mirror of
https://github.com/netbirdio/gvisor.git
synced 2026-05-22 17:12:49 -07:00
Add security platform benefits to gvisor.dev index page.
Update header title and jumbotron with security platform info. Add new benefits to index page reflecting use case value and adjust footer logo to remove blur when scaled. PiperOrigin-RevId: 461935696
This commit is contained in:
@@ -31,7 +31,7 @@
|
||||
<div class="col-sm-3 col-md-3"></div>
|
||||
<div class="hidden-xs hidden-sm col-md-3">
|
||||
<a href="https://cloud.google.com/run">
|
||||
<img style="float: right;" src="/assets/logos/powered-gvisor.png" alt="Powered by gVisor"/>
|
||||
<img style="float: right; max-width: 93px; height: auto;" src="/assets/logos/powered-gvisor.png" alt="Powered by gVisor"/>
|
||||
</a>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
{% if page.title %}
|
||||
<title>{{ page.title }} - gVisor</title>
|
||||
{% else %}
|
||||
<title>gVisor</title>
|
||||
<title>The Container Security Platform | gVisor</title>
|
||||
{% endif %}
|
||||
<link rel="canonical" href="{{ page.url | replace:'index.html','' | prepend: site_root }}">
|
||||
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 5.1 KiB After Width: | Height: | Size: 25 KiB |
+36
-32
@@ -3,10 +3,11 @@
|
||||
<div class="row">
|
||||
<div class="col-md-3"></div>
|
||||
<div class="col-md-6">
|
||||
<p>gVisor is an <b>application kernel</b> for <b>containers</b> that provides efficient defense-in-depth anywhere.</p>
|
||||
<h1 style="color:white;">The Container Security Platform</h1>
|
||||
<p>Run untrusted workloads, block container escapes, and mitigate unauthorized host access.</p>
|
||||
<p style="margin-top: 20px;">
|
||||
<a class="btn" href="/docs/user_guide/install/">Get started <i class="fas fa-arrow-alt-circle-right ml-2"></i></a>
|
||||
<a class="btn" href="/docs/">Learn More <i class="fas fa-arrow-alt-circle-right ml-2"></i></a>
|
||||
<a class="btn" href="/docs/">What is gVisor? <i class="fas fa-arrow-alt-circle-right ml-2"></i></a>
|
||||
</p>
|
||||
</div>
|
||||
<div class="col-md-3"></div>
|
||||
@@ -15,36 +16,39 @@
|
||||
</div>
|
||||
|
||||
<div class="container"> <!-- Full page container. -->
|
||||
<div class="row">
|
||||
<div class="col-md-4">
|
||||
<div align="center"><i class="fas fa-shield-alt fa-2x"></i></div>
|
||||
<h3 id="seamless-security">Strengthen Kubernetes Security</h3>
|
||||
<p>gVisor delivers an additional security boundary for containers by
|
||||
intercepting and monitoring workload runtime instructions in user space
|
||||
before they are able to reach the underlying host. This protection
|
||||
mitigates threats and reduces host attack surface. gVisor seamlessly
|
||||
integrates with existing container workflows and ecosystem.</p>
|
||||
<a class="button" href="/docs/user_guide/quick_start/kubernetes/">Learn More »</a>
|
||||
</div>
|
||||
<div class="col-md-4">
|
||||
<div align="center"><i class="fas fa-lock fa-2x"></i></div>
|
||||
<h3 id="seamless-security">Protect Workloads and Infrastructure</h3>
|
||||
<p>Run untrusted workloads without compromising other workloads or the
|
||||
underlying infrastructure. Block container escapes by keeping attackers
|
||||
from breaking out of containers and into hosts or other containers.
|
||||
Mitigate privilege escalations that provide unauthorized access to other
|
||||
systems and services. Deliver strong isolation between containers for
|
||||
multitenant environments.</p>
|
||||
<a class="button" href="/docs/architecture_guide/security/">Learn More »</a>
|
||||
</div>
|
||||
<div class="col-md-4">
|
||||
<div align="center"><i class="fas fa-exclamation-triangle fa-2x"></i></div>
|
||||
<h3 id="seamless-security">Reduce Vulnerability and Mitigate Risk</h3>
|
||||
<p>Deliver a hardened Kubernetes that provides defense-in-depth
|
||||
runtime protection and monitoring for container workloads. Enable
|
||||
third-party customers to safely deliver code and highly secure services.
|
||||
Keep infrastructure resilient and operating during adverse cyber events.
|
||||
Use gVisor with threat detection engines to quickly identify threats and
|
||||
reduce risk with alerts.</p>
|
||||
<a class="button" href="/docs/architecture_guide/security/">Learn More »</a>
|
||||
</div>
|
||||
|
||||
<div class="row">
|
||||
<div class="col-md-4">
|
||||
<h4 id="seamless-security">Container-native Security <i class="fas fa-lock"></i></h4>
|
||||
<p>By providing each container with its own application kernel, gVisor
|
||||
limits the attack surface of the host. This protection does not limit
|
||||
functionality: gVisor runs unmodified binaries and integrates with container
|
||||
orchestration systems, such as Docker and Kubernetes, and supports features
|
||||
such as volumes and sidecars.</p>
|
||||
<a class="button" href="/docs/architecture_guide/security/">Read More »</a>
|
||||
</div>
|
||||
|
||||
<div class="col-md-4">
|
||||
<h4 id="resource-efficiency">Resource Efficiency <i class="fas fa-feather-alt"></i></h4>
|
||||
<p>Containers are efficient because workloads of different shapes and sizes
|
||||
can be packed together by sharing host resources. gVisor uses host-native
|
||||
abstractions, such as threads and memory mappings, to co-operate with the
|
||||
host and enable the same resource model as native containers.</p>
|
||||
<a class="button" href="/docs/architecture_guide/resources/">Read More »</a>
|
||||
</div>
|
||||
|
||||
<div class="col-md-4">
|
||||
<h4 id="platform-portability">Platform Portability <sup>☁</sup>☁</h4>
|
||||
<p>Modern infrastructure spans multiple cloud services and data centers,
|
||||
often with a mix of managed services and virtualized or traditional servers.
|
||||
The pluggable platform architecture of gVisor allows it to run anywhere,
|
||||
enabling consistent security policies across multiple environments without
|
||||
having to rearchitect your infrastructure.</p>
|
||||
<a class="button" href="/docs/architecture_guide/platforms/">Read More »</a>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
</div> <!-- container -->
|
||||
|
||||
Reference in New Issue
Block a user