BestHub
Sign in
Tagged articles
14 articles
Page 1 of 1
MaGe Linux Operations
MaGe Linux Operations
Jun 1, 2026 · Information Security

Docker Production Hardening: From Image Scanning to Runtime Protection

This guide walks through a comprehensive Docker security hardening process for production, covering image vulnerability scanning, minimal base images, signed images, secure Dockerfile practices, daemon hardening, runtime privilege reduction, network isolation, secret management, monitoring, and a checklist to ensure continuous protection.

Dockercontainer securityimage scanning
0 likes · 25 min read
Docker Production Hardening: From Image Scanning to Runtime Protection
Ray's Galactic Tech
Ray's Galactic Tech
Dec 9, 2025 · Information Security

Master Elasticsearch Security: Complete Network, Auth, TLS & Hardening Guide

This comprehensive guide walks you through securing Elasticsearch by isolating the network, enabling authentication and role‑based access, encrypting traffic with TLS, upgrading legacy versions, configuring audit logging, setting up reverse‑proxy protection, and applying enterprise‑grade best practices to prevent data leaks.

AuthenticationElasticsearchHardening
0 likes · 10 min read
Master Elasticsearch Security: Complete Network, Auth, TLS & Hardening Guide
Huolala Tech
Huolala Tech
Sep 19, 2025 · Big Data

How We Migrated 40PB of Offline Big Data Across Clouds with Zero Downtime

Over a year after completing a five‑month, cross‑cloud migration of Huolala’s 40 PB offline big‑data platform—spanning storage, compute, services, and infrastructure—the team details the architecture, verification methods, high‑throughput migration tools, network isolation strategies, and lessons learned to guide similar large‑scale data migrations.

AutomationData Engineeringcloud migration
0 likes · 16 min read
How We Migrated 40PB of Offline Big Data Across Clouds with Zero Downtime
DaTaobao Tech
DaTaobao Tech
Jul 5, 2023 · Cloud Native

Cloud‑Native Multi‑Tenant Architecture and Network Isolation in Taobao Open Platform

The Taobao Open Platform adopts a cloud‑native, multi‑tenant architecture that abstracts infrastructure, isolates tenants via independent or shared switch‑plus‑security‑group schemes with dual ENI pod networking, and leverages Kubernetes auto‑scaling to simplify onboarding, cut operational costs, and enable future low‑code and FaaS extensions.

Auto ScalingKubernetesMulti‑tenant
0 likes · 14 min read
Cloud‑Native Multi‑Tenant Architecture and Network Isolation in Taobao Open Platform
IT Architects Alliance
IT Architects Alliance
May 9, 2022 · Cloud Native

Mastering Kubernetes: Core Concepts from Container Ops to Network Isolation

This article provides a comprehensive overview of Kubernetes, covering container operation fundamentals, multi‑site deployment models, service discovery mechanisms, shared pod resources, common CNI plugins, layered load‑balancing approaches, isolation dimensions, and essential network model principles for large‑scale clusters.

CNICloud NativeKubernetes
0 likes · 13 min read
Mastering Kubernetes: Core Concepts from Container Ops to Network Isolation
Open Source Linux
Open Source Linux
Jan 17, 2022 · Information Security

Mastering Incident Response: A Step‑by‑Step Guide for Security Professionals

This comprehensive guide walks security engineers through every phase of an incident response—from initial information gathering, containment, and vulnerability scanning to detailed log, process, and account analysis, culminating in recovery steps and post‑incident hardening recommendations.

ForensicsSecurity OperationsSystem Hardening
0 likes · 28 min read
Mastering Incident Response: A Step‑by‑Step Guide for Security Professionals
MaGe Linux Operations
MaGe Linux Operations
Jan 15, 2022 · Cloud Native

Master Single‑Host Container Networking with Linux Namespaces, veth and Bridges

This tutorial walks through building isolated, virtualized networking for containers on a single Linux host using network namespaces, virtual Ethernet pairs, Linux bridges, IP routing, NAT, and iptables rules, enabling inter‑container communication, host access, and external connectivity without writing any custom code.

Linux NamespacesVethbridge
0 likes · 31 min read
Master Single‑Host Container Networking with Linux Namespaces, veth and Bridges
Open Source Linux
Open Source Linux
Apr 15, 2021 · Cloud Native

Understanding Docker Container Networking: Modes, Overlay, and Beyond

This article explains Docker's container networking fundamentals, covering single‑host communication modes (host, bridge, none, container‑shared, custom), their advantages and drawbacks, and then delves into cross‑host solutions such as overlay, Weave, and Calico, comparing their architectures and performance implications.

Bridge ModeCalicoDocker
0 likes · 21 min read
Understanding Docker Container Networking: Modes, Overlay, and Beyond
Cloud Native Technology Community
Cloud Native Technology Community
Jan 5, 2021 · Cloud Native

Building Multi‑Tenant VPC Container Networks with Kube‑OVN on Edge Computing

This article explains why multi‑tenant VPC networks are essential for modern cloud‑native environments, outlines typical use cases such as public‑cloud container services, virtual‑machine workloads and finance, discusses the challenges of implementing tenant isolation in Kubernetes, and describes how the Kube‑OVN‑based solution was enhanced and deployed on edge‑computing platforms to provide strong VPC isolation, flexible IP management, and integrated load‑balancing services.

Cloud NativeKubernetesKube‑OVN
0 likes · 14 min read
Building Multi‑Tenant VPC Container Networks with Kube‑OVN on Edge Computing
Tencent Cloud Developer
Tencent Cloud Developer
Feb 17, 2017 · Operations

Implementing Network Isolation with Elastic Network Interfaces on QCloud

The article explains how to achieve network isolation for a QCloud SQL cluster by creating and binding additional elastic NICs via API—assigning separate production, heartbeat, and storage interfaces to each node—while noting that true physical isolation is impossible and detailing the required configuration steps and encountered challenges.

Elastic Network InterfaceQCloudVPC
0 likes · 8 min read
Implementing Network Isolation with Elastic Network Interfaces on QCloud