Tag: NetFoundry

  • NetFoundry Embeds Zero Trust Into Prometheus for Secure Monitoring Anywhere

    Charlotte, NC, May 17, 2022 – NetFoundry is celebrating Prometheus Day with native secure networking connectivity for the leading open-source application monitoring tool. 

    The company has embedded OpenZiti directly into Prometheus, the de facto standard for monitoring application performance in day one and day two operations. Prometheus is used in 86% of all cloud projects, according to the Cloud Native Computing Forum. 

    Prometheus with OpenZiti can scrape anything from anywhere with full zero-trust protection from external network attacks. Access is via an outbound-only internet connection obviating the need for VPNs, complex firewall rules, DNS modifications or the PushGateway.

    OpenZiti enforces security and connectivity to and from Prometheus and other resources saving time and effort for network and security teams, particularly in complex, distributed deployments.

    Galeal Zino, chief executive of NetFoundry, said: “Developers and operators want to get value, but security is hard. They shouldn’t need to worry about the pain of network plumbing, VPNs, or DNS or open inbound ports on a firewall. They want to deploy into any cloud environment with zero complexity. 

    “With the zitification of Prometheus, networking and security are taken care of automatically so you can deploy in minutes, eliminating days or weeks of effort while significantly reducing the attack surface and operational complexity.”

    NetFoundry, a member of the Linux Foundation, has also zitified other open-source tools including, Helm, for managing Kubernetes applications, and Kubectl, the command-line tool for communicating with Kubernetes clusters. Many others are in the works.

    Zino said: “Applications are becoming massively distributed across a continuum from cloud, IoT, edge and more. It no longer makes sense to make the network responsible for security. It needs to be built into every application. With OpenZiti, all you need is commodity outbound internet. Nobody else can do this. Nobody else has made industrial-strength security easy and free.”

    Last year Oracle endorsed OpenZiti for use by developers in Oracle Cloud Infrastructure. Oracle also recommends OpenZiti for mitigating Log4J (or any CVEs and zero-day) risks in Java applications on the internet.  

    CI/CD automation provider Ozone zitified their platform and Prometheus to connect into customer networks without inbound ports or complex firewall rules. 

    Moteesh Reddy, Ozone technical lead, said: “Ziti allowed us to innovate and drive new business with a competitive edge. Today, Ozone is the only CI/CD tool that automates private cluster deployments across any platform providing customers with zero trust, secured application delivery for private Kubernetes clusters.”

    OpenZiti can be downloaded, run locally, and hosted by ISVs. It is also available as a service hosted by NetFoundry with freemium options.

    About NetFoundry

    NetFoundry enables developers, ISVs, SaaS, and solution providers to transform secure networking into an innovation enabler. Infrastructure is replaced with code.  Programmable, cloud native, zero trust networking is embedded in the application. 

    NetFoundry is the originator and leading contributor to the OpenZiti, open source networking project, and provides all the modules required for zero trust networking as a service, enabling you to spin up global, secure, high performance networking without becoming network engineers, and giving DevOps and NetOps teams end-to-end control and visibility of applications, over any set of edges, networks and clouds.

    NetFoundry is a remote-first company (from inception), with its largest pods in NC and NY and fantastic NFians, innovating at the edges, around the globe. Visit us at https://netfoundry.io/ 

    Media contact
    Julian Patterson
    jpatterson@zonicgroup.com
    +44 7525 177602

  • NetFoundry Network Overlay Advances DevSecOps

    NetFoundry Network Overlay Advances DevSecOps

    NetFoundry, at the recent KubeCon + CloudNativeCon 2019 conference, announced the general availability of a developer platform designed to make it easier for organizations to bake a zero trust networking framework within their applications.

    Company CEO Galeal Zino said NetFoundry has created a network fabric overlay to manage and secure communications between endpoints and applications. Developers now can embed a programmable zero trust networking framework within their applications using a NetFoundry Developer Platform, which consists of software development kits, application programming interfaces (APIs) and connectors, said Zino. DevOps teams can either consume the entire NetFoundry Developer Platform or only the open source components that have been included.

    At the same time, NetFoundry announced it has joined the Cloud Native Computing Foundation (CNCF) to advance the adoption of open source networking services for containerized applications.

    NetFoundry

    Rather than having to become intimately familiar with networking protocols, Zino says NetFoundry provides a layer of abstraction using software to eliminate the need to rely on virtual private networks (VPNs) or network address translation (NAT) tools.

    As the number of endpoints and applications they need to connect to have significantly increased, DevOps teams are finding they need to master each type of dedicated network established for endpoints ranging from mobile computing devices to internet of things (IoT). That endeavor can be cumbersome at best. NetFoundry is making the case for a programmable network overlay that allows endpoints to access applications over public internet connections securely.

    As programmable overlays become more widely available, the rate at which network operations will be incorporated into best DevOps processes is likely to increase. Network managers will continue to set up the physical underlay that enables networking; however, how applications employ that underlay increasingly will be determined by invoking a programmable overlay. A programmable network overlay also provides the benefit of further separation of duties between DevOps teams and networking professionals in a way that doesn’t require networking teams to become deeply involved in every application development project.

    That approach should reduce significantly the amount of time now required to deploy or update a distributed computing application. DevOps teams today may be able to push code into production faster than ever. However, configuring the networking services those applications require remains a set of manual tasks that have become a significant bottleneck to making IT teams more agile.

    It remains to be seen to what degree programmable network overlays will provide something of a demilitarized zone (DMZ) between DevOps teams and networking professionals. Today most networking services are provided via either directly on top of networking infrastructure or using network overlays controlled by networking teams. But it still takes days to weeks for networking professionals to respond to requests for services from DevOps teams. It’s clear the way networking services are provisioned across the enterprise needs to change substantially.

    — Mike Vizard