Tag: containers

5 Tips for Making Containers Faster

November 5, 2017

One of the selling points of containers is that containerized applications are generally faster to deploy than virtual machines. Containers also usually perform better.

But just because containers are faster by default than alternative infrastructure doesn’t mean that there are not ways to make them even faster. You can go beyond the defaults by optimizing Docker container image build time, performance and resource consumption. This post explains how. Read more


What is a CaaS? Containers as a Service, Defined

October 17, 2017

When public clouds first began gaining popularity, it seemed that providers were quick to append the phrase “as a service” to everything imaginable, as a way of indicating that a given application, service, or infrastructure component was designed to run in the cloud. It should therefore come as no surprise that Container as a Service, or CaaS, refers to a cloud-based container environment. Read more


Containers vs. Serverless Computing

October 9, 2017

Serverless computing is a hot topic right now—perhaps even hotter than Docker containers.

Is that because serverless computing is a replacement for containers? Or is it just another popular technology that can be used alongside containers? Read more


Bootstrapping Rancher 2.0

October 3, 2017

It’s finally here: the Rancher you’ve all been waiting for. Rancher 2.0 is now in preview mode and available to deploy!

Rancher 2.0 brings us a whole new Kubernetes-based structure, with new features like platform-wide multi-select, adoption of existing Kubernetes clusters, and much, much more. Read more


Container Security Tools Breakdown

August 1, 2017

Container security was initially a big obstacle to many organizations in adopting Docker. However, that has changed over the past year, as many open source projects, startups, cloud vendors, and even Docker itself have stepped up to the challenge by creating new solutions for hardening Docker environments. Today, there is a wide range of security tools that cater to every aspect of the container lifecycle.

Docker security tools fall into these categories:

  • Kernel security tools: These tools have their origins in the work of the open source Linux community. They have been inherited by container systems like Docker as foundational security tools at the kernel level.
  • Image scanning tools: Docker Hub is the most popular container registry, but there are many others, too. Most registries now have solutions for scanning container images for known vulnerabilities.
  • Orchestration security tools: Kubernetes and Docker Swarm are the two most popular orchestrators, and their security features have been gaining strength over the past year.
  • Network security tools: In a distributed system powered by containers, the network is more important than ever. Policy-based network security is gaining prominence over perimeter-based firewalls.
  • Security benchmark tools: The Center for Internet Security (CIS) has provided guidelines for container security, which have been adopted by Docker Bench and similar benchmark security tools.
  • Security with CaaS platforms: AWS ECS, GKE and other CaaS platforms build on the security features of their parent IaaS platform, and then add container-specific features or borrow security features from Docker or Kubernetes.
  • Purpose-built container security tools: This is the most advanced option for container security. In it, machine learning takes center stage as these tools look to build an intelligent solution to container security.

Here’s a cheatsheet of Docker security tools available as of mid-2017. It’s organized according to which part of the Docker stack the tool secures.

Read more


Recent Posts


Upcoming Events