A scalable solution that can be used to perform health checks of applications and services
What is our primary use case?
I use the solution for service discovery and orchestration. We have a lot of microservices architecture.
What is most valuable?
The solution is useful for performing health checks of the applications and services. The documentation is good.
What needs improvement?
Health check outputs are delayed sometimes. If a service is down for more than five or ten seconds, sometimes the tool is not able to capture it.
For how long have I used the solution?
I have been using the solution for more than four to five years. I am using the latest version of the solution.
What do I think about the stability of the solution?
The tool’s stability is good. I rate the stability a nine out of ten. We had some issues. Sometimes, health checks do not give the right outcome.
What do I think about the scalability of the solution?
The tool’s scalability is good. I rate the scalability a nine out of ten. We have not faced any issues in scaling the server. We run the server behind an autoscaling group. Our backup and restore mechanism is very strong. Specific teams in our organization that follow the microservices architecture use the solution a lot. We have less than 20 users.
Which solution did I use previously and why did I switch?
We were planning to use Istio. Another team in our organization was using Envoy. We were already using the enterprise version of Terraform. So, we decided to use Consul.
How was the initial setup?
The initial setup is moderately easy. I do the configuration using Chef. We deploy the solution on Amazon EC2 instances. Everything is automated. We spent some time in the HA setup. Other than that, it doesn’t take much time.
What other advice do I have?
I take care of the infrastructure. I use Chef for configuration management. I work on multiple technologies. Overall, I rate the product an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Nice idea and execution but the interface isn't quite up to snuff.
What do you like best about the product?
It can really be useful for getting hard coded passwords out of circulation. It's well thought out in terms of security and execution of the concept.
What do you dislike about the product?
The interface is horrible. Different buttons for functions show up incosistently. If you have a large list you either have to scroll all the way to the top or bottom. Buttons are not in both areas.
This badly needs a search function for entries. It quickly turns chaotic once it's used widely and not being able to see where a particular entry is used is very difficult to determine.
What problems is the product solving and how is that benefiting you?
It's geting the passwords out of emails, chats and documents.
Recommendations to others considering the product:
It works very well and is a comprehensive product. That also means it's complicated. Like any other complicated software, the more you try to do with it, the more you need to plan use.
Vault : Key Management for Everyone
What do you like best about the product?
Secrets management and ease of use on cloud-native architectures.
What do you dislike about the product?
Initial setup and configuration on Kubernetes architecture can be complicated and time-consuming.
What problems is the product solving and how is that benefiting you?
The implementation of Vault can solve keys and secrets management issues in the Kubernetes environment.
Really powerful and good tool to use for your microservices architecture
What do you like best about the product?
The set of the toolbox that the vault provides allows you to implement multiple requirements of security that a cloud-native architecture requires.
What do you dislike about the product?
An audit trail is not intuitive and could be better implemented and user-friendly since this is a tool for security.
What problems is the product solving and how is that benefiting you?
Manage kubernetes and other company tool secrets to automate the process of updating and auditing secrets.
Information security
What do you like best about the product?
* Protect passwords
* Confidential data
* Data box
* Run
What do you dislike about the product?
* Encrypt files
* Certificate
* Add password
What problems is the product solving and how is that benefiting you?
Protect data and password to the system
Recommendations to others considering the product:
Protect data and unauthorized access
Very rich functionality, but has some issue with a really big scale
What do you like best about the product?
Rich set of options to control access (policies, groups), rich set of authorizations for users (e.g. oidc, leap) and for apps (kubernetes, approle).
Versioned KV storage for secrets.
Dynamic passwords for databases and etc.
What do you dislike about the product?
Open Source version does not have replication of any kind.
Premium version has replication and disaster recovery, but replication sometimes has issues under big load.
Even in Premium version, you can find bugs.
What problems is the product solving and how is that benefiting you?
Centralized secrets storage for the whole organization. Integration with cloud, on-prem, and kubernetes. Dynamic passwords management for databases.
Recommendations to others considering the product:
Follow the guidelines provided by HashiCorp. IF you have a premium version - don't hesitate to ask for a review of your setup.
Hashicorp Vault
What do you like best about the product?
It has both cli and rest endpoints to manage secrets at one place. Along with secret management it provides other features like audit for secret access
What do you dislike about the product?
Documentation is not up to mark, some more improvement in documentation can lower the entry barrier for users
What problems is the product solving and how is that benefiting you?
To generate and manage our single sign in tokens for applications
Good experience but some keys features missing
What do you like best about the product?
Secret as a Service (Dynamic secrets) and flexibility.
Good integration with multiple authentication provider. Good varities on Dynamic secrets and can be used with Encryption as a Service.
The installation and configuration is very easy. We can up and running a cluster in 1 day.
The rolling update is easy and we can quickly add more cluster nodes if needed.
What do you dislike about the product?
Vault integration with project is leak.
We have one side the Vault agent, and other side the Consul template or envconsul. For example, envconsul didn't work with Vault agent auto-auth token.
It's hard sometime to use Vault because projects don't want (or haven't budget for) to develop Vault code lines integration.
The Vault UI is very basic. Some actions can't be done with the UI. Add more UI features for administration facilities.
Dynamic secrets is great but some time legacy application couldn't not use it. Should be great to have static secret with specific hook trigger to rotate password.
What problems is the product solving and how is that benefiting you?
Security needs in Cloud environment.
Projects migration from intranet to cloud to solve security issue with very sensitive data.
One tool for any environment (multi-cloud, intranet, etc).
Vault is used to add security in cloud like intranet and having control to encryption keys.
Recommendations to others considering the product:
The most complicated part to start with Vault is to make all roles for any entity and to do the policies matching. In big companies, it's can be hard and take a lot of time. Starting with "Who will do What" is cost saving.
Best in class Product - but disappointed with the service
What do you like best about the product?
I like the product and its working. It's quite easy to setup and start using effortlessly. There are very good enough documentations and tutorials on the internet to use vault precisely to meet your requirements. And it has almost all of the functionality you can expect from a secrets management product.
What do you dislike about the product?
I am very satisfied with the product. But I am not sure about the service. I wanted a demo and quotation of their product - So I did fill up the form for getting started with vault enterprise. I did not receive any sort of communication email from them - regarding the product or the demo. After I filled up the form - It did say that a demo will be provided. Still waiting for the same.
What problems is the product solving and how is that benefiting you?
We needed a password management product to use in our company. As we are using AWS and other products which require proper secrets management - It did fulfil all our requirements. And features like leasing & renewal, dynamic secrets, revocation are extremely useful(which we did not think of earlier).
Recommendations to others considering the product:
HashiCorp Vault is a very good product. Only I am not sure about the support and communication - If it's only me being ignored or it's same for most of us.
A good solution for secret management
What do you like best about the product?
Vault provides a number of methods for manage and securing information ranging from certificates to ssh keys and passwords, provides HA capabilities and an easy to use web ui
What do you dislike about the product?
Some of the back end management is difficult to script. Certificates are stored via token making it hard to audit with out some work
What problems is the product solving and how is that benefiting you?
Password management, key rotation, dev facing ca server