4 ms·
This is the 1st use case I have seen where microservices are starting to make sense. My question is what about network security ? How is that part managed ?
by geggam 10y ago
This is the 1st use case I have seen where microservices are starting to make sense.
My question is what about network security ? How is that part managed ?
- sporkland 10y agoWe are using a product called calico which integrates with kube, openstack, baremetal to setup iptables rules which simulate network ACLs on all of the receiving hosts so that services are only able to reach network endpoints which are whitelisted for that service. Disclaimer I work for Box on Kube
- geggam 10y agoconntrack module cause performance hits or you disable some ? any tcp tuning kernel bare metal side ?