Day Two Cloud 094: Essential Concepts Of Zero Trust
Today's Day Two Cloud episode aims to pick apart the marketing fluff around Zero Trust (there's a lot of it) to uncover a workable definition, discuss the rationale for this approach, and develop a framework for how to think about zero trust.
The post Day Two Cloud 094: Essential Concepts Of Zero Trust appeared first on Packet Pushers.
Cloudflare obtains new ISO/IEC 27701:2019 privacy certification and what that means for you
This post is also available in French and German.
Cloudflare is one of the first organisations in our industry to have achieved ISO/IEC 27701:2019 certification, and the first web performance & security company to be certified to the new ISO privacy standard as both a data processor and controller.
Providing transparency into our privacy practices has always been a priority for us. We think it is important that we do more than talk about our commitment to privacy — we are continually looking for ways to demonstrate that commitment. For example, after we launched the Internet's fastest, privacy-first public DNS resolver, 1.1.1.1, we didn’t just publish our commitments to our public resolver users, we engaged an independent firm to make sure we were meeting our commitments, and we blogged about it, publishing their report.
Following in that tradition, today we’re excited to announce that Cloudflare has been certified to a new international privacy standard for protecting and managing the processing of personal data — ISO/IEC 27701:2019. The standard is designed such that the requirements organizations must meet to become certified are very closely aligned to the requirements in the EU’s General Data Protection Regulation (“GDPR”). So Continue reading
Deep dive into Trend Micro Deep Security integration modules
At AnsibleFest 2020, we announced the extension of our security automation initiative to support endpoint protection use cases. If you have missed it, check out the recording of the talk “Automate your endpoint protection using Ansible” on the AnsibleFest page.
Today, following this announcement we release the supported Ansible Content Collection for Trend Micro Deep Security. We will walk through several examples and describe the use cases and how we envision the Collection being used in real world scenarios.
If you want to refresh your memory about our endpoint protection support with Ansible in general, head over to the the introducing blog post Automating Endpoint Protection with Ansible.
About Trend Micro Deep Security
Trend Micro Deep Security is one of the latest additions to the Ansible security automation initiative. As an endpoint protection solution it secures services and applications in virtual, cloud and container environments. It provides automated security policies and consolidates the security aspects across different environments in a single platform.
How to install the Certified Ansible Content Collection for Trend Micro Deep Security
The Trend Micro Deep Security Collection is available to Red Hat Ansible Automation Platform customers at Automation Hub, our software-as-a-service offering on Continue reading
Response: Hunting down the stuck BGP routes
BGP is not always good - Part 645
If You Haven’t Checked Your Backups, They Probably Aren’t Working
This is a pleasant reminder to check your backups. I don’t mean, “Hey, did the backup run last night? Yes? Then all is well.” That’s slightly better than nothing, but not really what you’re checking for. Instead, you’re determining your ability to return a system to a known state by verifying your backups regularly.
Backups are a key part of disaster recovery, where modern disasters include ransomware, catastrophic public cloud failures, and asset exposure by accidental secrets posting.
For folks in IT operations such as network engineers, systems to be concerned about include network devices such as routers, switches, firewalls, load balancers, and VPN concentrators. Public cloud network artifacts also matter. Automation systems matter, too. And don’t forget about special systems like policy engines, SDN controllers, wifi controllers, network monitoring, AAA, and…you get the idea.
Don’t confuse resiliency for backup.
When I talk about backups, I’m talking about having known good copies of crucial data that exist independently of the systems they normally live on.
- Distributed storage is not backup.
- A cluster is not backup.
- An active/active application delivery system spread over geographically diverse data centers is not backup.
The points above are examples of distributed computing. Distributed computing Continue reading
Hunting down the stuck BGP routes
Hunting down the stuck BGP routes
BGP is the glue between all of the thousands of border routers that make up the internet (you can find this post (battleships) and [this post (EvE)](https://blog.b
Response: Is Switching Latency Relevant?
Minh Ha left another extensive comment on my Is Switching Latency Relevant blog post. As is usual the case, it’s well worth reading, so I’m making sure it doesn’t stay in the small print (this time interspersed with a few comments of mine in gray boxes)
I found Cisco apparently manages to scale port-to-port latency down to 250ns for L3 switching, which is astonishing, and way less (sub 100ns) for L1 and L2.
I don’t know where FPGA fits into this ultra low-latency picture, because FPGA, compared to ASIC, is bigger, and a few times slower, due to the use of Lookup Table in place of gate arrays, and programmable interconnects.
Response: Is Switching Latency Relevant?
