Securing Kubernetes Cluster Networking
Securing Kubernetes Cluster Networking The Unoffical Guide to Kubernetes Network Policies Published on 08 August 2017 (est. 6 min read) kubernetes Network Policies is a new Kubernetes feature to configure how groups of pods are allowed to communicate with each other and other network endpoints. In other words, it creates firewalls between pods running on a Kubernetes cluster. This guide is meant t
security-bulletins/advisories/third-party/2019-001.md at master · Netflix/security-bulletins
Netflix has identified several TCP networking vulnerabilities in FreeBSD and Linux kernels. The vulnerabilities specifically relate to the Maximum Segment Size (MSS) and TCP Selective Acknowledgement (SACK) capabilities. The most serious, dubbed “SACK Panic,” allows a remotely-triggered kernel panic on recent Linux kernels. There are patches that address most of these vulnerabilities. If patches c
4Gamer.net — [CEDEC 2010]ネットゲームの裏で何が起こっているのか。ネットワークエンジニアから見た，ゲームデザインの大原則
[CEDEC 2010]ネットゲームの裏で何が起こっているのか。ネットワークエンジニアから見た，ゲームデザインの大原則 編集部：touge 先週行われた「CEDEC 2010」の講演から「ネットワークゲームの仕組みとゲームデザイン」と題されたセッションを紹介しよう。 「CEDEC 2010」公式サイト 登壇したのは，セガ第三CS研究開発部のテクニカルディレクター 節政暁生氏。節政氏は「ファンタシースター オンライン」シリーズのプログラマとして，長年ネットワークゲーム（オンラインゲーム）の開発を手がけてきてきた人物だ。この講演では，その経験からネットワークゲームのゲームデザインにおいて，気をつけるべきことについてのレクチャーが行われた。その内容には一部技術的な要素を含むものの，基本的にはプランナーに向けたものであるため，理解にそれほど専門的な知識は必要ない。いわばネットワークの基礎の基礎にあ
![4Gamer.net — [CEDEC 2010]ネットゲームの裏で何が起こっているのか。ネットワークエンジニアから見た，ゲームデザインの大原則](https://cdn-ak-scissors.b.st-hatena.com/image/square/13a3d1f1f2bd9bdfd5c447e752ee2829281ef91d/backend=imagemagick;height=288;version=1;width=512/https%3A%2F%2Fwww.4gamer.net%2Fgames%2F105%2FG010549%2F20100905002%2FTN%2F002.jpg)
HTTP and 5G partial draft
The document discusses the relationship between delivery rate, bandwidth-delay product (BDP), round-trip time (RTT), and the optimal operating point for data transmission. It outlines the concepts of estimating minimum RTT and maximum bandwidth through windowing techniques, as well as the impact of loss-based congestion control algorithms like Cubic and Reno. The overall focus is on achieving maxi
Docker networking and service discovery
This is the full ebook Docker Networking and Service Discovery, by Michael Hausenblas. A downloadable edition is also available. Docker will be covered at the O'Reilly Velocity Conference, Nov. 7-10 in Amsterdam. PrefaceWhen you start building your applications with Docker, you’re excited about the capabilities and opportunities you encounter: it runs the same in dev and in prod, it’s straightforw
Using AWS Application Load Balancer and Network Load Balancer with EC2 Container Service
Warning: This article is from 2017. For a more up-to-date version see the following ready to deploy reference architectures, which have step by step instructions and CloudFormation for deploying an Application Load Balancer integrated with ECS: Serverless public facing website hosted on AWS FargatePublic facing website hosted on EC2 instances Amazon Web Services recently released new second genera
TLS 1.3 と 0-RTT のこわ〜い話
コンテナとimmutableとわたし。あとセキュリティ。（Kubernetes Novice Tokyo #15 発表資料）
GoogleのQUICプロトコル：TCPからUDPへWebを移行する | POSTD
QUIC（Quick UDP Internet Connections）プロトコルは、TCPではなくUDPをベースとして開発された、全く新しいWeb向けのプロトコルです。 （冗談で） TCP/2 と呼ぶ人までいます。 私がQUICについて知ったのは数週間前のことです。 SysCast Podcastのcurlとlibcurlについてのエピソード を聞いていた時でした。 QUICプロトコルの本当に面白い点は、UDPへの移行というところだと思います。 現在、Webの伝送プロトコルは、信頼性を確保するため、TCP上に構築されています。このTCP接続を開始するためには、 3wayハンドシェイク が行われています。つまりこれは、接続を開始するたびにラウンドトリップ （ネットワークパケットの往復） が追加されるということであり、新たな接続先に対し大幅な遅延を生じさせているのです。 （出典： UDPを介
Introducing Cloud Native Networking for Amazon ECS Containers | Amazon Web Services
AWS Compute Blog Introducing Cloud Native Networking for Amazon ECS Containers This post courtesy of ECS Sr. Software Dev Engineer Anirudh Aithal. Today, AWS announced task networking for Amazon ECS. This feature brings Amazon EC2 networking capabilities to tasks using elastic network interfaces. An elastic network interface is a virtual network interface that you can attach to an instance in a VP
#faq
