Using Network Policy to Build Data Sandboxes at Bloomberg (cncf.io)

3 comments

[ 2.0 ms ] story [ 15.6 ms ] thread

Here's a look at how Bloomberg uses Cilium to enforce data security through its BQuant Enterprise solution's data sandboxes.

redshiftza 2y ago ↗

What's the difference between a data sandbox and a namespace ?

azepecki 2y ago ↗

Great question! As mentioned in our talk (https://youtu.be/8fiYVyISyz4), we use Cilium to restrict network traffic out of certain workloads running on the cluster. These are L7 network policies. We call this a "data sandbox" because we are restricting the flow from these workloads.