Container Storage and Data Protection for Applications on Kubernetes

Chapter 3. Kubernetes Performance and Security

As Kubernetes deployments become larger and more prevalent, the enterprise is turning its focus to performance and security, which are important for both business continuity and cost control. Performance helps save cost by maximizing infrastructure usage and preventing unnecessary resource scaling. Security helps control cost and ensure business continuity by protecting assets, including customer data and other proprietary information.

What Hasn’t Changed: Performance, Availability, and Security Requirements

As applications have evolved from monolithic on-premises deployments, to virtual machines, to software as a service (SaaS) and platform as a service (PaaS) offerings running in the cloud, to modern containerized cloud native applications, business requirements haven’t changed. Enterprise applications running on Kubernetes must meet nonnegotiable business requirements such as high availability, data protection, and strict performance metrics, all while operating across hybrid clouds or multiple data centers.

Performance requires using resources appropriately, ensuring that there is enough capability to serve the needs of the business without overprovisioning or overspending. Availability involves taking hardware failures and network latency in stride, and meeting SLAs without blinking an eye. Security means protecting sensitive resources and data through encryption, access controls, and defense in depth while making them available ...