Cloud Native Security Paradigm Shift
Exciting time is ahead for the cloud security industry.
Zenly + Docker 1.12 + 1M teenagers
Zenly is a mobile app that helps you locate your friends in real time. Recently the Zenly app reached the million registered users mark — and half of them signed up in the last three months.
In the words of Steeve Morin, VP Engineering of Zenly, “Behold, the power of teenagers.”
The rapid growth in users, traffic and data points generated posed new challenges for the Zenly team.
As one of the early users of Docker 1.12, the Zenly team shared their experience during the keynote presentation at DockerCon US 2016 in Seattle.
Here is the story as told by Steeve, JB Daildo and Corentin Kerisit:
The sudden growth of traffic has been both amazing and a real challenge to scale, not on our production stack, but our analytics pipeline as our app started to generate half a billion events a day and counting. Our analytics stack was starting to experience failures due to scaling issues, the costs were rising with how we were running the cluster in the cloud and our 6 person team was challenged in supporting it while also building, scaling and supporting the Zenly app.
What we wanted was to Continue reading
Real-time BGP route analytics
- sFlow real-time traffic data identifies active BGP routes
- BGP path attributes are available in flow definitions
Setup
First download sFlow-RT. Next create a configuration file, bgp.js, in the sFlow-RT home directory with the following contents:var reflectorIP = '10.0.0.254';The following sFlow-RT System Properties load the configuration file and enable BGP:
var myAS = '65162';
var myID = '10.0.0.162';
var sFlowAgentIP = '10.0.0.253';
// allow BGP connection from reflectorIP
bgpAddNeighbor(reflectorIP,myAS,myID);
// direct sFlow from sFlowAgentIP to reflectorIP routing table
// calculate a 60 second moving average byte rate for each route
bgpAddSource(sFlowAgentIP,reflectorIP,60,'bytes');
- script.file=bgp.js
- bgp.start=yes
Continue reading
Response: Cumulus ndependence from L2 Data Centers
L3 routing to to the host. An idea whose time has come, again.
The post Response: Cumulus ndependence from L2 Data Centers appeared first on EtherealMind.
Thwarting APT Attacks
Network security basics can go a long way towards mitigating advanced persistent threats.
Typical SDN Architectures
Now that we know which definitions of SDN make no sense (and which one might) let’s see what a typical architecture of an SDN solution might look like.
I described some of them in the SDN 101 webinar, for more details watch the SDN Architectures and Deployment Guidelines webinar.