{"id":41925,"date":"2021-03-19T16:45:13","date_gmt":"2021-03-19T16:45:13","guid":{"rendered":"http:\/\/icloud.pe\/blog\/?guid=e3389bb68ae1ac94dfdb074fbd3311c3"},"modified":"2021-03-19T16:45:13","modified_gmt":"2021-03-19T16:45:13","slug":"vmware-buys-mesh7-in-cloud-security-push","status":"publish","type":"post","link":"https:\/\/icloud.pe\/blog\/vmware-buys-mesh7-in-cloud-security-push\/","title":{"rendered":"VMware buys Mesh7 in cloud security push"},"content":{"rendered":"<p><span class=\"field field-name-field-author field-type-node-reference field-label-hidden\"><br \/>\n      <span class=\"field-item even\"><a href=\"https:\/\/www.cloudpro.co.uk\/authors\/danny-bradbury\">Danny Bradbury<\/a><\/span><br \/>\n  <\/span><\/p>\n<div class=\"field field-name-field-published-date field-type-datetime field-label-hidden\">\n<div class=\"field-items\">\n<div class=\"field-item even\"><span class=\"date-display-single\">19 Mar, 2021<\/span><\/div>\n<\/p><\/div>\n<\/div>\n<p class=\"short-teaser\">\n<a href=\"https:\/\/www.cloudpro.co.uk\/\" title=\"\" class=\"combined-link\"><\/a><\/p>\n<div class=\"field field-name-body\">\n<p>VMware is expanding its security capabilities with the acquisition of\u00a0<a href=\"https:\/\/www.itpro.com\/cloud\/357749\/the-role-of-cloud-native-at-the-edge\"  data-cke-saved-href=\"https:\/\/www.itpro.com\/cloud\/357749\/the-role-of-cloud-native-at-the-edge\">cloud-native<\/a> security company Mesh7.<\/p>\n<p>The acquisition, the terms of which have not yet been disclosed, will better enable VMware\u00a0to monitor cloud application traffic between <a href=\"https:\/\/www.itpro.co.uk\/virtual-machines\"  data-cke-saved-href=\"https:\/\/www.itpro.co.uk\/virtual-machines\">virtual machines<\/a>, the company said.\u00a0<\/p>\n<p>Many products, such as intrusion prevention systems and <a href=\"https:\/\/www.itpro.co.uk\/firewalls\"  data-cke-saved-href=\"https:\/\/www.itpro.co.uk\/firewalls\">firewalls<\/a>, secure traffic travelling across a network, but increasingly, companies are using virtual machines or <a href=\"https:\/\/www.itpro.co.uk\/development\/containers\/356391\/the-rise-of-containers\"  data-cke-saved-href=\"https:\/\/www.itpro.co.uk\/development\/containers\/356391\/the-rise-of-containers\">containers<\/a> and sending requests between them using application programming interfaces (APIs).<\/p>\n<p>Organisations need visibility into those APIs to see how the software that uses them is behaving. Mesh7 offers a product that monitors those APIs and calls, called the API Service Mesh, which includes functions including an API firewall and API gateway.<\/p>\n<p>The API Service Mesh can tell when <a href=\"https:\/\/www.itpro.co.uk\/enterprise-applications\/31654\/what-is-kubernetes\"  data-cke-saved-href=\"https:\/\/www.itpro.co.uk\/enterprise-applications\/31654\/what-is-kubernetes\">Kubernetes<\/a> applications are being accessed externally and can monitor API security within applications that are distributed across lots of locations and machines. This makes it ideal for\u00a0<a href=\"https:\/\/www.itpro.com\/development\/devops\/354215\/what-is-devsecops-and-why-is-it-important\" data-cke-saved-href=\"https:\/\/www.itpro.com\/development\/devops\/354215\/what-is-devsecops-and-why-is-it-important\">DevSecOps<\/a>, which is a version of the cloud-focused DevOps development discipline that automates development and deployment.<\/p>\n<p>VMware, with its heritage in virtual machines, was interested in Mesh7&#8217;s cloud-native API monitoring capabilities. Another thing that made the company an attractive acquisition target was API Service Mesh&#8217;s reliance on Envoy, which is an open source proxy system built for cloud-native applications originally created at ride-sharing company Lyft.<\/p>\n<p>Envoy enables cloud-native application traffic to run over its communications bus, making it easier for DevOps pros to see what large distributed applications are doing and identify any performance issues or other operational problems. VMware uses Envoy in its own <a href=\"https:\/\/tanzu.vmware.com\/service-mesh\" data-cke-saved-href=\"https:\/\/tanzu.vmware.com\/service-mesh\">Tanzu Service Mesh<\/a>\u00a0that\u00a0automates networking and security in distributed applications.<\/p>\n<p>&#8220;VMware is seeing increased demand for a fully integrated API + service mesh product with Envoy as the foundation. The exact same Envoy architecture used in the initial service mesh use case can also control how one application can talk to another application via APIs,&#8221; said Tom Gillis, SVP and GM of VMware&#8217;s security business unit, in a\u00a0<a href=\"https:\/\/blogs.vmware.com\/networkvirtualization\/2021\/03\/vmware-announces-mesh7.html\/\" data-cke-saved-href=\"https:\/\/blogs.vmware.com\/networkvirtualization\/2021\/03\/vmware-announces-mesh7.html\/\">blog post<\/a> announcing the acquisition.<\/p>\n<p>API security is becoming an increasing problem for developers and operations teams alike as companies move increasingly to API calls.\u00a0<a href=\"https:\/\/www.akamai.com\/us\/en\/multimedia\/documents\/state-of-the-internet\/state-of-the-internet-security-retail-attacks-and-api-traffic-report-2019.pdf\" data-cke-saved-href=\"https:\/\/www.akamai.com\/us\/en\/multimedia\/documents\/state-of-the-internet\/state-of-the-internet-security-retail-attacks-and-api-traffic-report-2019.pdf\">Akamai has said<\/a> that 83% of web traffic consists of API calls, and 40% of web applications&#8217; attack surface is API-based. Salt Security recently\u00a0<a href=\"https:\/\/www.itpro.com\/development\/application-programming-interface-api\/358546\/nearly-every-company-surveyed-experienced\" data-cke-saved-href=\"https:\/\/www.itpro.com\/development\/application-programming-interface-api\/358546\/nearly-every-company-surveyed-experienced\">revealed<\/a> that 90% of businesses experienced API security vulnerabilities in 2020. <\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>      Danny Bradbury<\/p>\n<p>        19 Mar, 2021    <\/p>\n<p>      VMware is expanding its security capabilities with the acquisition of\u00a0cloud-native security company Mesh7.<br \/>\nThe acquisition, the terms of which have not yet been disclosed, will better enable V&#8230;<\/p>\n","protected":false},"author":636,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41925","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/41925","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/users\/636"}],"replies":[{"embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/comments?post=41925"}],"version-history":[{"count":1,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/41925\/revisions"}],"predecessor-version":[{"id":41926,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/posts\/41925\/revisions\/41926"}],"wp:attachment":[{"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/media?parent=41925"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/categories?post=41925"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/icloud.pe\/blog\/wp-json\/wp\/v2\/tags?post=41925"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}