Cloudera

JULY 15, 2021

This blog post provides an overview of best practice for the design and deployment of clusters incorporating hardware and operating system configuration, along with guidance for networking and security as well as integration with existing enterprise infrastructure. Edge or Gateway. Introduction and Rationale. Role allocation.

Architecture 97

Architecture Cloud Data Technical Advisors 97

Daniel Bryant

JUNE 28, 2018

There is no denying that the popularity of the Envoy Proxy project has rocketed over the past year. Matt Klein , one of the founders of the project at Lyft , has been a big part of driving the success of Envoy by sharing his knowledge within blogs and at conferences.

Load Balancer 40

Load Balancer PHP Open Source Architecture 40

Palo Alto Networks

JULY 16, 2019

Principle Two: 100% SaaS-based and API driven – no agents or proxies. A 100% API-based SaaS solution is the only way you can effectively manage the dynamic, distributed nature of cloud environments. There is far too much overhead, risk, and manual work required to deploy and maintain non-API based products.

Cloud 60

Cloud Azure AWS Google Cloud 60

Daniel Bryant

NOVEMBER 2, 2018

We’re fans of Terraform at Datawire, as it nicely aligns with our belief in the values of self-service and declarative infrastructure (and this was a guiding principle in the creation of the Ambassador API gateway and the associated declarative config for dynamic traffic routing ).

Conference 40

Conference Open Source Infrastructure Hotels 40

Daniel Bryant

MAY 7, 2021

Something that caught our attention straight away was that many of the end users mentioned their use of Kubernetes as if this was now the default infrastructure choice, and instead they focused on their use of other key cloud native technologies, such as Envoy Proxy and Open Policy Agent (OPA). See you at KubeCon NA 2021!

Development 52

Development Open Source Cloud Innovation 52

Daniel Bryant

JULY 19, 2018

My colleague Kelsey has done a great job of summarising this part of the talk on the Datawire blog. With Envoy proxy acting as the data plane the critical part for the developer experience is the control plane. Modern “cloud native” foundational tech like Kubernetes provides so many opportunities, but also presents new challenges.

Development 40

Development Fractional CTO Continuous Delivery Tools 40

Daniel Bryant

MAY 12, 2019

release notes , we have recently added early access support for advanced ingress load balancing and session affinity in the Ambassador API gateway, which is based on the underlying production-hardened implementations within the Envoy Proxy. As we wrote in the Ambassador 0.52 for example, a cookie or header?—?also

Load Balancer 40

Load Balancer Policies Virtualization Network 40

Daniel Bryant

MARCH 27, 2019

In these data centers the Ambassador API gateway is being used as a central point of ingress, consolidating authentication , rate limiting , and other cross-cutting operational concerns. Instead, we see the proliferation of multi-platform data centers and cloud environments where applications span both VMs and containers.

Load Balancer 40

Load Balancer Google Cloud Data Center Firewall 40

Ivanti

AUGUST 3, 2021

Then it establishes a secure communications channel with the command and control (C2) server using the anonymous Tor or I2P proxy networks within the darknet. Then the exploit demands cryptocurrency as payment to unblock the locked or encrypted data and apps. There are 4 main types of ransomware.

Malware 98

Malware Backup Mobile Storage 98

Tenable

MARCH 21, 2024

This blog describes the same-site attack risks inherent in leading cloud environments; the FlowFixation vulnerability case study; and a guardrail that cloud providers can put in place to help prevent such risks. For example, in AWS, Amazon Simple Storage Service (S3), Amazon API Gateway and other services share the “amazonaws.com” domain.

AWS 127

AWS Azure Authentication Software Review 127

Daniel Bryant

MAY 30, 2019

As there was so much goodness on offer at KubeCon EU, I’ve tried to summarise some of my key observations in this blog post. The functionality and APIs within Kubernetes have become more stable over the past two years, and the platform is widely adopted across vendors.

Policies 40

Policies Technical Review Cloud Software Review 40

Mike Roberts

NOVEMBER 16, 2017

To be alerted about future installments subscribe to our newsletter , follow Symphonia on twitter @symphoniacloud , and our blog at The Symphonium. API Gateway) throttling is treated as an error and passed back up to the caller For non-stream based asynchronous sources (e.g. No configuration or management?—?it it just happens.

Lambda 52

Lambda AWS Software Review Serverless 52

Mike Roberts

NOVEMBER 16, 2017

To be alerted about future installments subscribe to our newsletter , follow Symphonia on twitter @symphoniacloud , and our blog at The Symphonium. API Gateway) throttling is treated as an error and passed back up to the caller For non-stream based asynchronous sources (e.g. No configuration or management?—?it it just happens.