Minh Ha left another extensive comment on my Is Switching Latency Relevant blog post. As is usual the case, it’s well worth reading, so I’m making sure it doesn’t stay in the small print (this time interspersed with a few comments of mine in gray boxes)
I found Cisco apparently manages to scale port-to-port latency down to 250ns for L3 switching, which is astonishing, and way less (sub 100ns) for L1 and L2.
I don’t know where FPGA fits into this ultra low-latency picture, because FPGA, compared to ASIC, is bigger, and a few times slower, due to the use of Lookup Table in place of gate arrays, and programmable interconnects.
Exploratory Network Analysis (XNA)
In data science there is a concept called Exploratory Data Analysis (EDA). When I have a big bunch of data, what’s in it? How do I make sense of it? Where do I even start? Just simple statistics about the dataset are not enough. In data analysis, this led to...More FT8 propagation
Last month I graphed the distance to remote stations as a function of time of day.
Today I plotted the gridsquare locations on a world map:
Ignore the top right one. That’s “RR73”, and not a real grid square. The rest should be accurate.
More that can be done (more interesting with more data than I can get, though):
- also take into account the received signal strength
- …and number of unique callsigns per grid square
- create animations over time
If I had access to the data from pskreporter I could even, instead of using just a callsign as input data, use a grid square as input.
So for example I could create an animation to show what the propagation was over the last week from any given gridsquare, and generate them on-demand.
Like last time the scripts are pretty hacky proof of concepts. But they work.
3 IT Monitoring Trends for 2021
By being aware of – and anticipating – these three trends in IT monitoring, DevOps and SREs can be better prepared to effectively troubleshoot performance issues and improve business outcomes.Full Stack Journey 053: Exploring Developer Advocacy And Developer Relations
Today's Full Stack Journey delves into developer advocacy: what is it, why do organizations have this role, and what makes a good developer advocate? Host Scott Lowe has invited four practitioners to tackle these questions. He speaks with Jacquie Grindrod, Jeremy Meiss, Josh Wulf, and Ted Neward.
Full Stack Journey 053: Exploring Developer Advocacy And Developer Relations
Today's Full Stack Journey delves into developer advocacy: what is it, why do organizations have this role, and what makes a good developer advocate? Host Scott Lowe has invited four practitioners to tackle these questions. He speaks with Jacquie Grindrod, Jeremy Meiss, Josh Wulf, and Ted Neward.
The post Full Stack Journey 053: Exploring Developer Advocacy And Developer Relations appeared first on Packet Pushers.
LinuxKit as a Commodity for Building Linux Distributions
Guest post by Docker Captain Gianluca Arbezzano
Recently Corey Quinn from LastWeekInAWS wrote an article that made me think “Nobody Cares About the Operating System Anymore”. Please have a look at it! I like the idea that nobody cares about where their application runs. Developers only want them running.
A bit of context about Tinkerbell
I am one of the maintainers for the Tinkerbell project. A bare metal workflows engine that heavily relies on containers and Docker to get its work done. It tries to find an answer for a reasonable question: how do we manage rooms of pieces of hardware? More in practice, how can we bring an API on top of everybody’s data centers?
Containers are the abstraction we decided to use when running reusable code (that we call actions) in somebody else’s hardware. Mainly because distribution, packaging, and runtime are solved issues. Everyone knows how to build, push and run a container.
I think this scenario compares well with the story Corey highlighted. Operating systems are an established, well-known abstraction for the majority of the use cases.
The special operating system for bare metal provisioning
The lifecycle of a bare metal server can be summarised as follows:
Announcing Cloudflare Images beta to simplify your image pipeline
Today, we are announcing the beta of Cloudflare Images: a simple service to store, resize, optimize, and deliver images at scale.
In 2018, we launched Stream to provide a single product that could be used to store, encode, and deliver videos. With Cloudflare Images, we are doing for images what Stream did for videos. Just like Stream, Cloudflare Images eliminates the need to think about storage buckets, egress costs, and many other common problems that are solved for you out of the box. Whether you are building an ecommerce platform with millions of high-res product pictures and videos or a new app for creators, you can build your entire media pipeline by combining Cloudflare Images and Stream.
Fundamental questions for storing and serving images
Any time you are building infrastructure for image storage and processing, there are four fundamental questions you must answer:
- “Where do we store images?”
- “How do we secure, resize, and optimize the images for different use cases?”
- “How do we serve the images to our users reliably?”
- “How do we do all of these things at scale while having predictable and affordable pricing, especially during spikes?”
Cloudflare Images has a straightforward set Continue reading