[ad_1]
Right now, extra organizations are embracing microservices and dynamic infrastructure deployments in cloud environments. In these environments, situations and providers could be created and decommissioned as wanted, which implies protecting monitor of updates to such parts in a fast-changing setting is a problem for SecOps groups. This new actuality requires options which are as dynamic because the environments they should automate.
Coping with Altering IP Addresses
Right here’s an instance: a safety coverage configured on the Cisco Safe Firewall permits visitors from one service to a different based mostly on their IP addresses. It’s efficient so long as the IP handle doesn’t change. If the vacation spot node goes down or turns into inaccessible, one other node will exchange it, making the coverage ineffective. The coverage doesn’t dynamically change on the Firewall — it wants an administrator to log into the machine and manually replace it except the Cisco Safe Firewall Administration Middle (FMC) receives dynamic updates to switch the coverage guidelines based mostly on the attributes of the node.
. 
Community Automation with Consul-Terraform-Sync
HashiCorp Consul is a service mesh answer offering service discovery, configuration, and segmentation performance throughout a number of environments. Its service discovery characteristic permits Consul brokers to register providers to a central registry referred to as the Consul service catalog.
The Consul-Terraform-Sync service makes use of the Consul catalog as an information supply that incorporates networking details about providers and watches Consul state modifications on the software layer (based mostly on service well being modifications, new situations deployed, and so on.) and forwards the info to a CTS-compatible Terraform module that’s routinely triggered.
Terraform is used because the underlying automation device and it leverages the Terraform supplier ecosystem to drive related modifications to the community infrastructure. Utilizing the dynamic objects module, for instance, Consul-Terraform-Sync is ready to dynamically replace values of objects in Cisco Safe Firewall Administration Middle (FMC) which are utilized as entry guidelines to the firewall.
When the Consul-Terraform-Sync answer is used together with the dynamic object, the FMC is up to date with the IP handle mappings obtained by the dynamic objects Terraform module. This in flip updates the entry guidelines on the FMC containing that object, which ensures that the best entry is at all times offered to the best providers. This diagram illustrates the method:
To see how one can arrange Consul-Terraform-Sync, learn HashiCorp’s Community Infrastructure Automation with Consul-Terraform-Sync tutorial on HashiCorp Be taught.
Cisco and Consul-Terraform-Sync: Higher Collectively
The partnership between Cisco and HashiCorp gives an agile answer for monitoring dynamic modifications in a cloud setting. Learn the dynamic objects Terraform module documentation for extra detailed utilization and workflow info on integrating Cisco Safe Firewall and Consul-Terraform-Sync.
Associated assets:
YouTube Video: Community Safety Automation utilizing Cisco Safe Firewall and HashiCorp’s Consul
Cisco Safe FMC Terraform Supplier
We’d love to listen to what you assume. Ask a Query, Remark Beneath, and Keep Linked with Cisco Safe on social!
Cisco Safe Social Channels
Share:
[ad_2]