Lambda 40

Lambda AWS Software Review Serverless 40

Daniel Bryant

OCTOBER 17, 2018

Last month I published a tutorial on how to implement Zipkin-based distributed tracing using the Kubernete-native Ambassador API gateway and the Java OpenTracing ‘Microdonuts’ application, and after a few requests I wanted to loop back around now and add LightStep support to this. Visit [link] to try LightStep today!

Open Source 40

Open Source Applications Engineering Data 40

Cloudera

OCTOBER 27, 2022

In this article we will investigate how to connect to the Solr REST API running in the Public Cloud, and highlight the performance impact of session cookie configurations when Apache Knox Gateway is used to proxy the traffic to Solr servers. The first, easier approach is to reach Solr using Knox Gateway as a proxy.

Load Balancer 82

Load Balancer Cloud Authentication Performance 82

Tenable

AUGUST 14, 2019

At the time the blog was published, no proof-of-concept code was available. Ambassador (API Gateway). Multiple HTTP/2 vulnerabilities in Envoy Proxy. Envoy (Proxy). “Empty Frames Flood”. Proof of concept. Software vendors are in the process of publishing patches for these vulnerabilities. HTTP2 Vulnerabilities.

Software Engineering 8

Software Engineering Engineering Management Resources Engineering 8

Daniel Bryant

SEPTEMBER 23, 2019

Beginning a migration at the edge of a system, using functionality provided by a cloud-native API gateway, and working inwards towards the application opens up several strategies to minimize the pain and risk. For example, using a combination of an API gateway with a multi-platform service discovery solution.

Strategy 8

Strategy Continuous Delivery Transportation Software Review 8

Netflix Tech

NOVEMBER 9, 2020

Rather than exposing 100s of microservices to UI developers, Netflix offers a unified API aggregation layer at the edge. UI developers love the simplicity of working with one conceptual API for a large domain. Back-end developers love the decoupling and resilience offered by the API layer.

Microservices 143

Microservices Architecture Technical Review Software Review 143

Palo Alto Networks

NOVEMBER 12, 2019

Our multi-mode CASB solution, Prisma SaaS, integrates seamlessly with Prisma Access, enabling businesses to implement security that combines inline security, API security and contextual controls to determine access to sensitive information. Is a cloud access security broker (CASB) the only solution to address this?” So Is CASB Enough?

WAN 8

WAN Scalability Cloud Network 8

Cloudera

OCTOBER 22, 2021

This blog post walks you through the data flow development lifecycle and how you can use APIs in CDP Public Cloud to fully automate your flow deployments. Figure 2: Starting version control stores process groups in the NiFi Registry and makes them accessible via the NiFi Registry API.

Cloud 89

Cloud Data KPI How To 89

Cloudera

JANUARY 21, 2022

This blog will summarise the security architecture of a CDP Private Cloud Base cluster. Services in each zone use a combination of kerberos and transport layer security (TLS) to authenticate connections and APIs calls between the respective host roles, this allows authorization policies to be enforced and audit events to be captured.

Architecture 107

Architecture Data Authentication Policies 107

Altexsoft

AUGUST 31, 2021

Commercial APIs are not that old of a concept. eBay, Salesforce, and Amazon were pioneering the market when they launched their web APIs only 20 years ago. Watch our video to learn about the main API concepts. What is an API gateway? Microservices and API gateways. Source: Netflix Technology Blog.

Microservices 64

Microservices Serverless Load Balancer How To 64

Perficient

JUNE 29, 2023

Then, read the rest of this blog post to understand what your risks and options are. With it, attackers will be able to make requests to API resources on our behalf or simply impersonate our account in their browser, getting the same level of access. But what if I do have a need for it? Why would I ever bother at all?

Authentication 52

Authentication Software Review Resources Applications 52

Palo Alto Networks

FEBRUARY 16, 2021

Cloud-based web security offerings that rely on proxy-based Secure Web Gateway (SWG) or Cloud Access Security Broker (CASB) technology have failed to deliver a consistent work-from-anywhere experience for organizations. Web Security Shortcomings. Changing the Game With Prisma Access 2.0. And if that wasn’t enough, Prisma Access 2.0

WAN 98

WAN IoT Machine Learning Artificial Inteligence 98

Daniel Bryant

MAY 27, 2022

Here, Matt Klein, Ambassador Labs, Tetrate, VMware, and Fidelity announced the formation of the Envoy Gateway project , with the goal of simplifying Kubernetes Ingress.  —  @danielbryantuk Matt Klein’s blog post is a great read, and also provides a lot more detail about the project.

