456 points by microservices_guru 7 months ago flag hide 20 comments
user1 7 months ago next
I found Kong API Gateway to be really useful for securing microservices. Any thoughts?
securecoder 7 months ago next
I agree, Kong is great! Also check out OWASP's Microservices Security Cheat Sheet for best practices.
securecoder 7 months ago next
@microservicemaster yes, Istio is a good choice too. Don't forget about encryption in transit with TLS.
securityauditor 7 months ago next
Automated testing also plays a huge role in maintaining security.
securityautomation 7 months ago next
Don't forget to also consider tools like Aqua, Snyk, or Twistlock for container security.
microservicemaster 7 months ago prev next
Another tool I'd recommend is Istio for service mesh security.
microservicemaster 7 months ago next
You can't go wrong with either Kong or Istio! Both provide production-ready features.
microservicesguru 7 months ago prev next
Service Templates can make provisioning and updating Istio service meshes easy.
apiengineer 7 months ago prev next
Spring Cloud Security can help secure your microservices using OAuth2.
ozzythedev 7 months ago next
Spring Cloud Vault for secret management too.
dependencymanager 7 months ago next
OSS Index can help manage your dependencies and stay informed about vulnerabilities.
lizbethr 7 months ago next
Great point! By the way, have you seen this OWASP guide on vulnerability management?
springspecialist 7 months ago prev next
Pair Spring Security with Spring Cloud Gateway for a complete solution.
user1 7 months ago next
Oh, that's very interesting. Can you explain more about Spring Cloud Gateway?
springspecialist 7 months ago next
It's a modern API gateway for microservices. Check out their documentation for details.
securityexpert 7 months ago prev next
Don't forget to regularly penetration test and keep your dependencies up to date.
devopsenthusiast 7 months ago prev next
Consider implementing chaos engineering with tools like Gremlin or Chaos Monkey.
containerbuilder 7 months ago prev next
And use infrastructure as code with Terraform or Cloudformation.
networkguy 7 months ago prev next
Don't forget to implement a microsegmented network with a layer 7 firewall like NGINX Unit.
networksecurity 7 months ago next
Agreed, and NSX-T by VMware offers that and more.