中文Audi Future-Proofs Tech Vision and App Innovation with NGINX
Securing a Strategic Kubernetes Application Environment
Overview
For more than 100 years Audi has enthusiastically embraced the cutting edge.
The German automotive giant’s long‑standing slogan “Vorsprung durch Technik” (roughly, Leading through Technology) is more than just a phrase: it’s been the guiding light for a company that has always put innovation at the heart of its business.
“If we want to stay successful, we need a constant focus on how technology can enable an exceptional customer experience,” explains Sebastian Kister, Team Lead for the Kubernetes Competence Centre at Audi. “That is exactly why, in recent years, we’ve set out to reinvent the way we create, deploy, run and optimize our applications.”
Challenge
The Kubernetes Competence Centre, along with its modern application platform, Kubika O, are very much the cornerstones of Audi’s forward‑looking and future‑proofing vision – not just for itself but also the entire Volkswagen (VW) Group, which owns Audi.
Kubika O was conceived in 2020 as a cloud‑independent Kubernetes platform operating as a seamless application environment. It is underpinned by Red Hat OpenShift technology, a container platform for Kubernetes that automates the provisioning, management, and scaling of applications.
Before Kubika O went live, a key consideration was how to secure everything. Audi knew it needed a proven WAF solution with certified, frictionless OpenShift interoperability. And, due to the size and time limitations of the core team, it also required access to robust, 24/7 technical support.
“We needed a vendor that could quickly understand our needs, deliver them, and provide ongoing support,” says Kister. “The teams inside Audi had to be empowered to create applications that support their business objectives, all without needing to worry about the underlying infrastructure and, importantly, how everything is secured. Basically, we wanted to create a safe harbor (platform and standards) for all the containers (projects) that could be lost at sea.”
Solution
After an initial vendor investigation process, there was only one security solution that ticked all the boxes.
“Applications are a living thing, constantly adapting to the needs of the user, and the platform had to support that. NGINX App Protect quickly stood out as the best option for us to handle that complex reality. It brings all the technical compatibilities we need together, plus it is cloud‑agnostic and lightweight, which means less computing power. What’s more, it is backed by an extremely strong professional services capability. There is no Kubika as we know it without NGINX.”
NGINX App Protect is an application security solution that combines the efficiency of F5 Advanced Web Application Firewall (Advanced WAF) technology with the agility and performance of NGINX. Delivering a ‘build once, adhere everywhere’ functionality for security policies, NGINX App Protect ensures that DevOps and SecOps can operate effectively and in harmony. When paired with NGINX Ingress Controller, the solution seamlessly secures Kubernetes apps without compromising speed or agility.
Once the solution was agreed on, the NGINX account team worked closely and intensively with all relevant stakeholders to determine the project’s exact specifications, including the delivery of a successful proof of concept. Trusted NGINX partner ConSol was then enlisted to support the implementation process, and the deal was closed in less than two months.
“I don’t buy anything based on PowerPoint presentations,” says Kister. “I wanted to see a working solution aligned with our use cases that could be quickly implemented and maintained by the vendor and its partners.”
With NGINX App Protect in place, Audi was finally able to start harnessing Kubika O’s full potential.
Results
“Today, application owners don’t have to worry about the infrastructure at all,” Kister enthuses. “They still need to do their app operation security assessments, but when it comes to infrastructure issues like real‑time scanning and vulnerability scanning, that is all baked into the platform. This means that 80% of the security assessment is already done. Without NGINX, we wouldn’t be able to provide this assurance without relying on the functionality of the cloud providers, which would negate our cloud‑agnostic stance.”
Kubika O currently facilitates several key apps central to VW Group’s operations, with use cases including data collection, analytics, and automation. The platform’s built‑in flexibility also means it is ready to quickly adapt to emerging business needs and challenges.
For Kister, however, one of the most rewarding outcomes of Kubika O’s impact to date is the way it has driven genuine transformation and behavioral change across the VW Group.
“We are a small team, but we are making a huge impact,” he says. “Every customer we work with doesn’t just get a service – they learn from us. They see how we operate, and we contribute to cultural change across the company, project by project. Ultimately, every enhancement to our driving experience is software‑ and data‑driven. That is why Kubika O is, and will remain, an essential part of our future.”
About Audi
Audi stands for sporty vehicles, high build quality and progressive design – for “Vorsprung durch Technik.” The Audi Group is among the world’s leading producers of premium cars.
