VMware buys Mesh7 in cloud security push


Danny Bradbury

19 Mar, 2021

VMware is expanding its security capabilities with the acquisition of cloud-native security company Mesh7.

The acquisition, the terms of which have not yet been disclosed, will better enable VMware to monitor cloud application traffic between virtual machines, the company said. 

Many products, such as intrusion prevention systems and firewalls, secure traffic travelling across a network, but increasingly, companies are using virtual machines or containers and sending requests between them using application programming interfaces (APIs).

Organisations need visibility into those APIs to see how the software that uses them is behaving. Mesh7 offers a product that monitors those APIs and calls, called the API Service Mesh, which includes functions including an API firewall and API gateway.

The API Service Mesh can tell when Kubernetes applications are being accessed externally and can monitor API security within applications that are distributed across lots of locations and machines. This makes it ideal for DevSecOps, which is a version of the cloud-focused DevOps development discipline that automates development and deployment.

VMware, with its heritage in virtual machines, was interested in Mesh7’s cloud-native API monitoring capabilities. Another thing that made the company an attractive acquisition target was API Service Mesh’s reliance on Envoy, which is an open source proxy system built for cloud-native applications originally created at ride-sharing company Lyft.

Envoy enables cloud-native application traffic to run over its communications bus, making it easier for DevOps pros to see what large distributed applications are doing and identify any performance issues or other operational problems. VMware uses Envoy in its own Tanzu Service Mesh that automates networking and security in distributed applications.

«VMware is seeing increased demand for a fully integrated API + service mesh product with Envoy as the foundation. The exact same Envoy architecture used in the initial service mesh use case can also control how one application can talk to another application via APIs,» said Tom Gillis, SVP and GM of VMware’s security business unit, in a blog post announcing the acquisition.

API security is becoming an increasing problem for developers and operations teams alike as companies move increasingly to API calls. Akamai has said that 83% of web traffic consists of API calls, and 40% of web applications’ attack surface is API-based. Salt Security recently revealed that 90% of businesses experienced API security vulnerabilities in 2020.

VMware buys Mesh7 in cloud security push


Danny Bradbury

19 Mar, 2021

VMware is expanding its security capabilities with the acquisition of cloud-native security company Mesh7.

The acquisition, the terms of which have not yet been disclosed, will better enable VMware to monitor cloud application traffic between virtual machines, the company said. 

Many products, such as intrusion prevention systems and firewalls, secure traffic travelling across a network, but increasingly, companies are using virtual machines or containers and sending requests between them using application programming interfaces (APIs).

Organisations need visibility into those APIs to see how the software that uses them is behaving. Mesh7 offers a product that monitors those APIs and calls, called the API Service Mesh, which includes functions including an API firewall and API gateway.

The API Service Mesh can tell when Kubernetes applications are being accessed externally and can monitor API security within applications that are distributed across lots of locations and machines. This makes it ideal for DevSecOps, which is a version of the cloud-focused DevOps development discipline that automates development and deployment.

VMware, with its heritage in virtual machines, was interested in Mesh7’s cloud-native API monitoring capabilities. Another thing that made the company an attractive acquisition target was API Service Mesh’s reliance on Envoy, which is an open source proxy system built for cloud-native applications originally created at ride-sharing company Lyft.

Envoy enables cloud-native application traffic to run over its communications bus, making it easier for DevOps pros to see what large distributed applications are doing and identify any performance issues or other operational problems. VMware uses Envoy in its own Tanzu Service Mesh that automates networking and security in distributed applications.

«VMware is seeing increased demand for a fully integrated API + service mesh product with Envoy as the foundation. The exact same Envoy architecture used in the initial service mesh use case can also control how one application can talk to another application via APIs,» said Tom Gillis, SVP and GM of VMware’s security business unit, in a blog post announcing the acquisition.

API security is becoming an increasing problem for developers and operations teams alike as companies move increasingly to API calls. Akamai has said that 83% of web traffic consists of API calls, and 40% of web applications’ attack surface is API-based. Salt Security recently revealed that 90% of businesses experienced API security vulnerabilities in 2020.

