From c95ea2f205b217c4c0c039a6fee49ede8af97255 Mon Sep 17 00:00:00 2001 From: Mitchell Hashimoto Date: Fri, 1 Jun 2018 09:24:48 -0700 Subject: [PATCH] website: remove sergmentation from sidebar we'll move east-west to a "use case" section, didnt' feel right in the reference docs. --- website/source/docs/connect/index.html.md | 22 ---------------------- website/source/layouts/docs.erb | 2 +- 2 files changed, 1 insertion(+), 23 deletions(-) diff --git a/website/source/docs/connect/index.html.md b/website/source/docs/connect/index.html.md index 3b2db17bb1..3b459688b2 100644 --- a/website/source/docs/connect/index.html.md +++ b/website/source/docs/connect/index.html.md @@ -64,25 +64,3 @@ APIs are all made to the local Consul agent over a loopback interface, and all local caching, background updating, and support blocking queries. As a result, most API calls operate on purely local in-memory data and can respond in microseconds. - -## Eliminating East-West Firewalls - -East-west firewalls are the typical tool for network security in a static world. -East-west is the transfer of data from server to server within a datacenter, -versus North-south traffic which describes end user to server communications. - -These firewalls wrap services with ingress/egress policies. This perimeter-based -approach is difficult to scale in a dynamic world with dozens or hundreds of -services or where machines may be frequently created or destroyed. Firewalls -create a sprawl of rules for each service instance that quickly becomes -overly difficult to maintain. - -Service security in a dynamic world is best solved through service-to-service -authentication and authorization. Instead of IP-based network security, -services can be deployed to low-trust networks and rely on service-identity -based security over in-transit data encryption. - -Connect enables service segmentation by securing service-to-service -communications through mutual TLS and transparent proxying on zero-trust -networks. This allows direct service communication without relying on firewalls -for east-west traffic security. diff --git a/website/source/layouts/docs.erb b/website/source/layouts/docs.erb index 2fc7320ff2..04cc16714b 100644 --- a/website/source/layouts/docs.erb +++ b/website/source/layouts/docs.erb @@ -249,7 +249,7 @@ > - Connect (Service Segmentation) + Connect