February 2021
Beginner to intermediate
252 pages
5h 36m
Korean
Content preview from 컨테이너 보안: 컨테이너화된 응용 프로그램의 보안을 위한 개념, 이론, 대응법과 모범 관행까지
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
제
13
장
실행 시점 컨테이너 보호
220
워크 트래픽을 ) 감시하고 제어하는 데 그 프로파일을 사용하는 것이 합리적이다.
참고:
쿠버네티스 배치본에서는 실행 시점 보안 정책을 파드 별로 강제할 수 있다 (
PodSecurityPolicy
객
체를 통해서든, 또는 파드 수준에서 작동하는 다른 보안 도구를 통해서든 ). 본질적으로 하나의 파드는 네
트워크 이름공간을 공유하는 컨테이너들의 집합이므로, 실행 시점 보안에 대한 바탕 메커니즘은 이번 장에
서 논의하는 것과 동일하다.
이번 장에서는 §
10
.
1
컨테이너 방화벽(
p
.177
)의 전자 상거래 플랫폼 예제를 다시 사용한
다. 이 예에서 제품 검색 마이크로서비스는 쇼핑몰 사이트를 둘러보던 고객이 입력한 검색어를
담은 웹 요청을 받아서, 제품 데이터베이스에서 그 검색어와 부합하는 제품을 찾아서 돌려준
다. 그럼 이 마이크로서비스가 주고받을 만한 네트워크 트래픽을 생각해 보자.
13.1.1
네트워크 트래픽 프로파일
제품 검색 마이크로서비스의 설명에서 짐작하겠지만, 이 마이크로서비스의 컨테이너들은 특정
한 진입 트래픽 분산기 (
ingress
traffic
balancer
) 또는 부하 분산기 (
load
balancer
)에서 웹
요청을 받고 그에 대한 응답을 돌려주어야 한다. 또한, 컨테이너들은 제품 데이터베이스와의
데이터베이스 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.