Cloud can help you understand data – but only if you plan first


Sandra Vogel

18 Mar, 2021

Organisations might be drawn to cloud by the lure of gaining new information and insights from the data they hold. Perhaps they will learn how to retain customers more successfully, or get a better understanding of profit centres – or cost centres. The twin powers of artificial intelligence and machine learning (AI and ML), deployed in the cloud can work wonders. But they need their ‘food’, the raw data they work with, to be in tip top condition, and for many organisations preparing that food requires time, effort, and attention to detail. 

Data strategies and clear priorities 

There is no doubt that AI and ML can provide information that organisations can’t come by in any other way. Data-crunching can, if done well, help organisations boost productivity and profits. But optimal success doesn’t come overnight. As Yann Lepant, MD for Accenture Technology in the UK tells Cloud Pro: “It’s easy to get tempted by the extensive set of cloud based new data and AI technologies as it’s an exciting new playground to venture on. However, it’s also a place where it’s easy to consume wastefully and get lost in delivery.”

A key factor in avoiding the pitfalls is to have clear priorities and a solid data strategy. Lepant tells Cloud Pro that having these will mean “each initiative is done with purpose and outcome, contributing to a journey of maturation through the cloud”.

Ingrid Verschuren, head of data strategy at Dow Jones, whose global news database Factiva grows by a million articles every day, from approximately 33,000 sources, tells Cloud Pro: “It doesn’t matter how good the technology is if the data feeding it is poor quality. The first and most important step to get the most out of your data is to ensure you are using the right data – and that it is structured in a way that will answer the questions you want to ask.”  

So what do clear priorities look like? Paul Clough, professor of search and analytics at the University of Sheffield tells Cloud Pro: “Identifying the use cases is critical and needs to be based on issues and problems identified in the business by business stakeholders, rather than by data scientists or the IT department.” This approach keeps the priorities very practically focused, he says. 

Cleaning and refining

Another pair of related tasks that may need to be undertaken before AI and ML can work their magic are cleaning up old data and refining what new data is collected.

Part of the cleaning task will involve bringing data out of silos. This can be tricky, but worth the effort and organisations undertaking the task can take some comfort from the fact that they’re not alone. Often, data silos are a result of historical practice and how things have grown organically over time, and it takes a concerted effort to undo in a relatively short time what’s built up over a much longer period. But as Lepant points out, there are really no short-cuts. “From getting a 360 degree view of the customer to end-to-end supply chain management, via fraud prevention and intelligent forecasting, the list of business outcomes enabled by the removal of data silos is endless,” he says.

Cleaning data is another task that can take time, but the effort is definitely worth it in the longer term. Verschuren provides some useful advice to help keep the cleaning task focussed, telling Cloud Pro: “Before you start cleaning your data, you need to determine how that data will be used and what insights you need to generate. Ask yourself, what does perfect look like? From there, you need to define the data fields that will be part of your data set, and the input for each of those fields.” Effectively, work backwards from the outcomes you want to get, and determine what data you need to get them. 

And finally, along come analytics and insights

With clean data, a clear data strategy in place, and perhaps some new data collection streams in place too, an organisation is finally in a position to start using AI and ML to gain those valuable insights it craves.

But that’s not quite the end of the story. To continue to gain insights over time, data should take its place, unsiloed, front and centre. Or, as Lepant tells Cloud Pro when sharing key advice, organisations should “implement a programme to update the ways of working, culture and data literacy to help the business become more data driven and self-served”.

Cloud can help you understand data – but only if you plan first


Sandra Vogel

18 Mar, 2021

Organisations might be drawn to cloud by the lure of gaining new information and insights from the data they hold. Perhaps they will learn how to retain customers more successfully, or get a better understanding of profit centres – or cost centres. The twin powers of artificial intelligence and machine learning (AI and ML), deployed in the cloud can work wonders. But they need their ‘food’, the raw data they work with, to be in tip top condition, and for many organisations preparing that food requires time, effort, and attention to detail. 

Data strategies and clear priorities 

There is no doubt that AI and ML can provide information that organisations can’t come by in any other way. Data-crunching can, if done well, help organisations boost productivity and profits. But optimal success doesn’t come overnight. As Yann Lepant, MD for Accenture Technology in the UK tells Cloud Pro: “It’s easy to get tempted by the extensive set of cloud based new data and AI technologies as it’s an exciting new playground to venture on. However, it’s also a place where it’s easy to consume wastefully and get lost in delivery.”

