![\"Google](\"\/wp-content\/uploads\/2020\/09\/00903ec490c005b0df20961032231858.jpg\")
<\/p>\n<\/p>\n
Ne n\u00eb kompanin\u00eb Google besojm\u00eb se llogarit\u00eb n\u00eb cloud n\u00eb t\u00eb ardhmen do t\u00eb fokusohet gjithnj\u00eb e m\u00eb shum\u00eb n\u00eb sh\u00ebrbime private, t\u00eb enkriptuara, q\u00eb sigurojn\u00eb p\u00ebrdoruesit nj\u00eb besim t\u00eb plot\u00eb rreth kontrollit t\u00eb privat\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave.<\/p>\n
Google Cloud tashm\u00eb enkripton t\u00eb dh\u00ebnat e klient\u00ebve q\u00eb transmetohen dhe ruhen, por p\u00ebr t'i p\u00ebrpunuar ato, megjithat\u00eb duhet t\u00eb jen\u00eb t\u00eb dekriptuara. Llogarit\u00eb konfidenciale<\/strong> \u2014 nj\u00eb teknologji revolucionale e p\u00ebrdorur p\u00ebr enkriptimin e t\u00eb dh\u00ebnave gjat\u00eb p\u00ebrpunimit. Mjediset e bazuara n\u00eb kompjuter\u00ebt confidential lejojn\u00eb q\u00eb t\u00eb dh\u00ebnat e enkriptuara t\u00eb ruhen n\u00eb memorie dhe vende t\u00eb tjera jasht\u00eb procesorit (CPU).<\/p>\n VM-t\u00eb konfidenciale tani jan\u00eb n\u00eb faz\u00ebn e testimit beta dhe jan\u00eb produkti i par\u00eb n\u00eb linj\u00ebn e Llogarive Konfidenciale t\u00eb Google Cloud. Ne tashm\u00eb po aplikojm\u00eb m\u00ebnyra t\u00eb ndryshme t\u00eb izolimit dhe sandboxes n\u00eb infrastruktur\u00ebn ton\u00eb cloud p\u00ebr t\u00eb siguruar sigurin\u00eb e arkitekturave me shum\u00eb p\u00ebrdorues. VM-t\u00eb konfidenciale e \u00e7ojn\u00eb sigurin\u00eb n\u00eb nj\u00eb nivel t\u00eb ri, duke ofruar enkriptimin e memories p\u00ebr izolim t\u00eb shtuar t\u00eb ngarkesave t\u00eb pun\u00ebs n\u00eb cloud, duke ndihmuar klient\u00ebt tan\u00eb t\u00eb mbrojn\u00eb t\u00eb dh\u00ebnat konfidenciale. Ne mendojm\u00eb se kjo do t\u00eb interesohet ve\u00e7an\u00ebrisht ata q\u00eb punojn\u00eb n\u00eb sektor\u00eb t\u00eb rregulluar (ndoshta kjo lidhet me GDPR dhe \u00e7\u00ebshtje t\u00eb tjera t\u00eb lidhura, sh\u00ebnim i p\u00ebrkthyesit<\/em>).<\/p>\n Me Asylo, nj\u00eb platform\u00eb me burim t\u00eb hapur p\u00ebr llogarit\u00eb konfidenciale, ne fokusohemi n\u00eb ofrimin e thjesht\u00ebsis\u00eb n\u00eb vendosje dhe p\u00ebrdorim t\u00eb mjediseve p\u00ebr llogarit\u00eb konfidenciale, duke ofruar performanc\u00eb t\u00eb lart\u00eb dhe aplikacione p\u00ebr \u00e7do ngarkes\u00eb pune q\u00eb ju zgjidhni t\u00eb ekzekutoni n\u00eb cloud. Ne besojm\u00eb se nuk duhet t\u00eb b\u00ebni kompromise n\u00eb lidhje me leht\u00ebsin\u00eb e p\u00ebrdorimit, fleksibilitetin, performanc\u00ebn dhe sigurin\u00eb.<\/p>\n Me kalimin e Confidential VMs n\u00eb faz\u00ebn beta, ne u b\u00ebm\u00eb ofruesi i par\u00eb i madh i sh\u00ebrbimeve Cloud q\u00eb ofron nj\u00eb nivel t\u00eb till\u00eb sigurie dhe izolimi \u2014 dhe ofrojm\u00eb klient\u00ebve nj\u00eb mund\u00ebsi t\u00eb thjesht\u00eb dhe t\u00eb leht\u00eb p\u00ebr t'u p\u00ebrdorur, si p\u00ebr aplikacionet e reja ashtu edhe p\u00ebr ato 't\u00eb portuara' (ndoshta k\u00ebtu flitet p\u00ebr aplikacione q\u00eb mund t\u00eb drejtohen n\u00eb cloud pa ndryshime t\u00eb