TLS Handshake Acceleration with Tanzu Service Mesh

Performance and Security Optimizations on Intel Xeon Scalable Processors – Part 2

Contributors

Manish Chugtu — VMware

Ramesh Masavarapu, Saidulu Aldas, Sakari Poussa, Tarun Viswanathan  — Intel

Introduction

Intel and VMware have been working together to optimize and accelerate the microservices middleware and infrastructure with software and hardware to ensure developers have the best-in-class performance and low latency experience when building distributed workloads with a focus on improving the performance, crypto accelerations, and making it more secure.

In Part 1 of this blog series, we looked at how Tanzu Service Mesh uses eBPF (in a non-disruptive manner) to achieve network acceleration by bypassing the TCP/IP networking stack in the Linux kernel and we loved the interest shown and feedback we got for that. In this Part 2, we will deep dive and showcase how Intel and VMware have been working together to accelerate Tanzu Service Mesh (/Istio) crypto use-cases (mutual TLS use-case) and improve the performance of asymmetric crypto operations by using Intel AVX-512 Crypto instruction set that is available on 3rd Generation Intel Xeon Scalable processors.

Security is one of the key areas that service mesh addresses. In Tanzu Service Mesh, there are multiple security features that are Continue reading

Nvidia partners with Dell and VMware for faster AI systems

Nvidia is starting to strike deals normally reserved for CPU vendors. At the VMware Explore conference today, it announced a new data-center solution with Dell Technologies designed to bring AI training in a zero-trust security environment.The solution combines Dell PowerEdge servers with Nvidia’s BlueField DPUs, GPUs, and AI Enterprise software, and is optimized for VMware’s newly released vSphere 8 enterprise workload platform. [ Get regularly scheduled insights by signing up for Network World newsletters. ]To read this article in full, please click here

Nvidia partners with Dell and VMware for faster AI systems

Nvidia is starting to strike deals normally reserved for CPU vendors. At the VMware Explore conference today, it announced a new data-center solution with Dell Technologies designed to bring AI training in a zero-trust security environment.The solution combines Dell PowerEdge servers with Nvidia’s BlueField DPUs, GPUs, and AI Enterprise software, and is optimized for VMware’s newly released vSphere 8 enterprise workload platform. [ Get regularly scheduled insights by signing up for Network World newsletters. ]To read this article in full, please click here

Nvidia partners with Dell and VMware for faster AI systems

Nvidia is starting to strike deals normally reserved for CPU vendors. At the VMware Explore conference today, it announced a new data-center solution with Dell Technologies designed to bring AI training in a zero-trust security environment.The solution combines Dell PowerEdge servers with Nvidia’s BlueField DPUs, GPUs, and AI Enterprise software, and is optimized for VMware’s newly released vSphere 8 enterprise workload platform. [ Get regularly scheduled insights by signing up for Network World newsletters. ]To read this article in full, please click here

Nvidia partners with Dell and VMware for faster AI systems

Nvidia is starting to strike deals normally reserved for CPU vendors. At the VMware Explore conference today, it announced a new data-center solution with Dell Technologies designed to bring AI training in a zero-trust security environment.The solution combines Dell PowerEdge servers with Nvidia’s BlueField DPUs, GPUs, and AI Enterprise software, and is optimized for VMware’s newly released vSphere 8 enterprise workload platform. [ Get regularly scheduled insights by signing up for Network World newsletters. ]To read this article in full, please click here

VMware touts multicloud networking, security, management upgrades

VMware is looking to ease the networking, security and management hassles of running enterprise multicloud environments with a raft of new products introduced at its VMware Explore 2022 conclave in San Francisco this week.The new products include a SaaS-based upgrade for the company’s core networking software, NSX, as well a new cloud-native management service, VMware Aria, and integrated security features. [ Get regularly scheduled insights by signing up for Network World newsletters. ] The driving idea behind all of the new products is to simplify the growing complexity of the network architecture connecting multicloud applications and their services, said Tom Gillis, senior vice president and general manager at VMware. That’s because VMware research shows 580 million workloads are expected to run on diverse, distributed environments spanning public cloud, on-premises, edge, telco clouds, and hosted clouds by 2024.To read this article in full, please click here