A key factor in avoiding the pitfalls is to have clear priorities and a solid data strategy. Lepant tells Cloud Pro that having these will mean “each initiative is done with purpose and outcome, contributing to a journey of maturation through the cloud”.

Ingrid Verschuren, head of data strategy at Dow Jones, whose global news database Factiva grows by a million articles every day, from approximately 33,000 sources, tells Cloud Pro: “It doesn’t matter how good the technology is if the data feeding it is poor quality. The first and most important step to get the most out of your data is to ensure you are using the right data – and that it is structured in a way that will answer the questions you want to ask.”  

So what do clear priorities look like? Paul Clough, professor of search and analytics at the University of Sheffield tells Cloud Pro: “Identifying the use cases is critical and needs to be based on issues and problems identified in the business by business stakeholders, rather than by data scientists or the IT department.” This approach keeps the priorities very practically focused, he says. 

Cleaning and refining

Another pair of related tasks that may need to be undertaken before AI and ML can work their magic are cleaning up old data and refining what new data is collected.

Part of the cleaning task will involve bringing data out of silos. This can be tricky, but worth the effort and organisations undertaking the task can take some comfort from the fact that they’re not alone. Often, data silos are a result of historical practice and how things have grown organically over time, and it takes a concerted effort to undo in a relatively short time what’s built up over a much longer period. But as Lepant points out, there are really no short-cuts. “From getting a 360 degree view of the customer to end-to-end supply chain management, via fraud prevention and intelligent forecasting, the list of business outcomes enabled by the removal of data silos is endless,” he says.

Cleaning data is another task that can take time, but the effort is definitely worth it in the longer term. Verschuren provides some useful advice to help keep the cleaning task focussed, telling Cloud Pro: “Before you start cleaning your data, you need to determine how that data will be used and what insights you need to generate. Ask yourself, what does perfect look like? From there, you need to define the data fields that will be part of your data set, and the input for each of those fields.” Effectively, work backwards from the outcomes you want to get, and determine what data you need to get them. 

And finally, along come analytics and insights

With clean data, a clear data strategy in place, and perhaps some new data collection streams in place too, an organisation is finally in a position to start using AI and ML to gain those valuable insights it craves.

But that’s not quite the end of the story. To continue to gain insights over time, data should take its place, unsiloed, front and centre. Or, as Lepant tells Cloud Pro when sharing key advice, organisations should “implement a programme to update the ways of working, culture and data literacy to help the business become more data driven and self-served”.

Hancock reveals digital future of NHS


Zach Marzouk

18 Mar, 2021

Health secretary Matt Hancock has outlined his vision for the digital future of the NHS that operates across a «consistent data platform».

Speaking at the Digital Health Rewired virtual festival, Hancock announced he wants to explore whether a data platform can be created that separates the data layer from the application layer.

This would mean «providers can offer the application software, but the data will be stored separately and securely in the cloud and then we have a consistent data platform across the NHS».

He said it should be made easier to write applications or create services that interact with data from different NHS organisations.

Hancock also said that Shared Care Records will be put in place by September this year, where every local system will have at least a basic version implemented.

“This will mean patients only need to give their details once, and they’ll be captured in a local record that can be safely seen by those who are caring for them,” he said.

There was also an emphasis on the need to “connect the system so data flows appropriately and freely, and we get the intrinsic benefits that high quality data and interoperability can provide.”

He admitted that bringing together the data that usually would have only existed in silos was fundamental to the NHS’s COVID response. He also recognised the need to fill gaps in interoperability where they exist, “ especially the link to social care and responsibilities of the NHS.”

He said that in many ways every day of the last year has “been a session of digital transformation because of this shared experience of fighting the virus, and the vital role technology has played in response.”

The secretary did admit that half of the clinicians questioned in a BMA survey said they had been hampered by issues like internet speed and infrastructure when trying to access online services, and he underlined the need to “get the infrastructure in place.”

It was also revealed that thirty more NHS trusts will be joining the Digital Aspirant programme, which will help boost their digital infrastructure through funding.

“Seven trusts will get up to £6 million over the next 3 years, and the rest will get seed funding to start creating their plans,” he outlined.

