provide services like content filtering, security, content delivery/acceleration, and load balancing. It is hardware switch independent.

Intel 61

Intel Load Balancer Architecture Virtualization 61

Scott Lowe

FEBRUARY 10, 2015

This time around, the content is a bit heavier on cloud management and applications/operating systems, but still lots of good content all the way around (I hope, anyway). Here’s a nice article on a multi-action security workflow built using VMware NSX, vShield Endpoint, and vCenter Orchestrator. Operating Systems/Applications.

Open Source 60

Open Source Vmware Network IBM 60