Container比較
Auto scaling, how to rebalance?
Nope.
每次新的Image 都要新的 task definition,目前有清理舊的 task definition 的機制嗎?
Nope.
Keyword:
EKS, Fargate
Fargate:不能微調,gpu, spot
EKS:helm
資安 by 趨勢科技
業配.. deep security
大概防護措施:
sha1 防竄改 -> recovery -> alert
firewall
AWS 良好架構概述
5 Pillars in AWS well-architected framework
- Operational excellence
- 如果我的 panel 都是綠燈,但伺服器還是壞的?! 修正/補足 alert
- Security
- IAM -> detective control -> infrastructure/data protection -> incident response
- Reliability
- high avalibility
- Performance Efficiency
- selection -> review -> monitoring -> trade-off
- load testing
- Cost Optimization
問題:
怎麼知道哪些 region 連線速度?測試方法?
EKS
CoreOS ingress
Traefik ingress
Ingress doc 控制
放置避開
Taint -> node
Tolerance -> pod
區塊鍊
Cloudtrail 檢查 compliance