Add security platform benefits to gvisor.dev index page.

Update header title and jumbotron with security platform info.

Add new benefits to index page reflecting use case value and adjust footer
logo to remove blur when scaled.

PiperOrigin-RevId: 461935696
This commit is contained in:
Steve Silva
2022-07-19 11:42:04 -07:00
committed by gVisor bot
parent 4bc44eac9b
commit 1ba318d72a
4 changed files with 38 additions and 34 deletions
+1 -1
View File
@@ -31,7 +31,7 @@
<div class="col-sm-3 col-md-3"></div>
<div class="hidden-xs hidden-sm col-md-3">
<a href="https://cloud.google.com/run">
<img style="float: right;" src="/assets/logos/powered-gvisor.png" alt="Powered by gVisor"/>
<img style="float: right; max-width: 93px; height: auto;" src="/assets/logos/powered-gvisor.png" alt="Powered by gVisor"/>
</a>
</div>
</div>
+1 -1
View File
@@ -5,7 +5,7 @@
{% if page.title %}
<title>{{ page.title }} - gVisor</title>
{% else %}
<title>gVisor</title>
<title>The Container Security Platform | gVisor</title>
{% endif %}
<link rel="canonical" href="{{ page.url | replace:'index.html','' | prepend: site_root }}">
Binary file not shown.

Before

Width:  |  Height:  |  Size: 5.1 KiB

After

Width:  |  Height:  |  Size: 25 KiB

+36 -32
View File
@@ -3,10 +3,11 @@
<div class="row">
<div class="col-md-3"></div>
<div class="col-md-6">
<p>gVisor is an <b>application kernel</b> for <b>containers</b> that provides efficient defense-in-depth anywhere.</p>
<h1 style="color:white;">The Container Security Platform</h1>
<p>Run untrusted workloads, block container escapes, and mitigate unauthorized host access.</p>
<p style="margin-top: 20px;">
<a class="btn" href="/docs/user_guide/install/">Get started&nbsp;<i class="fas fa-arrow-alt-circle-right ml-2"></i></a>
<a class="btn" href="/docs/">Learn More&nbsp;<i class="fas fa-arrow-alt-circle-right ml-2"></i></a>
<a class="btn" href="/docs/">What is gVisor?&nbsp;<i class="fas fa-arrow-alt-circle-right ml-2"></i></a>
</p>
</div>
<div class="col-md-3"></div>
@@ -15,36 +16,39 @@
</div>
<div class="container"> <!-- Full page container. -->
<div class="row">
<div class="col-md-4">
<div align="center"><i class="fas fa-shield-alt fa-2x"></i></div>
<h3 id="seamless-security">Strengthen Kubernetes Security</h3>
<p>gVisor delivers an additional security boundary for containers by
intercepting and monitoring workload runtime instructions in user space
before they are able to reach the underlying host. This protection
mitigates threats and reduces host attack surface. gVisor seamlessly
integrates with existing container workflows and ecosystem.</p>
<a class="button" href="/docs/user_guide/quick_start/kubernetes/">Learn More &raquo;</a>
</div>
<div class="col-md-4">
<div align="center"><i class="fas fa-lock fa-2x"></i></div>
<h3 id="seamless-security">Protect Workloads and Infrastructure</h3>
<p>Run untrusted workloads without compromising other workloads or the
underlying infrastructure. Block container escapes by keeping attackers
from breaking out of containers and into hosts or other containers.
Mitigate privilege escalations that provide unauthorized access to other
systems and services. Deliver strong isolation between containers for
multitenant environments.</p>
<a class="button" href="/docs/architecture_guide/security/">Learn More &raquo;</a>
</div>
<div class="col-md-4">
<div align="center"><i class="fas fa-exclamation-triangle fa-2x"></i></div>
<h3 id="seamless-security">Reduce Vulnerability and Mitigate Risk</h3>
<p>Deliver a hardened Kubernetes that provides defense-in-depth
runtime protection and monitoring for container workloads. Enable
third-party customers to safely deliver code and highly secure services.
Keep infrastructure resilient and operating during adverse cyber events.
Use gVisor with threat detection engines to quickly identify threats and
reduce risk with alerts.</p>
<a class="button" href="/docs/architecture_guide/security/">Learn More &raquo;</a>
</div>
<div class="row">
<div class="col-md-4">
<h4 id="seamless-security">Container-native Security <i class="fas fa-lock"></i></h4>
<p>By providing each container with its own application kernel, gVisor
limits the attack surface of the host. This protection does not limit
functionality: gVisor runs unmodified binaries and integrates with container
orchestration systems, such as Docker and Kubernetes, and supports features
such as volumes and sidecars.</p>
<a class="button" href="/docs/architecture_guide/security/">Read More &raquo;</a>
</div>
<div class="col-md-4">
<h4 id="resource-efficiency">Resource Efficiency <i class="fas fa-feather-alt"></i></h4>
<p>Containers are efficient because workloads of different shapes and sizes
can be packed together by sharing host resources. gVisor uses host-native
abstractions, such as threads and memory mappings, to co-operate with the
host and enable the same resource model as native containers.</p>
<a class="button" href="/docs/architecture_guide/resources/">Read More &raquo;</a>
</div>
<div class="col-md-4">
<h4 id="platform-portability">Platform Portability <sup>&#9729;</sup>&#9729;</h4>
<p>Modern infrastructure spans multiple cloud services and data centers,
often with a mix of managed services and virtualized or traditional servers.
The pluggable platform architecture of gVisor allows it to run anywhere,
enabling consistent security policies across multiple environments without
having to rearchitect your infrastructure.</p>
<a class="button" href="/docs/architecture_guide/platforms/">Read More &raquo;</a>
</div>
</div>
</div> <!-- container -->