VMware touts multicloud networking, security, management upgrades

VMware is looking to ease the networking, security and management hassles of running enterprise multicloud environments with a raft of new products introduced at its VMware Explore 2022 conclave in Las Vegas this week.The new products include a SaaS-based upgrade for the company’s core networking software, NSX, as well a new cloud-native management service, VMware Aria, and integrated security features. [ Get regularly scheduled insights by signing up for Network World newsletters. ] The driving idea behind all of the new products is to simplify the growing complexity of the network architecture connecting multicloud applications and their services, said Tom Ellis, senior vice president and general manager at VMware. That’s because VMware research shows 580 million workloads are expected to run on diverse, distributed environments spanning public cloud, on-premises, edge, telco clouds, and hosted clouds by 2024.To read this article in full, please click here

HS032 Mentors and Leadership

Is there a role for career mentors and coaches in modern IT ? We discuss the topic and establish some points. IT Careers are high value and high effort but unlike other professions (such as law or medicine) there are no gatekeepers to working. This leads to training and ‘life coaches’ that are unregulated and often unprofessional.

Rethinking security roles and organizational structure for the cloud

As more and more applications and application development move to the cloud, traditional security roles and organizational structures are being shaken up. Why is that and what are the benefits of a cloud-first approach for business?

Traditional vs. cloud model

Application development in the traditional model, especially in larger companies, can be thought of as a linear process—similar to a baton being passed between teammates (e.g. the application team hands off the baton to the security team). In this model, each team has their own area of expertise, such as networking, infrastructure, or security, and the application development process is self-contained within each team.

The downside to this model is that responsibilities are siloed, and interactions and hand-offs between teams create friction. For example, if one team needs something from another, they need to submit a ticket and deal with wait time. In the traditional model, it’s not unusual for the application development and deployment process to last weeks or months, and then there are bug fixes and new release rollouts to contend with.

A cloud model, on the other hand, offers several benefits, including automation, abstraction, and simplicity. The high degree of automation in cloud-native infrastructure in general Continue reading

Introducing thresholds in Security Event Alerting: a z-score love story

Introducing thresholds in Security Event Alerting: a z-score love story
Introducing thresholds in Security Event Alerting: a z-score love story

Today we are excited to announce thresholds for our Security Event Alerts: a new and improved way of detecting anomalous spikes of security events on your Internet properties. Previously, our calculations were based on z-score methodology alone, which was able to determine most of the significant spikes. By introducing a threshold, we are able to make alerts more accurate and only notify you when it truly matters. One can think of it as a romance between the two strategies. This is the story of how they met.

Author’s note: as an intern at Cloudflare I got to work on this project from start to finish from investigation all the way to the final product.

Once upon a time

In the beginning, there were Security Event Alerts. Security Event Alerts are notifications that are sent whenever we detect a threat to your Internet property. As the name suggests, they track the number of security events, which are requests to your application that match security rules. For example, you can configure a security rule that blocks access from certain countries. Every time a user from that country tries to access your Internet property, it will log as a security event. While a Continue reading

Intel partners for $30B fab investment in Arizona

Intel and Canada's Brookfield Asset Management have announced a deal to jointly fund up to $30 billion in investments of Intel fabrication facilities in Arizona, saving Intel a lot of money in the process.The investment follows up on a memorandum of understanding the two firms signed in February to explore finance options to help fund new Intel manufacturing sites. Brookfield will invest up to $15 billion for a 49% stake in the expansion project, while Intel will retain majority ownership and operating control of the two chip factories in Chandler, Arizona.The deal falls under what is known as the Semiconductor Co-Investment Program (SCIP), a new funding model to the capital-intensive semiconductor industry. As part of the program, Brookfield will provide Intel with a new, expanded pool of capital for manufacturing build-outs. In return, Brookfield gets a cut of the revenue stream.To read this article in full, please click here

Intel partners for $30B fab investment in Arizona

Intel and Canada's Brookfield Asset Management have announced a deal to jointly fund up to $30 billion in investments of Intel fabrication facilities in Arizona, saving Intel a lot of money in the process.The investment follows up on a memorandum of understanding the two firms signed in February to explore finance options to help fund new Intel manufacturing sites. Brookfield will invest up to $15 billion for a 49% stake in the expansion project, while Intel will retain majority ownership and operating control of the two chip factories in Chandler, Arizona.The deal falls under what is known as the Semiconductor Co-Investment Program (SCIP), a new funding model to the capital-intensive semiconductor industry. As part of the program, Brookfield will provide Intel with a new, expanded pool of capital for manufacturing build-outs. In return, Brookfield gets a cut of the revenue stream.To read this article in full, please click here

