sb-au logo
Story image

A10 aims to secure Kubernetes container environments

12 Dec 2018

A10 Networks a provider of intelligent and automated cybersecurity solutions announced the availability of the A10 Secure Service Mesh solution for applications deployed in open-source Kubernetes container environments. 

The solution aims to provide teams deploying microservices applications with an automated way to integrate enterprise-grade security and load-balancing with comprehensive application visibility and analytics.

“With the Secure Service Mesh solution, A10 continues to deliver on its promise of intelligent automation and security for both modern multi-cloud and traditional infrastructure,” said Lee Chen, CEO of A10 Networks. 

“Organisations are turning to containers for their production applications to become agile and scalable in meeting the demands of digital transformation. The A10 Secure Service Mesh is a significant advancement for these environments.”

A10 Lightning ADC, a containerised and lightweight load balancer and proxy, is the primary component providing load balancing and security capabilities. It works in an active-active cluster which is elastic and scales up/down automatically with the scale of a Kubernetes cluster. The same Lightning ADC cluster can be used for both North-South as well as East-West traffic.

The security solution between microservices includes enforcing micro-segmentation policies for traffic between the services. The system can also automatically encrypt traffic between services, further increasing the privacy and security of those communications. 

Additional security capabilities include rate-limiting application traffic to each service, application DDoS and SSL/TLS offload.

The Secure Services Mesh solution includes the A10 Harmony controller, which supposedly provides multi-cloud, centralised policy management and also comprehensive metrics, logs and analytics providing actionable insights for each microservice. 

These analytics include end-to-end transaction latency, throughput, request rate, and other real-time and historical metrics.

Traffic management capabilities in the A10 Secure Services Mesh include automatic service discovery, health monitoring, load balancing, URL/content switching, and support for Blue-Green or Canary deployments.

Supposedly none of these capabilities requires any change to the actual applications and can be completely automated under the control of the operations teams. 

This lowers the operational burden as the microservices applications scale in usage and complexity. The A10 Secure Services Mesh solution is integrated with container management systems like Kubernetes and Red Hat OpenShift.

A10 Networks VP Kamal Anand says, “For applications deployed in a Kubernetes environment, east-west traffic security is a prime concern.

“The A10 Secure Service Mesh elegantly addresses security concerns without imposing any specific deployment model or requiring any changes to applications." 

"Per-service, application-layer traffic analytics greatly help operations teams to optimise the application as well as infrastructure and enhance the security and delivery of their application.”

Story image
Attivo Networks expands Active Directory suite for greater protection
"We see Active Directory exploitation used in the majority of ransomware, insider and advanced attacks. We are pleased to now offer our customers early and efficient solutions for preventing the misuse of Active Directory.”More
Story image
97% of organisations experienced a mobile threat in 2020 — report
93% of these attacks originated in a device network, which includes attempts to trick users into installing a malicious payload via infected websites or URLs, or to steal users’ credentials.More
Story image
Major firms disclose breaches in the wake of SolarWinds attack
Microsoft, Shell, GoDaddy, MobiKwik — these are just some of the high-profile company's on the receiving end of sophisticated attacks, writes Bitglass senior director of marketing Jonathan Andresen.More
Story image
Cybercriminals influencing financial markets, report finds
The financial sector is being targeted by cybercrime cartels and nation-states, and the bank heist has evolved significantly — from a heist to a hostage situation.More
Story image
Cohesity appoints its very first CISO
In the newly created role, new appointee Brian Spanswick will focus on advancing and optimising IT and security for Cohesity and its customers, the company says.More
Story image
Kroll completes Redscan acquisition, expands cyber risk portfolio
With the addition of Redscan and its extended detection and response (XDR) enabled security operations centre (SOC) platform, Kroll expands its Kroll Responder capabilities to support a wider array of cloud and on-premise telemetry sources.More