article thumbnail

Changing the calculus of containers in the cloud

All Things Distributed

With Fargate, you don't need to stand up a control plane, choose the right instance type, or configure all the other components of your application stack like networking, scaling, service discovery, load balancing, security groups, permissions, or secrets management. You just define your application as you do for Amazon ECS.

Cloud 149
article thumbnail

Technology Short Take 143

Scott Lowe

Here’s a quick look at using Envoy as a load balancer in Kubernetes. Having recently needed to dig into Open Policy Agent (OPA) , I took renewed interest in this slightly older article by Chip Zoller that compares OPA/Gatekeeper with Kyverno. I hope this collection of links has something useful for you! Networking.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Technology Short Take 151

Scott Lowe

Nick Schmidt talks about using GitOps with the NSX Advanced Load Balancer. Sander Rodenhuis wrote an article on security policies in Kubernetes. The post focuses on Otomi, which in turn leverages Open Policy Agent and Gatekeeper. Aidan Steele examines how VPC sharing could potentially improve security and reduce cost.

article thumbnail

DockerCon 2017 Black Belt Session: Cilium for Network and Application Security

Scott Lowe

Graf quickly moves into a (scripted) demo that shows off how you can use Cilium—which leverages eBPF to enforce HTTP-level security policies—to control the types of access that containers have when communicating with other containers via HTTP. The use of BPF allows Cilium to “rethink” how policy enforcement happens. What is XDP?

article thumbnail

Technology Short Take 143

Scott Lowe

Here’s a quick look at using Envoy as a load balancer in Kubernetes. Having recently needed to dig into Open Policy Agent (OPA) , I took renewed interest in this slightly older article by Chip Zoller that compares OPA/Gatekeeper with Kyverno. I hope this collection of links has something useful for you! Networking.

article thumbnail

Weekly Update 5-20-2019

Linux Academy

Create a Custom Scan Policy with OpenSCAP. Configure an Account Lockout Policy. Configure a Password Complexity Policy. Implementing an Auto Scaling Group and Application Load Balancer in AWS. Configuring Audit Settings for STIG Compliance on Red Hat. Run an OpenSCAP Compliance Scan on a Host. Managing SUDO Access.

Linux 60
article thumbnail

4 Tips for Processing Real-Time Data

CIO Business Intelligence

To comply with government regulations and/or internal security policies, organizations may find it necessary to secure sensitive data on-premises. Technology such as load-balancing ensures that all resources in a cluster are doing approximately the same amount of work. The cloud also supports fast scaling.

Data 112