Intel partners for $30B fab investment in Arizona

Intel and Canada's Brookfield Asset Management have announced a deal to jointly fund up to $30 billion in investments of Intel fabrication facilities in Arizona, saving Intel a lot of money in the process.The investment follows up on a memorandum of understanding the two firms signed in February to explore finance options to help fund new Intel manufacturing sites. Brookfield will invest up to $15 billion for a 49% stake in the expansion project, while Intel will retain majority ownership and operating control of the two chip factories in Chandler, Arizona.The deal falls under what is known as the Semiconductor Co-Investment Program (SCIP), a new funding model to the capital-intensive semiconductor industry. As part of the program, Brookfield will provide Intel with a new, expanded pool of capital for manufacturing build-outs. In return, Brookfield gets a cut of the revenue stream.To read this article in full, please click here

Intel partners for $30B fab investment in Arizona

Intel and Canada's Brookfield Asset Management have announced a deal to jointly fund up to $30 billion in investments of Intel fabrication facilities in Arizona, saving Intel a lot of money in the process.The investment follows up on a memorandum of understanding the two firms signed in February to explore finance options to help fund new Intel manufacturing sites. Brookfield will invest up to $15 billion for a 49% stake in the expansion project, while Intel will retain majority ownership and operating control of the two chip factories in Chandler, Arizona.The deal falls under what is known as the Semiconductor Co-Investment Program (SCIP), a new funding model to the capital-intensive semiconductor industry. As part of the program, Brookfield will provide Intel with a new, expanded pool of capital for manufacturing build-outs. In return, Brookfield gets a cut of the revenue stream.To read this article in full, please click here

Announcing Project Northstar: SaaS delivered Multi-Cloud Networking and Security

Multi-cloud architectures are becoming an increasingly central part of enterprise strategies delivering applications reliably. In a VMware Digital Momentum Study of enterprise technology decision-makers, nearly 73% report they are standardizing on multi-cloud foundations to operate applications and infrastructure1.

Multi-cloud infrastructure offers many benefits – such as the ability to scale quickly and increase reliability. By extension, multi-cloud deployments can help businesses:

  • Innovate and transform the customer experience
  • Scale and grow the business
  • Empower employee engagement and productivity

Yet, from an operational and technology perspective the multi-cloud presents a major challenge: Complexity. Rapid innovation and growth require the ability to deploy and manage workloads in any public cloud while providing the required service availability and scale. However, managing workloads and infrastructure on multiple clouds at once significantly increases the complexity of the network architecture connecting these applications and clouds. It also requires businesses to deploy complex security rules to protect lateral network traffic while having to rely on limited workload mobility and visibility and threat detection capabilities that do not scale.

Successfully adopting a multi-cloud infrastructure requires a means of taming the complexity that is inherent to multi-cloud.

Timeline Description automatically generated with low confidence

Introducing Project Northstar

We are introducing Project Northstar, a new technology preview, Continue reading

Announcing DPU-based Acceleration for NSX

We’re delighted to announce that VMware NSX can now leverage DPU-based acceleration using SmartNICs. This new implementation allows VMware customers to run NSX networking and security services on DPUs, providing accelerated NSX networking and security performance for applications that need high throughput, low latency connectivity and security. The DPU-based implementation also enhances network observability across different workload types while simultaneously increasing the host resources available to applications.

DPU-based Acceleration for NSX is a result of Project Monterey, an initiative that VMware began two years ago. VMware is delivering on Project Monterey with VMware vSphere 8, announced this week at VMware Explore. Combined with other future innovations introduced by Project Monterey, such as the ability to support VMware Cloud Foundation (VCF) networking and storage for bare-metal workloads, DPU-based NSX acceleration will free up networking and security teams and developers more than ever from depending on generic host computing resources to power operations.

Diagram Description automatically generated

Figure 1: Solution Overview

While we’ll continue to offer full support for hypervisor-based NSX architectures, the option of running NSX on a DPU offers several major advantages for industries such as financial services, healthcare, government, and telecom providers that require accelerated network performance.

What is a DPU or Continue reading

1 … 516 517 518 519 520 … 3,911