james ford pareidolia, llc 973-723-1755files.informatandm.com/uploads/2019/4/0940_jim_ford.pdf ·...

Information Classification: General

Beyond the “Fog”

Over the “Edge”

James Ford

Pareidolia, LLC

973-723-1755

james.ford@pareidolia.rocks

Information Classification: General

1972

LPAR 1979

‘chroot’

2000

‘Jails’ 2005

‘Zones’

First

Containers

Container Continuum

2008

‘LXC’2013

‘3.8’

Namespaces

First

Hypervisor

Information Classification: General

Evolutionary pressures• What changed to make containers so

desirable?

• Process isolation/containment

• Smaller, Immutable shareable images

• Quick Start Up

• Run multiple from single image

• Dependency Injection

• Disposable (Cattle vs Pets)

• What will the future ecosystem include:

• AWS FireCracker (MicroVM)

• V8 Worker threads

• Serverless/Functions

• Deployless ? Live code

• Orchestratorless choreography

(Fargate/?)

• Kubernetes on silicon (ASIC)??

Information Classification: General

Trust Model

• Data Center perimeter our original trust boundary…..

• Now, Internal service calls are being retrofitted with

authentication and authorization

• Modern containerized / orchestrated applications are using the

cluster or node as the trust boundary….

• Soon, our applications will execute on shared or untrusted

substrates!

Information Classification: General

Tesla Model S

65 processors

The Edge Accelerates

This is the new EdgeK8S —> K3S —> K√-1S

Information Classification: General

Learning from the past?

Service Mesh 1.0

Today we need “any to any” routing in our cluster(s)

Tomorrow ?

Information Classification: General

20 day old zero day exploits

Open Source Projects can contain threat vectors

Understand your dependencies

Root cause:

Malice, Malfeasance, Mischief, Mistake

20 year old zero day exploits

Represents a failure of imagination

not a failure of design

Spectre and meltdown, etc have come

As we share more and more

fine grained resource

“General Purpose” Computing

Remember:

Deploying to production with the defaults

will quickly become your fault.

Information Classification: General

Rapid periods of differentiation can be followed by extinction events….

Not all OSS projects live forever (remember the Trilobites!)

Options Galore

Information Classification: General

Courtesy of Container Solutions

Information Classification: General

Courtesy of Container Solutions

Information Classification: General

“Time flies like an Arrow

Fruit flies like a banana”

Samuel Shivel Ford

1894 - 1992

Information Classification: General

Samuel S Ford

1894 - 1992

Information Classification: General

James Ford

Pareidolia, LLCjames.ford@Pareidolia.rocks

What is your

Space Shuttle?

http://www.Pareidolia.rockshttps://www.linkedin.com/in/jamescaldwellford/Twitter: FordJamesC