Apache Mesos and Security: The Joy of Mesos with Calico
summary
PagSeguro replaces VLANs and slow manual ACLs with Calico BGP routing and policy-based security, giving each container one IP per container and programmable security groups enforced from CI/CD. They bridge on‑prem datacenters and AWS via VPN plus a MikroTik hot reflector to propagate routes, so containers in different sites route natively without overlays. ACL changes move from weeks to minutes, the deployed system scales across sites, and production traffic proves the setup reliable.
AI-written summary · about
chapters (16)
- 0:00Introduction and use case
- 0:59Company challenges
- 3:25Monolith to microservices
- 5:32Adopting Calico
- 7:09Security and compliance
- 8:53Calico fundamentals
- 11:23Multi-data center scalability
- 13:24Security groups implementation
- 15:51Networking benefits
- 18:37Data center integration
- 21:14Traffic flow and hybrid setups
- 23:48Policy management
- 27:34Extending to AWS
- 30:26Cloud networking solution
- 33:10Results and benefits
- 35:06Q&A session
related talks
23mContainer and Kubernetes security policy design: 10 critical best practices
52mImplementing holistic security for containers and Kubernetes
32mUsing Open-Source Software to Secure Cloud-Native Applications
39mExploring Container Security: A DevSecOps journey securing a fake shop - Jeremy Guerrand
33mNavigating the Container Jungle
33mContainer Networking for Micro-Services: An Apache Mesos Networking Deep Dive
31mBalancing Act: HanseMerkur's Regulatory Preparation through Process and Tool Innovation
46mContinuous Kubernetes Security