Secure Your Containers! What Network Administrators Should Know..
summary
Claim: Courier translates Docker/CNM and Kubernetes/CNI calls into OpenStack Neutron so existing Neutron plugins provide IPAM, isolation and services. Implementation uses Docker libnetwork remote driver, a CNI driver on each worker and a Raven watcher on the master; Midonet (me donut) implements policies at the edge to drop traffic before it leaves the host, avoiding hairpins and single choke points. Status is tech preview for Kubernetes integration, released upstream for Docker pre‑1.12 remote drivers, and works end‑to‑end in test clusters.
AI-written summary · about
chapters (35)
- 0:00Intro
- 2:57Containers
- 3:43Why Containers
- 5:01Docker
- 5:54Container orchestration engines
- 6:56Whats the problem
- 7:27Networking
- 8:55Who Cares
- 9:28Containers and Networking
- 11:01Legacy Infrastructure
- 11:49Virtual Network Functions
- 12:25What is OpenStack
- 13:34Neutron
- 14:41Multitenancy
- 15:26Open Source Projects
- 15:47Courier
- 17:22What is Courier
- 18:41What is Docker
- 19:54Docker Network
- 21:47Courier Network
- 22:33Neutron Plugin
- 23:47Why is it important
- 24:18Cooper Nettie Architecture
- 25:27Cooper Nettie Control Plane
- 25:52QProxy
- 26:17Network Policy
- 26:47Flannel
- 27:25Problems with Docker
- 28:16Metokura
- 29:54Coop
- 30:57Network Overlays
- 31:35Network Definitions
- 32:35Worker Node
- 33:48Future Projects
- 35:24Wrap Up
related talks
33mContainer Networking for Micro-Services: An Apache Mesos Networking Deep Dive
37mCloud Native Security 101 - Introduction, Workflows and Best practices
41mCloud Native Security For The Rest Of Us
20mCloudy with a Chance of Zero Trust: Navigating Security in the...
25mFoster Secure Innovation with Your Kubernetes Platform
28mUsernetes Gen2: Kubernetes in Rootless Docker, with Multiple Nodes
38mOpen Source Security Tools for Kubernetes Applications
33mBuilding a Secure, Multi-Protocol and Multi-Tenant Cluster for Internet-Facing Services [A]