r\u00ebnd\u00ebsishme, sh\u00ebnim i p\u00ebrkthyesit<\/em>). Ne ofrojm\u00eb:<\/p>\n Privat\u00ebsi t\u00eb pa krahasueshme: klient\u00ebt mund t\u00eb mbrojn\u00eb privat\u00ebsin\u00eb e t\u00eb dh\u00ebnave t\u00eb tyre t\u00eb ndjeshme n\u00eb cloud edhe gjat\u00eb procesimit t\u00eb tyre. VM-t\u00eb konfidenciale p\u00ebrdorin funksionin Secure Encrypted Virtualization (SEV) t\u00eb gjenerat\u00ebs s\u00eb dyt\u00eb t\u00eb procesor\u00ebve AMD EPYC. T\u00eb dh\u00ebnat tuaja q\u00ebndrojn\u00eb t\u00eb enkriptuara gjat\u00eb p\u00ebrdorimit, indeksimit, k\u00ebrkimit dhe m\u00ebsimit. \u00c7el\u00ebsat e enkriptimit krijohen n\u00eb hardware p\u00ebr secil\u00ebn makin\u00eb virtuale dhe nuk dalin kurr\u00eb nga hardueri.<\/p>\n<\/li>\n Inovacion t\u00eb p\u00ebrmir\u00ebsuar: llogarit\u00eb konfidenciale mund t\u00eb hapin skenar\u00eb procesimi q\u00eb m\u00eb par\u00eb kan\u00eb qen\u00eb t\u00eb pamundur. Tani kompanit\u00eb mund t\u00eb ndajn\u00eb grupe t\u00eb t\u00eb dh\u00ebnave konfidenciale dhe t\u00eb punojn\u00eb s\u00eb bashku n\u00eb k\u00ebrkime n\u00eb cloud, duke ruajtur gjithnj\u00eb privat\u00ebsin\u00eb.<\/p>\n<\/li>\n Sekreti p\u00ebr ngarkesat 't\u00eb portuara': q\u00ebllimi yn\u00eb \u2014 thjeshtimi i computing confidential. Kalimi n\u00eb Confidential VMs \u00ebsht\u00eb i qet\u00eb \u2014 t\u00eb gjitha ngarkesat n\u00eb GCP, t\u00eb drejtuara n\u00eb makin\u00ebn virtuale, mund t\u00eb kalojn\u00eb n\u00eb Confidential VMs. E gjith\u00eb kjo \u00ebsht\u00eb e thjesht\u00eb \u2014 mjafton t\u00eb vendosni nj\u00eb 'checkbox'.<\/p>\n<\/li>\n Mbrojtje nga k\u00ebrc\u00ebnimet e avancuara: llogarit\u00eb konfidenciale mb\u00ebshteten n\u00eb mbrojtjen e VM-ve t\u00eb mbrojtura kund\u00ebr rootkits dhe bootkits, duke ndihmuar n\u00eb garantimin e integritetit t\u00eb sistemit operativ t\u00eb zgjedhur p\u00ebr t'u ekzekutuar n\u00eb VM konfidenciale.<\/p>\n<\/li>\n<\/ul>\n VM-t\u00eb konfidenciale funksionojn\u00eb n\u00eb makinat virtuale N2D, t\u00eb cilat ekzekutohen n\u00eb procesor\u00ebt e gjenerat\u00ebs s\u00eb dyt\u00eb AMD EPYC. Me funksionin AMD SEV, ofrohet performanc\u00eb e lart\u00eb p\u00ebr shumic\u00ebn e detyrave t\u00eb k\u00ebrkesave t\u00eb larta t\u00eb llogaritjes, nd\u00ebrkoh\u00eb q\u00eb ruhet memoria operative e makin\u00eb virtuale e enkriptuar me nj\u00eb \u00e7el\u00ebs t\u00eb ve\u00e7ant\u00eb p\u00ebr secil\u00ebn makin\u00eb virtuale, i krijuar dhe menaxhuar nga procesori EPYC. \u00c7el\u00ebsat krijohen nga koprocessori AMD Secure Processor gjat\u00eb krijimit t\u00eb makin\u00ebs virtuale, dhe ndodhen ekskluzivisht brenda saj, duke i b\u00ebr\u00eb ato t\u00eb papranuara as p\u00ebr Google, as p\u00ebr makinat e tjera virtuale q\u00eb funksionojn\u00eb n\u00eb t\u00eb nj\u00ebjtin nod.<\/p>\n P\u00ebrve\u00e7 enkriptimit t\u00eb integruar t\u00eb memories operative, ne krijojm\u00eb VM-t\u00eb konfidenciale mbi VM-t\u00eb e mbrojtura, p\u00ebr t\u00eb siguruar q\u00ebndrim ndaj hakimit t\u00eb imazhit t\u00eb sistemit operativ, verifikimin e integritetit t\u00eb firmware-it, skedave binaire t\u00eb b\u00ebrtham\u00ebs dhe driver\u00ebve. Imazhet e ofruara nga Google p\u00ebrfshijn\u00eb Ubuntu 18.04, Ubuntu 20.04, Container Optimized OS (COS v81) dhe RHEL 8.2. Ne po punojm\u00eb p\u00ebr Centos, Debian dhe t\u00eb tjera, p\u00ebr t\u00eb ofruar imazhe t\u00eb tjera t\u00eb sistemeve operative.