james ford pareidolia, llc 973-723-1755files.informatandm.com/uploads/2019/4/0940_jim_ford.pdf ·...
TRANSCRIPT
Information Classification: General
Beyond the “Fog”
Over the “Edge”
James Ford
Pareidolia, LLC
973-723-1755
Information Classification: General
1972
LPAR 1979
‘chroot’
2000
‘Jails’ 2005
‘Zones’
First
Containers
Container Continuum
2008
‘LXC’2013
‘3.8’
Namespaces
First
Hypervisor
Information Classification: General
Evolutionary pressures• What changed to make containers so
desirable?
• Process isolation/containment
• Smaller, Immutable shareable images
• Quick Start Up
• Run multiple from single image
• Dependency Injection
• Disposable (Cattle vs Pets)
• What will the future ecosystem include:
• AWS FireCracker (MicroVM)
• V8 Worker threads
• Serverless/Functions
• Deployless ? Live code
• Orchestratorless choreography
(Fargate/?)
• Kubernetes on silicon (ASIC)??
Information Classification: General
Trust Model
• Data Center perimeter our original trust boundary…..
• Now, Internal service calls are being retrofitted with
authentication and authorization
• Modern containerized / orchestrated applications are using the
cluster or node as the trust boundary….
• Soon, our applications will execute on shared or untrusted
substrates!
Information Classification: General
Tesla Model S
65 processors
The Edge Accelerates
This is the new EdgeK8S —> K3S —> K√-1S
Information Classification: General
Learning from the past?
Service Mesh 1.0
Today we need “any to any” routing in our cluster(s)
Tomorrow ?
Information Classification: General
20 day old zero day exploits
Open Source Projects can contain threat vectors
Understand your dependencies
Root cause:
Malice, Malfeasance, Mischief, Mistake
20 year old zero day exploits
Represents a failure of imagination
not a failure of design
Spectre and meltdown, etc have come
As we share more and more
fine grained resource
“General Purpose” Computing
Remember:
Deploying to production with the defaults
will quickly become your fault.
Information Classification: General
Rapid periods of differentiation can be followed by extinction events….
Not all OSS projects live forever (remember the Trilobites!)
Options Galore
Information Classification: General
Courtesy of Container Solutions
Information Classification: General
Courtesy of Container Solutions
Information Classification: General
“Time flies like an Arrow
Fruit flies like a banana”
Samuel Shivel Ford
1894 - 1992
Information Classification: General
Samuel S Ford
1894 - 1992
Information Classification: General
James Ford
Pareidolia, [email protected]
What is your
Space Shuttle?
http://www.Pareidolia.rockshttps://www.linkedin.com/in/jamescaldwellford/Twitter: FordJamesC