Microservices and Cloud-native Applications Containerizing Traditional Applications Managing Security
What we covered last time… Steps to Containerize any Application ü Identify and handle application state ü Decide on how many containers q Select container security options q Select container networking options q Select container storage options http://www.nirmata.com/resources/meetups/ Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 2
Security for Containerized Apps • Introductions & Overview • Levels of Container Security • Twistlock • Demo • Q&A Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 3
Chenxi Wang - Chief Strategy Officer at Twistlock Previously VP at CipherCloud and Intel, Analyst at Forrester Research, Assoc. Professor at CMU - Ph.D. in Computer Science from University of Virginia. Jim Bugwadia - Founder and CEO at Nirmata Developer, architect, and leadership roles at Cisco, Trapeze Networks, and Pano Logic, Bell Labs, Motorola. MS Computer Science University of Illinois. Ritesh Patel - Founder and Product Lead at Nirmata Engineering and business leadership at Brocade, Trapeze Networks, Nortel and Motorola. MBA from Berkley Haas Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 4
About Twistlock • First enterprise solution purpose built for securing containers • Cradle-to-scale security o Protection from development to production o Portable: any cloud, any app, any registry • Technology pioneer o 15 patents, first security partner for AWS ECS & Google GCE, Docker contributor o Market leader – 30+ live deployments o Dark Reading: “20 Cyber Security companies to watch”. SC magazine: “Best emergent technology”. CRN: “Top ten cloud security startups to watch in 2016” Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 5
nirmata deploy, operate and optimize containerized applications on any cloud! we believe…. Software infrastructure is best 1 • Fortune 1000 as well as delivered as-a-service startup customers in production Cloud-native applications need 2 • 1M+ pulls; 10K+ managed cloud-native management containers per month! 3 Applications should not be • Wide range of apps – from locked in to a cloud provider Enterprise IT to IoT! Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 6
The 3 Levels of Container Security 1. The Execution Environment hosts, container daemon, networks, access controls, … 2. Container Images image scanning, image signing, image verification 3. The Application manage credentials, secrets, data. Detect and respond to active threats and intrusions Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 7
Demo – Managing Secrets
Managing secrets using Keywhiz Admins 1. Manage Secrets 2. Manage Apps Docker Nirmata Daemon Agent Volume Plugin Keywhiz-fs Container Container Container Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 10
Summary 1. Container security is an consideration in containerizing a traditional application 2. Your container security strategy should address: o The Execution Environment o Container Image Management o The Application 3. With the right tooling, running applications in containers can be more secure! Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 11
If you liked this session… 1. Rate this session and add a review http://www.meetup.com/microservices/ 2. Get a free trials of our sponsor’s tools! https://www.twistlock.com/demo/ try.nirmata.io Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 12
Get in touch we love to help! o chenxi@twistlock.com o @ChenxiWang o https://www.linkedin.com/in/chenxiwang88 o jim@nirmata.com o @JimBugwadia o https://www.linkedin.com/in/jimbugwadia o ritesh@nirmata.com o @riteshdp o https://www.linkedin.com/in/patelrit Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 13
Questions & Answers Containerizing Traditional Applications – SF Bay Area Microservices Meetup - August 24th 2016 14
Recommend
More recommend