Earlier this week it emerged that the digital transformation of the NHS needed “further work” and that the technological innovations implemented during the pandemic need to be improved before being “locked-in.” 

In November last year, the health department was blasted for its track record of failed NHS digital projects, with a parliamentary committee warning that there was a need for it to “move on” from its decades-long legacy of “failed attempts” at digital transformation.

Hancock reveals digital future of NHS


Zach Marzouk

18 Mar, 2021

Health secretary Matt Hancock has outlined his vision for the digital future of the NHS that operates across a «consistent data platform».

Speaking at the Digital Health Rewired virtual festival, Hancock announced he wants to explore whether a data platform can be created that separates the data layer from the application layer.

This would mean «providers can offer the application software, but the data will be stored separately and securely in the cloud and then we have a consistent data platform across the NHS».

He said it should be made easier to write applications or create services that interact with data from different NHS organisations.

Hancock also said that Shared Care Records will be put in place by September this year, where every local system will have at least a basic version implemented.

“This will mean patients only need to give their details once, and they’ll be captured in a local record that can be safely seen by those who are caring for them,” he said.

There was also an emphasis on the need to “connect the system so data flows appropriately and freely, and we get the intrinsic benefits that high quality data and interoperability can provide.”

He admitted that bringing together the data that usually would have only existed in silos was fundamental to the NHS’s COVID response. He also recognised the need to fill gaps in interoperability where they exist, “ especially the link to social care and responsibilities of the NHS.”

He said that in many ways every day of the last year has “been a session of digital transformation because of this shared experience of fighting the virus, and the vital role technology has played in response.”

The secretary did admit that half of the clinicians questioned in a BMA survey said they had been hampered by issues like internet speed and infrastructure when trying to access online services, and he underlined the need to “get the infrastructure in place.”

It was also revealed that thirty more NHS trusts will be joining the Digital Aspirant programme, which will help boost their digital infrastructure through funding.

“Seven trusts will get up to £6 million over the next 3 years, and the rest will get seed funding to start creating their plans,” he outlined.

Earlier this week it emerged that the digital transformation of the NHS needed “further work” and that the technological innovations implemented during the pandemic need to be improved before being “locked-in.” 

In November last year, the health department was blasted for its track record of failed NHS digital projects, with a parliamentary committee warning that there was a need for it to “move on” from its decades-long legacy of “failed attempts” at digital transformation.

Broadband providers welcome Ofcom’s new full-fibre rollout rules


Sabina Weston

18 Mar, 2021

Ofcom has unveiled new regulations for wholesale telecoms markets used to deliver broadband, mobile, and business connections in the UK, which aim to promote competition and investment in gigabit-capable networks.

This includes regulating the impact of Openreach, which holds the biggest share of the UK’s broadband market, by examining the level of current or prospective competition in a given area. The BT subsidiary will be prevented from offering geographic discounts on its full-fibre wholesale services.

However, Ofcom will also freeze the wholesale fees Openreach charges for providing data speeds of up to 40Mbps using technologies such as FTTC (copper links via fibre to the cabinet) or ADSL, which uses copper links only. The regulator has also decided not to place a pricing cap on Openreach’s fastest fibre services, allowing the company to better fund a faster rollout.

Ofcom chief executive Dame Melanie Dawes said that, despite the huge demand for network connectivity due to continuing lockdown restrictions, “millions of homes are still using the copper lines that were first laid over 100 years ago”.

Ofcom is “setting the right conditions for companies to step up and invest in the country’s full-fibre future,” said Dawes, adding that “now it’s time to ramp up the rollout of better broadband across the UK”.

The new regulations will go into effect starting next month and remain in effect until at least March 2026.

Openreach CEO Clive Selley said that Ofcom’s new regulations will allow the provider “to ramp up to 3 million premises per year providing vital next-generation connectivity for homes and business right across the UK”.

The company has by now managed to extend the FTTP rollout to “almost 4.5 million premises”.

Virgin Media CEO Lutz Schüler welcomed Ofcom’s announcement, describing it as a “resounding sign of support and longer-term clarity from Ofcom for those rolling up their sleeves to build the nation’s next-generation digital infrastructure”.