Cloud 40

Cloud Software Education CTO Coach 40

Daniel Bryant

JULY 18, 2018

From Monolith to Service Mesh, via a Front Proxy?—?Learnings Learnings from stories of building the Envoy Proxy The concept of a “ service mesh ” is getting a lot of traction within the microservice and container ecosystems. particularly within an API gateway like the open source Kubernetes-native Ambassador gateway.

SOA 40

SOA Load Balancer Microservices Open Source 40

Daniel Bryant

SEPTEMBER 13, 2018

From Monolith to Service Mesh, via a Front Proxy?—?Learnings Learnings from stories of building the Envoy Proxy The concept of a “ service mesh ” is getting a lot of traction within the microservice and container ecosystems. particularly within an API gateway like the open source Kubernetes-native Ambassador gateway.

SOA 40

SOA Load Balancer Microservices Open Source 40

Netflix Tech

MARCH 14, 2023

We must quickly surface the most stand-out highlights from the titles available on our service in the form of images and videos in the member experience. These multimedia assets, or “supplemental” assets, don’t just come into existence. Artists and video editors must create them. Punchy or memorable lines are a prime target for trailer editors.

Media 116

Media Innovation UI/UX Machine Learning 116

Daniel Bryant

JUNE 23, 2018

the role of an edge gateway, or API gateway. As I wrote in a previous article “ Continuous Delivery: How Can an API Gateway Help (or Hinder) ”, patterns like the “dancing skeleton” can greatly help in proving the end-to-end viability of new applications and infrastructure. the ingress or edge gateway?—?and

Microservices 75

Microservices Continuous Delivery Infrastructure Architecture 75

Gorilla Logic

FEBRUARY 15, 2019

There isn’t one universally accepted definition for microservices, but for this tutorial we are going to define microservices as an architectural style for building a suite of autonomous, self-contained and loosely coupled services that communicate over lightweight mechanisms, such as HTTP resource APIs. Characteristics of Microservices.

Microservices 53

Microservices Cloud Authentication Development 53

Daniel Bryant

MAY 8, 2018

This article dives a little deeper into the need for rate limiting with API gateways Why Rate Limit with an API Gateway? When exposing your application via a public API you typically have to implement rate limiting within the sink or middleware that you own.

Weak Development Team 40

Weak Development Team Open Source Examples Applications 40

Confluent

MAY 22, 2019

MQTT Proxy + Apache Kafka (no MQTT broker). It is also possible to bridge Kafka and MQTT for ingestion and M2M, and it is recommended to keep them separate by configuring the devices or gateways as Kafka producers while still participating in the M2M network managed by an MQTT broker. How many devices will be creating information?

IoT 97

IoT Google Cloud Scalability Microservices 97

Daniel Bryant

SEPTEMBER 2, 2018

This tool provides a CLI and Docker-based replication of a production serverless environment in order to enable the efficient local development of AWS Lambda functions that use associated AWS services such as Amazon API Gateway and DynamoDB. microservices, containers, orchestrators?

Software Review 40

Software Review Systems Review Technical Review Cloud 40

Aviatrix

NOVEMBER 14, 2018

AWS provides a NAT gateway service and instances to allow your private subnets to reach the Internet. A forward proxy server, such as Squid, can act as an intermediary for requests from internal users and servers, often caching content to speed up subsequent requests. Method #1: Egress through your datacenter.

AWS 40

AWS Firewall Compliance Internet 40

Daniel Bryant

AUGUST 6, 2019

TLS encryption (and termination) for traffic from a user’s browser to the application edge has been a long-standing feature of API gateways, CDNs and edge proxies, but only recently has service mesh technology made implementing TLS for service-to-service traffic a realistic approach for most of us.

Transportation 20

Transportation Windows Network Load Balancer 20

Daniel Bryant

AUGUST 28, 2018

As every inbound request flows through this component, naturally an edge gateway will need to support distributed tracing, ideally using a well-established open protocol. These inflexion points include, for example, the API Gateway, each internal service, and data stores or stateful external services. Start with Why?

Microservices 40

Microservices Applications Examples Open Source 40

Daniel Bryant

AUGUST 16, 2018

As every inbound request flows through this component, naturally an edge gateway will need to support distributed tracing, ideally using a well-established open protocol. These inflexion points include, for example, the API Gateway, each internal service, and data stores or stateful external services. Start with Why?

Microservices 40

Microservices Applications Examples Open Source 40