Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CNCF [Cloud Native Computing Foundation]

gVisor and Falco - Strengthening Kubernetes and Container Security with Visibility

CNCF [Cloud Native Computing Foundation] via YouTube

Overview

Explore container security strategies in Kubernetes environments through this 44-minute conference talk. Dive into the challenges of container sandboxing and learn about Falco, a powerful open-source tool for runtime security. Understand how gVisor works to enhance container isolation and discover the synergy between gVisor and Falco for improved security without sacrificing visibility. Examine the evolution of Falco's architecture and its integration with gVisor. Gain insights into the benefits of combining these technologies for enhanced Kubernetes security and learn how to leverage community support for further advancements in container protection.

Syllabus

Intro
It takes a team!
Container sandboxing security challenge
About Falco
How Falco works
Running Falco
How gVisor works
Prevention != Detection
gVisor isolation confused Falco
gVisor Kernel to the rescue!
One Falco instance per node
Falco architecture evolution
Calling on the community
Falco+gVisor user benefits

Taught by

CNCF [Cloud Native Computing Foundation]

Reviews

Start your review of gVisor and Falco - Strengthening Kubernetes and Container Security with Visibility

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.