Last month, Virgin Media announced plans to create more than 400 new graduate, intern, and apprenticeship roles over the course of 2021 to assist the company in building and maintaining its gigabit infrastructure, as well as continuing to expand its network to connect new homes and businesses as part of its ‘Project Lightning’ programme.

“Ofcom’s focus is in the right place, and we urge the regulator to maintain this trajectory so that more of the country can benefit from competing gigabit networks that deliver long-lasting economic, societal and environmental benefits,” he added.

CCS Insight’s consumer and connectivity director Kester Mann described the ruling as “a huge boost for the deployment of full-fibre broadband that will benefit millions of UK homes and businesses for years to come”.

“It comes at a time when the value of connectivity has never been more appreciated as the pandemic triggers major change in how people live and work. The UK’s over-reliance on using dated copper lines for 21st-century connectivity has held back its aspirations to become a world-leading digital economy. Today’s news sets fresh conditions to help accelerate full-fibre broadband deployment to help it move out of the slow lane.”

Mann added that “the news caps a great week for BT following a successful outcome in the 5G spectrum auction”.

“Rolling out fibre infrastructure is a costly and time-consuming venture with a pay-back measured in decades. CEO Phillip Jansen recently declared that BT is «ready to build like fury» and while it would have preferred a longer period free from regulated pricing, the announcement still brings much-needed certainty to make a return on investment. The news may not be so appreciated among service providers that rely on Openreach and other infrastructure. But this was always a delicate decision for the regulator which had to tread a fine line between encouraging long-term investment and maintaining fair competition. It may have got it about right.”

DCMS secretary Oliver Dowden said that he welcomes Ofcom’s new regulations, adding that they “strike the right balance between encouraging commercial investment and protecting consumers”.

He also announced that the government will tomorrow publish its “plan to drive the rapid rollout of gigabit broadband across the whole of the UK, including the first places to benefit from our £5bn investment in hard to reach areas”.

Broadband providers welcome Ofcom’s new full-fibre rollout rules


Sabina Weston

18 Mar, 2021

Ofcom has unveiled new regulations for wholesale telecoms markets used to deliver broadband, mobile, and business connections in the UK, which aim to promote competition and investment in gigabit-capable networks.

This includes regulating the impact of Openreach, which holds the biggest share of the UK’s broadband market, by examining the level of current or prospective competition in a given area. The BT subsidiary will be prevented from offering geographic discounts on its full-fibre wholesale services.

However, Ofcom will also freeze the wholesale fees Openreach charges for providing data speeds of up to 40Mbps using technologies such as FTTC (copper links via fibre to the cabinet) or ADSL, which uses copper links only. The regulator has also decided not to place a pricing cap on Openreach’s fastest fibre services, allowing the company to better fund a faster rollout.

Ofcom chief executive Dame Melanie Dawes said that, despite the huge demand for network connectivity due to continuing lockdown restrictions, “millions of homes are still using the copper lines that were first laid over 100 years ago”.

Ofcom is “setting the right conditions for companies to step up and invest in the country’s full-fibre future,” said Dawes, adding that “now it’s time to ramp up the rollout of better broadband across the UK”.

The new regulations will go into effect starting next month and remain in effect until at least March 2026.

Openreach CEO Clive Selley said that Ofcom’s new regulations will allow the provider “to ramp up to 3 million premises per year providing vital next-generation connectivity for homes and business right across the UK”.

The company has by now managed to extend the FTTP rollout to “almost 4.5 million premises”.

Virgin Media CEO Lutz Schüler welcomed Ofcom’s announcement, describing it as a “resounding sign of support and longer-term clarity from Ofcom for those rolling up their sleeves to build the nation’s next-generation digital infrastructure”.

Last month, Virgin Media announced plans to create more than 400 new graduate, intern, and apprenticeship roles over the course of 2021 to assist the company in building and maintaining its gigabit infrastructure, as well as continuing to expand its network to connect new homes and businesses as part of its ‘Project Lightning’ programme.

“Ofcom’s focus is in the right place, and we urge the regulator to maintain this trajectory so that more of the country can benefit from competing gigabit networks that deliver long-lasting economic, societal and environmental benefits,” he added.

CCS Insight’s consumer and connectivity director Kester Mann described the ruling as “a huge boost for the deployment of full-fibre broadband that will benefit millions of UK homes and businesses for years to come”.

