We have been using load-balancing technology for many years. What is the purpose of load-balancers and what are the alternatives offered as managed services by the public cloud providers? Terminology Below are some important concepts regarding cloud load-balancers: · Private / Internal Load-Balancer — A load-balancer serving internal traffic (such as…

Whether we serve internal customers or external customers over the public Internet, we all manage production workloads at some stage in the application lifecycle. In this blog post, I will review various aspects and recommendations when managing production workloads in the public cloud (although, some of them may be relevant…

When connecting machines over the public Internet (or over private networks), we use IPv4 addresses. For many years we heard about IPv4 address exhaustion or the fact that sometime in the future we will not able to request new IPv4 addresses to connect over the public Internet. We all heard…

Knowledge of various topics exists everywhere. In the past, we used to consume information through traditional media (such as TV or movies), but now more and more people are looking to learn something new or consume knowledge from social networks, blogs, podcasts, and almost anywhere. I spend a lot of…

Working with modern computing environments based on containers offers a lot of benefits (from small image footprint, fast deployment/decommission, and more), but it also has its challenges (from software/package update process, security, integration with container orchestrators, and more). In this blog post, I will review container operating systems, what are…

Part 2: Security — In chapter 1 of this series about cloud-native applications, we have introduced the key characteristics of cloud-native applications. In this chapter, we will review how to secure cloud-native applications. Securing the CI/CD pipeline Due to the dynamic nature of the cloud-native application, we need to begin securing our application stack from the initial steps…

In the past couple of years, there is a buzz about cloud-native applications. In this series of posts, I will review what exactly is considered a cloud-native application and how can we secure cloud-native applications. Before speaking about cloud-native applications, we should ask ourselves — what is cloud native anyway? …

Organizations migrating to the public cloud, or already provisioning workloads in the cloud come across limitations, either on production workloads or issues published in the media, as you can read below:

The software supply chain is considered one of the common threats in today’s modern cloud-native development, which poses a high risk to any organization. It is about consuming software packages, source code, or even APIs from a third-party or untrusted source. The last thing we wish to do is to…