Copy
The only way systems can be truly secure is if security considerations are included in the initial design.  View in browser »
The New Stack Update

ISSUE 70: Rock the DevSecOps

Talk Talk Talk

“We are now at about 8 million estimated users and still growing at about 100 percent a year. We haven’t passed Java in terms of users yet, but by this time next year at the current growth, we will surpass.”

___
Node.js’s Mikeal Rogers, on Node’s fast growth.
Add It Up
47% of Surveyed Companies' Employees Are Open Source Contributors
Cloud-native Ecosystem Proxy: Technologies on Docker. Since NGINX is deployed most often on Datadog customers’ Docker containers, we thought it appropriate to use the chart above as a “proxy” for the cloud-native world. From this perspective, all the top technologies are open source, and most of them support data and messaging infrastructure. Interestingly, every single technology is now offered as a service (aaS). Despite the effort needed to keep distributions up to date, most won’t let you choose to pay for supported elasticsearch, Redis or MySQL. Moving forward, we know companies are looking forward to selling you services with verified Docker images that contain many of these offerings. Alternatively, most major cloud providers are beginning to offer them, just as they also provide supported Apache servers with web hosting.
What's Happening

There is no single way to monitor containers running in production. CA Technologies, which has been in the application monitoring field for the entirety of this decade, has its own strategy: to filter out the infrastructure-centric elements from container monitoring, and present to developers metrics that are tailored for the way they understand the system. Listen now to Kumar’s explanation of how such a system works in CA Technologies’ Tailored Views of Performance, the latest installment of The New Stack Makers podcast with Scott Fulton.

The New Stack Makers: Delivering Performance Metrics for Everyone’s Unique Perspective

Rock the DevSecOps

“Security must be baked in, not bolted on." Administrators and developers have been hearing this advice for years. And with good reason. The only way systems can be truly secure is if security considerations are included in the initial design. This is doubly true of those systems built on the principles of immutable infrastructure, where post-application fiddling is impossible by design. Yet, you may not find much practical news about security on developer news sites. Except for the most high profile cases (i.e., “Heartbleed’), the news of the vulnerabilities that can cripple IT systems still comes from the dedicated security news sites, which developers and IT staff may, or may not, bookmark.

Not with us, however. Going forward, you will start to see more security coverage on the TNS site. We’ve long let you know about the new features of some software you use or some new technology that you could use to make your jobs easier. So it would follow that we should let you know about recently unearthed security issues that arise from this software, as well as the patches that are released to fix these problems. It’s all about providing the full picture — down to the code itself. And by covering these individual bugs more closely, we are hoping to aggregate a better, fact-based understanding of the emerging security trends for the enterprise. Earlier this week, we were among the first to report on the serious "Stack Clash" and we hope, that over time, you will look to us first for the coverage on the security implications of the technologies that you use every day.

Wal-Mart Kicks Partners Off Amazon’s Cloud: The Implications for Organizations

Retail and e-commerce giant Wal-Mart notified some of its technology partners that they need to move their information assets away from Amazon Web Services if they want to continue doing business. This move certainly comes as no surprise to many, as the two companies are long-standing rivals in their respective quests to dominate the world of retail. As Conatinership CEO Phil Dougherty notes in this contributed piece, Wal-Mart’s notice to partners should be treated as a warning sign: If you are building and managing web infrastructure, you had better plan and build in a cloud-agnostic fashion, or risk getting caught with your pants down.

Effective Microservices Architecture with Event-Driven Design

There’s no doubt that in the IT world, microservices are sexy. But just because you find something cool and attractive doesn’t mean it’s good for you. And it doesn’t mean you know how to use it properly. Key to making a microservices architecture work, argues Red Hat’s Principle Middleware Architect Christian Posta, is an adherence to the methodology of event-driven design.

Kubermesh: Ocado’s Kubernetes Variant for Building Fault-Tolerant Infrastructure

One of the interesting trends we are seeing with Kubernetes is how it is being used for a surprising number of different tasks. Turns out, distributed computing is difficult to do correctly (and simply), and that Kubernetes can handle the job so effectively means it will make friends in a lot of places. In this story from our London correspondent Maxwell Cooter, British supermarket Ocado has outfitted Kubernetes to manage fault-tolerant mesh networks, allowing the firm to enjoy an extra resilient infrastructure.

Party On

A league of codgy senior technology journalists. Left to right: TNS’ Rob “Dr. Torq” Reilly, ZD Net’s Steven Vaughan-Nichols, TNS Managing Editor Joab Jackson.

FREE EBOOK: Learn about patterns and deployment use cases for Kubernetes.
Kubernetes is a container management platform designed to run enterprise-class, cloud-enabled and web-scalable IT workloads. For both new users and recent adopters, it’s important to highlight how Kubernetes is being utilized by teams and organizations.

This ebook begins with an overview of the Kubernetes platform and how it functions, then covers the usage patterns and key deployment scenarios of customers using Kubernetes in production. We’ll also take a look at the projects and companies, such as CoreOS, Intel and Red Hat, working to push Kubernetes forward for the entire ecosystem.
Download The Ebook
Upcoming ebook series: Kubernetes, Node.js, Serverless
Copyright © 2017 The New Stack, All rights reserved.


Want to change how you receive these emails?
You can unsubscribe from this newsletter