“It comes at a time when the value of connectivity has never been more appreciated as the pandemic triggers major change in how people live and work. The UK’s over-reliance on using dated copper lines for 21st-century connectivity has held back its aspirations to become a world-leading digital economy. Today’s news sets fresh conditions to help accelerate full-fibre broadband deployment to help it move out of the slow lane.”

Mann added that “the news caps a great week for BT following a successful outcome in the 5G spectrum auction”.

“Rolling out fibre infrastructure is a costly and time-consuming venture with a pay-back measured in decades. CEO Phillip Jansen recently declared that BT is «ready to build like fury» and while it would have preferred a longer period free from regulated pricing, the announcement still brings much-needed certainty to make a return on investment. The news may not be so appreciated among service providers that rely on Openreach and other infrastructure. But this was always a delicate decision for the regulator which had to tread a fine line between encouraging long-term investment and maintaining fair competition. It may have got it about right.”

DCMS secretary Oliver Dowden said that he welcomes Ofcom’s new regulations, adding that they “strike the right balance between encouraging commercial investment and protecting consumers”.

He also announced that the government will tomorrow publish its “plan to drive the rapid rollout of gigabit broadband across the whole of the UK, including the first places to benefit from our £5bn investment in hard to reach areas”.

OVH data centre fire shows backups should be standard, founder says


Bobby Hellard

18 Mar, 2021

The founder of OVH, which owns the French data centre that perished in a fire last week, has said the incident highlights a need for the data centre industry to offer backups as a standard for all customers.

Octave Klaba said his company will start providing secure backups for its data centre customers by default rather than as an additional paid service.

Klaba said that the fire at OVH’s data centre site in Strasbourg earlier this month, that destroyed one building and partially damaged another, should serve as an industry-wide wakeup call.

«This incident will change our way of delivering these services, but, also, I believe it will change the industry, which will increase the securities of backups by default, without any payment,» Kalaba said in a video. «This will be our strategy, our answer to this incident.»

Several OVH customers affected by the fire were unable to bring their applications back online due to a lack of backups. Klaba suggested there was some confusion over service terms and that some of its customers hadn’t fully understood what they had brought from OVH. The French cloud firm did offer 500GB of free backup storage with every dedicated server and customers could pay to ramp that up to 10TB.

«It seems that globally, the customers… understand what we are delivering, but some customers, they don’t understand what exactly they bought,» Klaba said in the video.

The CEO added that he would post another video on Friday 19 March with an update on the ongoing investigation into the cause of the fire. Thermal images used by firefighters suggested the building’s uninterruptible power supply (UPS) system was a possible cause. Klaba said that investigators had taken the UPS units and all its batteries and fuses – along with video footage – for analysis.

OVH data centre fire shows backups should be standard, founder says


Bobby Hellard

18 Mar, 2021

The founder of OVH, which owns the French data centre that perished in a fire last week, has said the incident highlights a need for the data centre industry to offer backups as a standard for all customers.

Octave Klaba said his company will start providing secure backups for its data centre customers by default rather than as an additional paid service.

Klaba said that the fire at OVH’s data centre site in Strasbourg earlier this month, that destroyed one building and partially damaged another, should serve as an industry-wide wakeup call.

«This incident will change our way of delivering these services, but, also, I believe it will change the industry, which will increase the securities of backups by default, without any payment,» Kalaba said in a video. «This will be our strategy, our answer to this incident.»

Several OVH customers affected by the fire were unable to bring their applications back online due to a lack of backups. Klaba suggested there was some confusion over service terms and that some of its customers hadn’t fully understood what they had brought from OVH. The French cloud firm did offer 500GB of free backup storage with every dedicated server and customers could pay to ramp that up to 10TB.

«It seems that globally, the customers… understand what we are delivering, but some customers, they don’t understand what exactly they bought,» Klaba said in the video.

The CEO added that he would post another video on Friday 19 March with an update on the ongoing investigation into the cause of the fire. Thermal images used by firefighters suggested the building’s uninterruptible power supply (UPS) system was a possible cause. Klaba said that investigators had taken the UPS units and all its batteries and fuses – along with video footage – for analysis.