<\/p>\n Ne po themi se bashk\u00ebpunojm\u00eb ngusht me ekipin e inxhinier\u00ebve t\u00eb AMD Cloud Solution p\u00ebr t\u00eb siguruar garancit\u00eb q\u00eb enkriptimi i memories s\u00eb makina virtuale nuk do t\u00eb ndikoj\u00eb n\u00eb performanc\u00eb. Kemi shtuar mb\u00ebshtetje p\u00ebr drejtuesit e rinj OSS (nvme dhe gvnic) p\u00ebr t\u00eb trajtuar k\u00ebrkesat ndaj n\u00ebnstruktur\u00ebs s\u00eb magazinimit dhe trafikut rrjetor me kapacitet m\u00eb t\u00eb lart\u00eb se protokollet e vjetra. Kjo ka b\u00ebr\u00eb t\u00eb mundur q\u00eb performancat e Confidential VMs t\u00eb jen\u00eb af\u00ebr atyre t\u00eb makina virtuale standarde.<\/p>\n Fal\u00eb Secure Encrypted Virtualization, e nd\u00ebrtuar n\u00eb gjenerat\u00ebn e dyt\u00eb t\u00eb procesor\u00ebve AMD EPYC, sigurohet nj\u00eb funksion inovativ i siguris\u00eb q\u00eb mbron t\u00eb dh\u00ebnat n\u00eb nj\u00eb mjedis t\u00eb virtualizuar. P\u00ebr t\u00eb mb\u00ebshtetur GCE Confidential VMs N2D t\u00eb reja, kemi punuar me Google p\u00ebr t\u00eb ndihmuar klient\u00ebt t\u00eb mbrojn\u00eb t\u00eb dh\u00ebnat e tyre dhe t\u00eb sigurojn\u00eb performanc\u00ebn e ngarkesave t\u00eb tyre t\u00eb pun\u00ebs. Jemi shum\u00eb t\u00eb k\u00ebnaqur t\u00eb shohim se Confidential VMs ofrojn\u00eb nj\u00eb nivel t\u00eb ngjash\u00ebm t\u00eb performanc\u00ebs s\u00eb lart\u00eb p\u00ebr ngarkesa t\u00eb ndryshme, si dhe makina virtuale tipike N2D. <\/p>\n<\/blockquote>\n Raghu Nambiar, n\u00ebn-president, Ekosistemi i Qendr\u00ebs s\u00eb t\u00eb Dh\u00ebnave, AMD<\/em><\/p>\n Computing confidentiality mund t\u00eb ndihmoj\u00eb n\u00eb ndryshimin e m\u00ebnyr\u00ebs se si kompanit\u00eb p\u00ebrpunojn\u00eb t\u00eb dh\u00ebnat n\u00eb cloud, duke ruajtur sekretin dhe sigurin\u00eb. P\u00ebrve\u00e7 t\u00eb tjera, kompanit\u00eb do t\u00eb jen\u00eb n\u00eb gjendje t\u00eb bashk\u00ebpunojn\u00eb pa rrezikuar sekretet e grupeve t\u00eb dh\u00ebnash. Ky bashk\u00ebpunim, nga ana e tij, mund t\u00eb \u00e7oj\u00eb n\u00eb zhvillimin e teknologjive dhe ideve edhe m\u00eb transformuese; imagjinoni, p\u00ebr shembull, mund\u00ebsin\u00eb e krijimit t\u00eb shpejt\u00eb t\u00eb vaksinave dhe trajtimin e s\u00ebmundjeve si rezultat i nj\u00eb bashk\u00ebpunimi t\u00eb till\u00eb t\u00eb sigurt.<\/p>\n Jemi t\u00eb entuziazmuar t\u00eb shohim mund\u00ebsit\u00eb q\u00eb kjo teknologji ofron p\u00ebr kompanin\u00eb tuaj. Shihni ![\"Google](\"\/wp-content\/uploads\/2020\/09\/802c56326b4a3c1283da32ece039d8b1.jpg\")
<\/p>\nHapim mund\u00ebsi t\u00eb reja<\/h3>\n
\n
![\"Google](\"\/wp-content\/uploads\/2020\/09\/8c15fc503333bcc09e3c5795828063c2.jpg\")
<\/p>\nElementet e VM-ve konfidenciale<\/h3>\n
![\"Google](\"\/wp-content\/uploads\/2020\/09\/78d602e029d3bf401a98678bb75d0c67.jpg\")
<\/p>\n\n
Teknologjia q\u00eb ndryshon loj\u00ebn<\/h3>\n