Webinar: Securing Cloud Native Communication, From End-User to Service скачать в хорошем качестве

Webinar: Securing Cloud Native Communication, From End-User to Service

Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March 30 - April 2, Shanghai July 28-30 and Boston November 17-20! Learn more at kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects Everyone building or operating cloud native applications must understand the fundamentals of security and modern threat models. Although this topic is vast, in this talk Daniel will focus on securing end-to-end (user-to-service) communication, and also explore how the combination of an edge proxy and service mesh using TLS and mTLS can be used to mitigate many person-in-the-middle attacks. Key takeaways include: Understand the different characteristics of north-south and east-west traffic, and how the control plane needs to be optimised for each use case Understand why service mesh is in a unique place to enforce security features like mTLS, service identity, and traffic policies Learn how to ensure that there are no exploitable "gaps" within the end-to-end communication path Brief demonstrations of key principles using the open source Ambassador API gateway and Consul service mesh.