Networking & Infrastructure Security
Infrastructure Hosting
Polyaxon is hosted on Google Cloud Platform. Google data centers feature a layered security model, including extensive safeguards such as:
- Custom-designed electronic access cards
- Alarms
- Vehicle access barriers
- Perimeter fencing
- Metal detectors
- Biometrics
According to the Google Security Whitepaper: "The data center floor features laser beam intrusion detection. Data centers are monitored 24/7 by high-resolution interior and exterior cameras that can detect and track intruders. Access logs, activity records, and camera footage are reviewed in case an incident occurs. Data centers are also routinely patrolled by professional security guards who have undergone rigorous background checks and training."
Polyaxon employees do not have physical access to Google data centers, servers, network equipment, or storage.
Logical Access Control
Polyaxon is the assigned administrator of its infrastructure on Google Cloud Platform, and only designated authorized Polyaxon operations team members have access to configure the infrastructure on an as-needed basis behind a two-factor authenticated virtual private network. Specific private keys are required for individual servers, and keys are stored in a secure and encrypted location.
Intrusion Detection and Prevention
Unusual network patterns or suspicious behavior are among Polyaxon's most significant concerns for infrastructure hosting and management. Polyaxon and Google Cloud Platform's intrusion detection and prevention systems (IDS/IPS) rely on both signature-based security and algorithm-based security to identify traffic patterns that are similar to known attack methods.
IDS/IPS involves tightly controlling the size and make-up of the attack surface, employing intelligent detection controls at data entry points, and developing and deploying technologies that automatically remedy dangerous situations, as well as preventing known threats from accessing the system in the first place.
Polyaxon does not provide direct access to security event forensics but does provide access to the engineering and customer support teams during and after any unscheduled downtime.
Email Security
Polyaxon service includes email notifications. Sender policy framework (SPF) is a system to prevent email address spoofing and minimize inbound spam. We have SPF records set through Dyn, our domain name service (DNS), and domain-based message authentication, reporting, and conformance (DMARC) set up for monitoring reports to prevent the possibility of phishing scams.
Polyaxon Cloud Egress IP Addresses
Polyaxon Cloud makes outbound API calls from our infrastructure on behalf of users. For enhanced security, you may want to whitelist these IP addresses in your firewall or security group settings to allow these specific connections.
Contact
For questions regarding networking, please contact [email protected].