addressalign-toparrow-leftarrow-rightbackbellblockcalendarcameraccwcheckchevron-downchevron-leftchevron-rightchevron-small-downchevron-small-leftchevron-small-rightchevron-small-upchevron-upcircle-with-checkcircle-with-crosscircle-with-pluscrossdots-three-verticaleditemptyheartexporteye-with-lineeyefacebookfolderfullheartglobegmailgooglegroupshelp-with-circleimageimagesinstagramlinklocation-pinm-swarmSearchmailmessagesminusmoremuplabelShape 3 + Rectangle 1ShapeoutlookpersonJoin Group on CardStartprice-ribbonShapeShapeShapeShapeImported LayersImported LayersImported Layersshieldstartickettrashtriangle-downtriangle-uptwitteruserwarningyahoo

SF: Cloud Foundry Application Security Groups with Mark Kropf

Potential Traffic Issue:  SF Giants game at 12:45 pm ending sometime after 3 pm 


Cloud Foundry Application Security Groups with Mark Kropf 

6:00-6:30pm Food and Networking 
6:30-8:00pm Talk and Q&A 
8:00-8:30pm Wind down

The Pivotal CF Runtime team is working on a feature that will enable Cloud Foundry operators to have granular control over what each application can communicate with in their network. Application Security Groups assign a set of firewall rules to every application on startup based on the organization and space they are started in. This allows an operator to prevent developer spaces from having access to production databases. Application Security Groups also assist an app  developer in knowing what constraints their application is running in to save them time troubleshooting connectivity problems.

In this talk I will describe the work we are doing to implement application security groups and where this fits in the larger scope of dea placement pools in our roadmap.

About the speaker:
Mark Kropf joined Pivotal after working for the past 6 years in the financial services industry for a leading ATM and physical security provider. Mark has been actively involved with Cloud Foundry since it’s early days at VMware. Currently, Mark is the Cloud Foundry Runtime Product Manager at Pivotal.

Join or login to comment.

  • Jon A S.

    I apologize if this has been asked before. Will there be a live stream?

    June 25, 2014

    • Tamao N.

      No but we are recording everything for future postings.

      June 25, 2014

  • RyanHammond

    Very interesting Mark. In our test installation of CF 1.1 we have pfsense as the SDN serving out IP's. Will this feature help with network/socket connections to external 'user-provided' services such as Mongodb and oracle for example?

    May 21, 2014

    • Mark K.

      This should allow you to control which spaces/users have access to services in different ips/subnets/etc

      May 22, 2014

    • Mark K.

      Here's the doc we first put in front of the community for this feature:­

      May 22, 2014

No one went

Our Sponsors

  • eBay

    eBay sponsors venues, and food.

  • Pivotal

    Pivotal has sponsored our venues, food, beverages, snacks, and video.

  • Twitter

    Twitter sponsors food and conducts hands-on sessions.

  • Uber

    Uber has provided venues, snacks and video

People in this
Meetup are also in:

Sign up

Meetup members, Log in

By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy