Organizations can reduce security risks in containerized applications by actively managing vulnerabilities through scanning, automated image deployment, tracking runtime risk and deploying mitigating controls to reduce risk
Kubernetes and containers have become de facto standards for cloud-native application development due to their ability to accelerate the pace of innovation and codify best practices for production deployments, but such acceleration can introduce risk if not operationalized properly.
In the architecture of containerized applications, it is important to understand that there are highly dynamic containers distributed across cloud environments. Some are ephemeral and short-lived, while others are more long-term. Traditional approaches to securing applications do not apply to cloud-native workloads because most deployments of containers occur automatically with an orchestrator that removes the manual step in the process. This automatic deployment requires that the images be continuously scanned to identify any vulnerabilities at the time of development in order to mitigate the risk of exploit during runtime.
In addition to these challenges, software supply chain adds complexity to vulnerability scanning and remediation. Applications increasingly depend on containers and components from third-party vendors and projects. As a result, it can take weeks or longer to patch the affected components and release new software Continue reading
When I reposted a link to xBGP: Faster Innovation in Routing Protocols paper, someone immediately replied
Quite interesting, but it feels like this could become the proverbial 15th standard.
xBGP is an API that allows BGP users to implement routing policies (route selection, filtering, or propagation) that use attributes or mechanisms defined in newer IETF RFCs or drafts, so the proverbial 15th standard is not that far off the mark. However, we must remember that what we call BGP is more than just a set of competing standards.
When I reposted a link to xBGP: Faster Innovation in Routing Protocols paper, someone immediately replied
Quite interesting, but it feels like this could become the proverbial 15th standard.
xBGP is an API that allows BGP users to implement routing policies (route selection, filtering, or propagation) that use attributes or mechanisms defined in newer IETF RFCs or drafts, so the proverbial 15th standard is not that far off the mark. However, we must remember that what we call BGP is more than just a set of competing standards.
Last week, pretty much as soon as the first Oracle Cloud Infrastructure (OCI) multicloud exam became available, I was excited to take it, I did. And received the results right after. I had passed. Since the exam is still brand new and one of a kind, this blog post offers a quick overview of the […]
The post My Notes on the First Ever Multicloud Certification Exam appeared first on Packet Pushers.
This post originally appeared in the Packet Pushers’ Human Infrastructure newsletter. You can subscribe for free here. We never share or sell your details to anyone. One unforeseen event following the COVID-19 pandemic has been an uptick in attempts to organize workers. Starbucks and Amazon warehouse employees are two high-profile examples. Though private-sector union membership […]
The post The Case For IT Unionization appeared first on Packet Pushers.


There’s an important debate happening in Europe that could affect the future of the Internet. The European Commission is considering new rules for how networks connect to each other on the Internet. It’s considering proposals that – no hyperbole – will slow the Internet for consumers and are dangerous for the Internet.
The large incumbent telcos are complaining loudly to anyone who wants to listen that they aren’t being adequately compensated for the capital investments they’re making. These telcos are a set of previously regulated monopolies who still constitute the largest telcos by revenue in Europe in today's competitive market. They say traffic volumes, largely due to video streaming, are growing rapidly, implying they need to make capital investments to keep up. And they call for new charges on big US tech companies: a “fair share” contribution that those networks should make to European Internet infrastructure investment.
In response to this campaign, in February the European Commission released a set of recommended actions and proposals “aimed to make Gigabit connectivity available to all citizens and businesses across the EU by 2030.” The Commission goes on to say that “Reliable, fast and secure connectivity is a must for everybody and Continue reading
Today on the Tech Bytes podcast we talk with Nokia about 800G Ethernet. Nokia is deploying 800G Ethernet routing to customers (primarily hyperscalers and providers). We examine the drivers of 800G, and how Nokia balances performance with efficiencies for power and density. Our guest from Nokia is Igor Giangrossi, Sr. Director, Consulting Engineering - Webscale Segment.
The post Tech Bytes: Nokia Delivers 800GE Routing With An Eye On Performance And Efficiency (Sponsored) appeared first on Packet Pushers.