Psycho Security - End to End Encryption
summary
Intel describes a working deployment that replaces cleartext intra-platform traffic with IPsec tunnels using strongSwan, reterminates HTTPS at HAProxy, and enforces access with iptables rules embedded in a custom stemcell and BOSH release. Internal traffic becomes encrypted end to end so usernames passwords and app data no longer traverse the network in clear text. Performance initially drops until AES‑NI is enabled and Intel reports up to a 400% throughput gain with hardware crypto though no formal overhead numbers are published.
AI-written summary · about
chapters (7)
- 0:00Introduction to Psycho Security
- 1:49Why Network Security Matters
- 5:58Intel’s End-to-End Encryption Solution
- 10:14Implementing IPsec in Cloud Foundry
- 14:50Call to Action for Community
- 17:45Q&A: Performance Impact and Scalability
- 27:16Final Thoughts and Next Steps
related talks
27mSecurity++: Hide Your Secrets via a Distributed Hardware Security Mod...
32mSecure Your Cloud with the IPsec BOSH Release - Stefan Lay, SAP
29mSecuring Data in Motion and at Rest: Quantifying End-to-End Encryption Perfo...
03mis excited about advancing security with strong partnerships
41mCryptographic speed, reliability & security
36mEverybody is talking about Confidential Computing - the minimum Devs should know
20mKeynote: Future-Proofing Confidential AI
04mProject Lightning Talk: Simplifying Cloud-Native Security: eBPF-Powered Encryption in Sidecarless Service Mesh