Using Network Policy to Build Data Sandboxes at Bloomberg

cncf.io

2 pointschaimhaas3 comments

Here's a look at how Bloomberg uses Cilium to enforce data security through its BQuant Enterprise solution's data sandboxes.

What's the difference between a data sandbox and a namespace ?

Great question! As mentioned in our talk (https://youtu.be/8fiYVyISyz4), we use Cilium to restrict network traffic out of certain workloads running on the cluster. These are L7 network policies. We call this a "data sandbox" because we are restricting the flow from these workloads.

Reply on news.ycombinator.com