Key Reinstallation Attacks Breaking WPA2 by forcing nonce reuse Discovered by Mathy Vanhoef of imec-DistriNet, KU Leuven, 2017 Introduction We discovered serious weaknesses in WPA2, a protocol that secures all modern protected Wi-Fi networks. An attacker within range of a victim can exploit these weaknesses using key reinstallation attacks (KRACKs). Concretely, attackers can use this novel attack
net package - net - Go Packages
Package net provides a portable interface for network I/O, including TCP/IP, UDP, domain name resolution, and Unix domain sockets. Although the package provides access to low-level networking primitives, most clients will need only the basic interface provided by the Dial, Listen, and Accept functions and the associated Conn and Listener interfaces. The crypto/tls package uses the same interfaces
Websites compromised in 'Decimal IP' campaign | Malwarebytes Labs
When looking at malicious traffic, one of the things we are interested in are the hosts involved in a particular attack. For example, we check the hostnames or IP addresses that were serving up malicious code. Before getting further, let’s define a few concepts to better understand the topic we are discussing today. A host name can be: A domain name (i.e. http://example.com/) A fully qualified dom
New Network Load Balancer – Effortless Scaling to Millions of Requests per Second | Amazon Web Services
AWS News Blog New Network Load Balancer – Effortless Scaling to Millions of Requests per Second Elastic Load Balancing (ELB) has been an important part of AWS since 2009, when it was launched as part of a three-pack that also included Auto Scaling and Amazon CloudWatch. Since that time we have added many features, and also introduced the Application Load Balancer. Designed to support application-l
Amazon Virtual Private Cloud (VPC) now allows customers to expand their existing VPCs - AWS
Amazon Virtual Private Cloud (VPC) now allows customers to expand their existing VPCs Amazon Virtual Private Cloud (VPC) now allows customers to expand their VPCs by adding secondary IPv4 address ranges (CIDRs) to their VPCs. Customers can add the secondary CIDR blocks to the VPC directly from the console or by using the CLI after they have created the VPC with the primary CIDR block. Similar to t
BGP leak causing Internet outages in Japan and beyond. | BGPmon
BGP leak causing Internet outages in Japan and beyond. Posted by Andree Toonk - August 26, 2017 - BGP instability - No Comments Yesterday some Internet users would have seen issues with their Internet connectivity, experiencing slowness or parts of the Internet as unreachable. This incident hit users in Japan particularly hard and it caused the Internal Affairs and Communications Ministry of Japan
The mystery of the hanging S3 downloads
A coworker was experiencing a strange problem with their Internet connection at home. Large downloads from most sites worked fine. The exception was that downloads from a Amazon S3 would get up to a good speed (500Mbps), stall completely for a few seconds, restart for a while, stall again, and eventually hang completely. The problem seemed to be specific to S3, downloads from generic AWS VMs were
AWS IPv6 Update – Global Support Spanning 15 Regions & Multiple AWS Services | Amazon Web Services
AWS News Blog AWS IPv6 Update – Global Support Spanning 15 Regions & Multiple AWS Services We’ve been working to add IPv6 support to many different parts of AWS over the last couple of years, starting with Elastic Load Balancing, AWS IoT Core, AWS Direct Connect, Amazon Route 53, Amazon CloudFront, AWS WAF, and S3 Transfer Acceleration, all building up to last month’s announcement of IPv6 support
通信すら飲み込むAmazon、ルーター用半導体も自社開発と公表
「全世界を100Gビット/秒の専用光ファイバー網で接続」「ルーター/スイッチ用半導体は自社開発」「一つのアベイラビリティゾーンで30万台のサーバーを運用」――。米Amazon Web Services（AWS）でデータセンター（DC）戦略を統括するJames Hamiltonバイスプレジデント（写真1）は2016年11月29日（米国時間）、「AWS re:Invent 2016」の基調講演で同社のクラウドの衝撃的な内部仕様を明らかにした。 Hamilton氏はこれまでもAWSの内部仕様を明らかにしているが（関連記事：「AWSの裏側を数字で教えよう」、上級エンジニアが秘密を公開）、同社の大陸間ネットワークの詳細やネットワーク機器用半導体を開発している事実、自社開発サーバー/ストレージの詳細を明らかにしたのは今回が初めて。ライバルである米Googleも最近、DCや自社開発サーバーの詳細を明らか
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
IBM Developer
形式手法と AWS のおいしい関係。- モデル検査器 Alloy によるインフラ設計技法 #jawsfesta
