Aporeto, a Zero Trust Cloud Security company, announces its cloud network security solution for seamless distributed policy management across Kubernetes multi-cluster and container environments.
According to the company, the solution uses a unique application identity-based approach to security instead of relying on IP addresses. Aporeto’s use of identity enables network security policies to now be managed up the stack at the application level.
Can extend across Kubernetes clusters & IP domains
Unlike any other Kubernetes security solutions in the marketplace that cannot extend across clusters and IP domains, Aporeto offers a turn-key enterprise SaaS solution that works well for multi-cluster Kubernetes deployments across multiple geographies at scale, they said.
All that is required for the user is to deploy an Aporeto enforcer on k8 nodes or VMs. The Aporeto solution protects the whole node and not just the PODs in a Kubernetes cluster.
With Aporeto, security is implemented at layers L3-L7 with end-to-end authentication, authorization and optional encryption for a Zero Trust security posture.
The layer of enforcement is a user choice, and it allows users to balance between performance overheads and security requirements.
The cloud network security solution assigns a cryptographically signed and attested service identity to every Kubernetes POD. Security policies remain portable and persistent no matter where the POD resides.
“Aporeto helps our customers to centralize the visibility, management and enforcement of their network security needs across on-prem and cloud based Kubernetes workloads using application identity rather than IP addresses,” said Shea Stewart, partner, Arctiq.
“The approach towards uniquely identifying each application with more granularity than a simple network address is absolutely required in the world of software defined networks (SDN) and ephemeral cloud workloads. Aporeto provides a solution that can easily enforces the Zero Trust security framework for our customers, while also providing a fully programmable API that integrates with existing DevOps release processes.”
Aporeto works seamlessly with other Kubernetes technologies, including all existing and cloud-native container network interface (CNI) architectures and service mesh products such as Istio.
It can automatically import and apply Kubernetes network policy definitions to provide DevOps with a familiar YAML interface and backward compatibility for declaring allowed network connections, eliminating stacks of unnecessary YAML files and accelerating application deployment.
Additionally, the cloud network security solution supports all formats of Kubernetes including managed offerings such as AWS EKS, Google GKE, Microsoft Azure AKS, IBM Cloud Kubernetes, as well as private installations such as Red Hat OpenShift, kubeadm and Heptio.
If you enjoyed this article and want to receive more valuable industry content like this, click here to sign up for our digital newsletters!
Leave a Reply