Containers, Virtualization, and Rugged DevOps
“When we’re looking at taking a containerized workload, one of the challenges with it is you lose a lot of the visibility when you’re running at scale in a virtualized environment,” said Robbie Jerrom (@robbiej), member of the Global Cloud Native Apps SME Team for VMware, after his presentation, Your DevOps Transformation. Culture, Technology, or Both? at Vmworld 2015 in San Francisco.
When those containers are in a VMware environment you can actually see their behavior from an operations perspective. You can see their resources. And from a security perspective, you get two and three layers of protection from the rest of the containers and operations, added Jerrom.
Jerrom gave his presentation with Ed Hoppitt, a CTO ambassador with VMware who stressed that DevOps is not about a technological change. It’s about culture and fear.
“Change drives fear and change can breed suspicion,” said Hoppitt who also recommended you run away from anyone who says they can give you more agility if you purchase $2 million in tools.
DevOps is simply operations and developers working together across the end-to-end service lifecycle, from design through the development to live production. It requires a shift in an IT mindset, added Hoppitt who pointed out that market forces are leading the need for DevOps change.
Software is changing everything
- Competition was known; now it's unpredictable.
- Assets were owned; now they're shared.
- Innovation was methodical planning; now it’s rapid iteration.
- App development used to be slow; now it's instant.
- Organizations used to be built to last; now they're built to change.
- Customers have gone from the millions to billions.
Because our demands for what software can and should do are changing so rapidly, so is our need to evolve development to meet those demands. Hence the rising interest in DevOps.
Jerrom indicated several ways DevOps has evolved traditional development:
What is DevOps?
- DevOps extends agile development or creates agile++.
- An agile ops team member is a VM / OS specialist, not just an app developer.
- Agile ops staff are automation specialists, not just UI developers.
- Continuous delivery has now become continuous deployment.
- You essentially skip the manual step of handing an application over to operations.
- You go from code to testing where it's almost at production.
- Code is never “done.” The new done is always in development.
DevOps is really about a team that can create something that's useful to the business, said Jerrom. The full stack is having full appreciation of infrastructure, security, and all the code. It's also about the person who can talk and communicate this across all departments. As an individual, the “full stack” developer does not exist. The full stack is the team.
VMware can bridge the two worlds, as virtual machines and container isolation can operate better together, said Jerrom.
- Containers offer OS level isolation rather than just hardware isolation from VMs.
- Containers focus on environmental consistency; VMs focus on security and multi-tenancy.
The developer lifecycle and a production stack can all be handled by VMware Cloud-Native Apps Stack.
If you wrap containers into virtual machines you can solve the DevOps problem and get around the cycle of data, application development, and analysis, said Jerrom. Those who succeed are the ones who can get around this loop the fastest.
Related Articles
How A CNAPP Can Take You From Cloud Security Novice To Native In 10 Steps
May 23, 2024Context is critical in cloud security. In a recent RSA presentation, Tenable's Shai Morag offered ten tips for end-to-end cloud infrastructure security.
Logs of Our Fathers
September 22, 2009<p>At USENIX in Anaheim, back in 2005, George Dyson treated us to a fantastic keynote speech about the early history of computing. You can catch a videotaped reprise of it <a href="http://www.ted.com/talks/lang/eng/george_dyson_at_the_birth_of_the_computer.html" target="_blank">here, on the TED site</a>. I highly recommend it - there's lots of interesting and quirky stuff. I managed to talk him into giving me a copy of his powerpoint file, and subsequently tracked him down and am re-posting this material with his permission.</p> <h3>November, 1951 </h3> <p style="TEXT-ALIGN: center"><a href="http://www.ranum.com/security/computer_security/papers/ur-syslogs/first_syslog.jpg" target="_blank"><img border="0" height="375" src="http://www.ranum.com/security/computer_security/papers/ur-syslogs/t/first_syslog.jpg" width="500" /></a> <br /><strong>Machine Log #1</strong></p>
ShmooCon 2009 - Playing Poker for Charity
February 12, 2009Tenable sponsored a booth at this year's ShmooCon and ran a Texas Hold'em table to help raise money for the Hackers for Charity organization. We raised close to $400 from conference attendees ...
Cybersecurity Snapshot: Tenable Report Warns About Toxic Cloud Exposures, as PwC Study Urges C-Suite Collaboration for Stronger Cyber Resilience
October 18, 2024Check out invaluable cloud security insights and recommendations from the “Tenable Cloud Risk Report 2024.” Plus, a PwC study says increased collaboration between CISOs and fellow CxOs boosts cyber resilience. Meanwhile, a report finds the top cyber skills gaps are in cloud security and AI. And get the latest on SBOMs; CIS Benchmarks; and cyber pros’ stress triggers.
At Nearly $1 Billion Global Impact, the Best Cloud Security Couldn’t Stop This Hybrid Attack Path. Takeaway: Map and Close Viable Attack Paths Before Breaches Begin.
October 16, 2024Conventional wisdom suggests best-of-breed is the only way to secure your clouds. But what of hybrid attack paths that cross security domains — like those exploited in the SolarWinds and Capital One breaches? Exposing the gaps attackers exploit to move laterally requires visibility and context across security silos.
Oracle October 2024 Critical Patch Update Addresses 198 CVEs
October 15, 2024Oracle addresses 198 CVEs in its fourth quarterly update of 2024 with 334 patches, including 35 critical updates.
- Conferences