One of the current challenges of data center security is the East-West traffic that has become so pervasive as modern applications communicate a great deal between their different components. Conventional perimeter security is poorly placed to secure these lateral flows, to promote a zero-trust model in order to prevent threats moving within each application layer. VMware NSX addresses this, providing virtual firewall at the virtual NIC of each VM with a management framework where micro-segmentation is achievable with a sensible level of overhead. Check Point vSEC can be deployed in conjunction to provide threat and malware protection.
The VMware NSX Distributed Firewall (DFW) protects East-West L2-L4 traffic within the virtual data center. The DFW operates in the vSphere kernel and provides a firewall at the NIC of every VM. This enables micro-segmented, zero-trust networking with dynamic security policy leveraging the vCenter knowledge of VMs and applications to build policy rather than using IP or MAC addresses that may change. Tools for automation and orchestration as well as a rich set of APIs for partner and customer extensibility complete the toolset for security without impossible management overhead. While this is a dramatic improvement in the security Continue reading
The post Worth Reading: Fast changes, illustrated appeared first on rule 11 reader.
Does any sane bystander not see the IPv6 standards process as a terrible road accident ?
The post Response: draft-bourbaki-6man-classless-ipv6-00 – IPv6 is Classless appeared first on EtherealMind.
Nokia cuts 170 jobs; 10 new companies joined ONAP.
5G is expected to take virtualization plans to "another level."
5G is emerging to be the nervous system of the new digital society and economy.
No specific protocol is required.
If you're new to IPv6, check out this infographic to get up to speed.