The latest News and Information on Containers, Kubernetes, Docker and related technologies.
2020 was a busy year for Civo, and we couldn’t have done it, and get where we are now, without our community of users. Between the wider community, our Civo Ambassadors, and our staff team, there is an enormous amount of knowledge and skill to be found. I’d like to present some of our top cloud-native guides for the year gone by, drawn both from guides published on our site and around the web by our community of users.
Most modern organizations understand that the earlier you integrate security into the development process, the more secure the applications will be in production. For containerized workloads, securing the container image throughout the application life cycle is a critical part of security, but many organizations don’t even follow basic best practices for ensuring secure container images.
Calico and Kubernetes go hand-in-hand. Kubernetes is the de facto standard for deploying and managing container-based applications at scale, both on-premises and in the cloud. Calico continues to be the most popular open-source networking and network security solution for Kubernetes. Despite the cataclysmic events that occurred in 2020, the Calico community, supported by the team at Tigera, remained focused and achieved several major successes. We are excited to share these highlights.
Kubernetes continues to be a popular platform for deploying containerized applications, but securing Kubernetes environments as you scale up is challenging. Each new container increases your application’s attack surface, or the number of potential entry points for unauthorized access. Without complete visibility into every managed container and application request, you can easily overlook gaps in your application’s security as well as malicious activity.
This is everything you need to know about FlashDrive, and how it can help you reduce your infrastructure costs while improving your applications' responsiveness and overall quality. FlashDrive is a Docker cloud hosting service constituted in a network of high availability clusters located in North America and Europe. To completely understand what FlashDrive is and how it can help you, let's first talk about the Docker cloud, containers, and the purpose of containerization.
Cloud computing sometimes spoils one with choices. Let's just take a look at a couple of common cloud services. You can use cloud services to deploy and scale web and mobile apps besides monitoring them. AWS and Heroku provide cloud computing resources. AWS is from Amazon, while Heroku is from Salesforce. In this article, let us see which one is better to use from the start-up perspective.
Like pretty much every company in 2020, Civo has had to deal with some unexpected world events! To wrap up the year, I thought I'd put together some of the most significant developments in our company from a CTO's perspective, and how they will affect us looking forward into the next year.
CVE-2020-8554 is a vulnerability that particularly affects multi-tenant Kubernetes clusters. If a potential attacker can create or edit services and pods, then they may be able to intercept traffic from other pods or nodes in the cluster. An attacker that is able to create a ClusterIP service and set the spec.externalIPs field can intercept traffic to that IP. In addition, an attacker that can patch the status of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.