Appsecco is a security-focused company out of London specializing in Application and Data Security for cloud-based companies. At almost 4-years-old, Appsecco has clients ranging from major global financial institutions and professional services firms to leading international retailers and retail brands and from large scale, heavy engineering companies to cutting edge technology companies across the globe. Why Appsecco Chose NATS Appsecco is working on security workflow automation to deliver improved and effective application security services to their clients. Read more...

Once again, Dale Bingham of Cingulara adds to his series on using NATS for a service mesh type of implementations in your applications by contributing his thoughts on load balancing on APIs and services when you have more than one service answering requests or responding to events. Read the full article Using NATS to Implement Service Mesh Functionality Part 4: Load Balancing and Routing Control . More About the Author Dale Bingham is the CTO of Cingulara. Read more...

In this, the 3rd part of Dale Bingham’s series on “Using NATS to Implement Service Mesh Functionality”, Dale speaks about how to have similar service mesh benefits, usage and design when using the NATS messaging system as your communication backbone. As with anything dealing with software engineering, there are pros and cons to deciding on languages, infrastructure, and design models. It is always great to have alternatives and new ways of looking to solve problems. Read more...

Our team is always working to bring you features to improve your NATS experience. Take a look at the following features in the latest releases of NATS Server and a sneak peek into JetStream! Response Only Permissions NATS Server v2.0.4 For services, the authorization for responding to requests usually included wildcards for _INBOX.> and possibly $GR.> with a supercluster for sending responses. What we really wanted was the ability to allow a service responder to only respond to the reply subject it was sent. Read more...

Dale Bingham of Cingulara is back with part 2 of his article about using NATS to implement Service Mesh functionality. This time, Dale takes on Security. In this post, Dale dives into the introduction of NKeys, JWTs, and the Operator — Account — Users security model. Comparing and contrasting the NATS model with the security model of mainstream service meshes. Read the full article Using NATS To Implement Service Mesh, Part 2: Security . Read more...

Can you use the power and simplicity of NATS to create a service mesh without all the heavy overhead and complexity of current service meshes? Dale Bingham thinks so. Read about how he uses his experience and some of the new features of NATS 2.0 to do just that in part 1 of this 4 part series. Using NATS to Implement Service Mesh Functionality, Part 1: Service Discovery More About the Author Dale Bingham is the CTO of Cingulara. Read more...

Often times, blogs or articles with titles like this one will contain bad news. That isn’t the case here! We’re sharing the results of our security review, and how that bolsters our new security features in the upcoming NATS server 2.0 release, expected in Q2 2019. Security Audit In November of last year, the CNCF sponsored Cure53 to perform a security audit of the NATS server and some of the more popular NATS clients. Read more...

2018 was a banner year for the NATS.io ecosystem! NATS was accepted as a project into the CNCF organization NATS is being used in mission-critical production deployments around the globe and continues to grow And at almost 8 years old, 2018 saw the most features ever added to the project since its inception At the start of 2018, the team set a course to provide additional security options, secure multi-tenancy, and larger network options for NATS to name just a few. Read more...

I think it was during early 2015 when I first heard the term message broker. I was pursuing my masters degree on P2P networking and had to simulate a steady throughput of incoming messages. I wasn’t a geek then - so the workaround was to do an infinite Thread.sleep() loop. Don’t groan - I was just 21. RabbitMQ was my first tryst with the messaging systems lot. I was new to relationships and didn’t have much to compare with, so RabbitMQ seemed just fine. Read more...

REST APIs are nice. Simple. Stateless. Scalable. But to keep client data updated in real time, things get more complicated. Streaming events is easy, but you start having to deal with questions like: Which resources do I need events for? How do I manage sending each client only the events they need? Can I prevent subscription to some events for unauthorized clients? Who keeps state of these event subscriptions? How do I handle lost connections? Read more...