NGINX and Docker

[NoahKunin]

Something to consult once we Docker-ify.

http://nginx.com/blog/deploying-nginx-nginx-plus-docker/

[konklone]

Definitely. It's not clear to me yet what requires nginx vs Nginx Plus (which we should be wary of).

[NoahKunin]

Excellent clarification. In general, FISMA Ready should avoid all "premium"
or "enterprise" add-ons to open source components wherever possible. Those
should only be used if and only if there is no other way for the
component to meet a critical security control that cannot be compensated by
some other security control that can be achieved without the add-on.

Agencies are free to engage those add-ons, or vendor provided professional
services, but that work is on the vendors.

I should add something to this effect in the FISMA Ready README content.
I'll make an issue there to remind myself.

On Thu, Oct 30, 2014 at 2:58 PM, Eric Mill notifications@github.com wrote:

Definitely. It's not clear to me yet what requires nginx vs Nginx Plus
http://www.infoworld.com/article/2612108/open-source-software/nginx-takes-the-slippery-road-away-from-open-source.html
(which we should be wary of).

—
Reply to this email directly or view it on GitHub
#3 (comment).

Noah Kunin - Delivery Architect
@NoahKunin http://twitter.com/noahkunin | @18F https://twitter.com/18F