-
This article will quickly go through how to create wildcard certificates and automatically renew them with Lets Encrypt and Cert-Manager Cert-Manager cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those …
Read More -
What is the NSX Antrea integration Assumptions: I assume that the reader is aware of what Antrea is, and what a CNI is and also what NSX is. If not head over here to read more on Antrea and here to read more on NSX. For many years VMware NSX has help many customer secure their workload by using the NSX Distributed …
Read More -
This week I was fortunate to get hold of a VMC on AWS environment and wanted to test out the possibility of managing my K8s security policies from my on-prem NSX manager by utilizing the integration of Antrea in NSX. I haven't covered that specific integration part in a blog yet, but in short: by using Antrea as your …
Read More -
VMware NSX 3.2 is out and packed with new features. One of them is the NSX Application Platform which runs on Kubernetes to provide the NSX ATP (Advanced Threat Protection) functionality such as NSX Intelligence (covered in a previous post), NSX Network Detection and Response (NDR) and NSX Malware. This post will go …
Read More -
This page will explain my lab environment, which is used in all the examples, tutorials in this blog. Lab overview/connectivity - physical, logical and hybrid It is nice to have an overview of how the underlying hardware looks like and when reading my different articles. So I decided to create some diagrams to …
Read More -
This post will go through the IDS/IPS built-in feature of the NSX distributed firewall. Abbreviations used in this article: IDS = Intrusion Detection System IPS = Intrusion Prevention System Introduction to VMware NSX distributed IDS & IPS Before we dive into how to configure and use the distributed IDS and IPS …
Read More -
-
NSX ALB has a very useful feature built-in, to function as DNS server for your domains defined in your NSX-ALB environment. Meaning that all host-records will be automatically resolved by fqdn as soon as the service is created. If you have followed my other post about how to configure the AKO (Avi Kubernetes Operator) …
Read More -
Use NFS for your PVC needs If you are running vShere with Tanzu, TKG on vSphere or are using vSphere as your hypervisor for your worker-nodes you have the option to use the vSphere CSI plugin here. In Tanzu this is automatically configured and enabled. But if you are not so privileged to have vSphere as your foundation …
Read More -
Abbreviations used in this article: NSX Advanced Load Balancer = NSX-ALB K8s = Kubernetes (8 letters between the K and s in Kubernetes) SSL = Secure Sockets Layer AKO = Avi Kubernetes Operator (AVI now a VMware product called NSX Advanced Load Balancer) In one of my previous posts I wrote about how to install and …
Read More -
This is an introduction post to Antrea, what it is and which features it has. For more details head over to: https://antrea.io/ and https://github.com/antrea-io/antrea First of, Antrea is a CNI. CNI stands for Container Network Interface. As the world moves into Kubernetes more and more, we need a good CNI to support …
Read More -
This post will go through the Antrea-native policy resources and how to use them to secure your Kubernetes environment combined with K8s network policies. Abbreviations used in this article: Container Network Interface = CNI Antrea Cluster Network Policies = ACNP Antrea Network Policies = ANP Kubernetes Network …
Read More