Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-46575: Meshery The Kubernetes and Cloud Native Manager - an extensible developer platform

A SQL injection vulnerability in Meshery before 0.6.179 allows a remote attacker to obtain sensitive information and execute arbitrary code via the order parameter.

CVE
#sql#vulnerability#web#mac#windows#linux#js#git#kubernetes#intel#docker#ssl

video

Confidently wrangle cloud native infrastructure

Support for your Cloud Native Infrastructure and Apps

Meshery seamlessly integrates with every CNCF project, your existing tools and Kubernetes clusters, allowing you to enhance use your preferred monitoring, CI/CD, and security solutions.

Meshery’s Kubernetes-native approach means you can easily incorporate Meshery into your existing workflow without additional setup or integration effort.

Access the Cloud Native Patterns for Kubernetes

Design and manage all of your cloud native infrastructure using the design configurator in Meshery or start from a template using the patterns from the catalog.

(excerpt: patterns in-action)

Service Mesh Patterns

×

Your browser does not support HTML video.

Operate with configuration best practices

Assess your configurations against deployment and operational best practices with Meshery’s configuration validator.

Manage data plane intelligence with WebAssembly filters

Dynamically load and manage your own WebAssembly filters in Envoy-based service meshes.

Retrieves and presents the contents of a designated filter through identification by name or ID

Refer to the documentation here

Context-Aware Policies For Applications

Leverage built-in relationships to enforce configuration best practices consistently from code to Kubernetes. Enhance development process by building custom rules in Open Policy Agent’s Rego query language.

Simplify the process of Infrastructure Managment with Meshery Extension

Streamlining Platform Engineering with GitOps and Meshery. Preview your deployment, view changes pull request-to-pull request and get infrastructure snapshots within your PRs by connecting MeshMap to your GitHub repositories.

  • See your deployment before you merge
  • Connect MeshMap to your GitHub repo and see changes pull request-to-pull request
  • Get snapshots of your infrastructure directly in your PRs

Manage the performance of your infrastructure and its workloads

Baseline and track your cloud native performance from release to release.

  • Use performance profiles to track the historical performance of your workloads.
  • Track your application performance from version to version.
  • Understand behavioral differences between cloud native network functions.
  • Compare performance across infrastructure deployments.

Platform Engineering with Meshery’s Extension Points

Meshery includes both REST APIs and GraphQL APIs, pluggable adapters via gRPCs, hot-loadable ReactJS and hot-loadable Golang binaries. The great number of extension points in Meshery make it ideal as the foundation of your internal deleloper platform.

Created By

Used By

**Add yourself as an **adopter****

and share your cloud native story with the community

Getting Started****with Meshery

01****Choose your Platform

Choose a platform and see how easy it is to start managing cloud native infrastructure with a single command.

Bash using Mac or Linux

Install on Kubernetes

Install on Docker

Brew User:

Install on Mac or Linux using Homebrew:

Docker User:****Get mesheryctl

Install mesheryctl with Bash, Brew, Scoop, or download directly.

Use mesheryctl

mesheryctl system context create docker --platform docker --set mesheryctl system start

Copy to clipboard

Use Docker Extension for Meshery

docker extension install meshery/docker-extension-meshery:stable-latest

Copy to clipboard

Windows User:

Using Scoop

$ scoop bucket add mesheryctl https://github.com/layer5io/scoop-bucket.git $ scoop install mesheryctl $ mesheryctl system start

Copy to clipboard

Using Binary

Not a Scoop user? Download and unzip the mesheryctl binary directly from the Meshery releases page. Add mesheryctl to your path for ease of use. Then, execute:

Using Helm

kubectl create ns meshery helm repo add meshery https://meshery.io/charts helm install meshery-operator meshery/meshery-operator -n meshery helm install meshery meshery/meshery -n meshery

Copy to clipboard

Don’t forget to grab a copy of mesheryctl. Install with Bash, Brew, or Scoop.

02****Manage your Cloud Native Infra

There is no step 2. Login and manage cloud native infrastructure!

Hear what other users have to say…

The Meshery Extension transforms Docker Desktop into a powerful load generation utility, conveniently enabling me to deploy and configure any service mesh with a click of the button and invoke and control load-based performance tests from my desktop.

The precision by which performance measurements are generated and analyzed is a pinnacle focus of Nighthawk. Mesh performance characterization should be distilled from a set of value measurements, and that is where MeshMark compliments to create the ultimate comprehensive efficiency calculation.

Meshery is the perfect tool for ensuring that your cloud native applications are optimally configured and performing well; it also gives you a fantastic visual insight into what can be a large amount of textual configuration.

While speed is one of Linkerd’s core competitive advantages, Linkerd provides much more than just an ultrafast data plane. We are pleased to support MeshMark’s establishment of a higher order set of functional considerations that incorporate value into the performance equation.

Performance measurement data rarely provides a clear and simple picture of how well our applications are performing from a business point of view, which are so often the key efficiency indicators that we really need.

Many cloud native adopters have been put off from using service mesh due to the extra resource consumption and complexity that it can involve. We welcome MeshMark as an objective measure of that overhead, to help drive efficiency and make it easier for users to compare service mesh options.

The fact that MeshMap automatically renders our Kubernetes configuration is a game-changer for our team.

It was an intuitive experience to visually place and configure various components saving the time of going through 10 different YAML files.

Are my resources utilized as best as possible? Why am I not getting the SLO met with 4 resources when I only needed 1 resource without the service mesh? How can I improve my 99.9% latencies or can I map my service policy to utilization? MeshMark will model and provide an index in answer to such questions.

With a goal to bring workload identity and attestation to all service meshes, HPE Security Engineering uses the Meshery Docker Extension to deploy their service mesh of choice and test the performance of our SPIFFE and SPIRE-based identity solution.

The Meshery Docker Extension offers an easy button to go from Docker Compose to Kubernetes to any service mesh.

MESHERY IS A CLOUD NATIVE COMPUTING FOUNDATION PROJECT

Created by and its open source community.

Project Mailing lists

Engage in the Meshery project. Join any of our mailing lists.

Related news

GHSA-9jjc-grg5-67gj: SQL injection vulnerability in Meshery

A SQL injection vulnerability in Meshery before 0.6.179 allows a remote attacker to obtain sensitive information and execute arbitrary code via the order parameter.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907