Using Open-Source Software to Secure Cloud-Native Applications
summary
Open-source Calico runs as a CNI using BGP and supports IP-in-IP or VXLAN overlays, claiming over 1 million nodes in production and more than a billion agent downloads. Demo deploys a three-service app “Yet Another Online Bank,” applies a native Kubernetes NetworkPolicy to block UI→DB, then adds a GlobalNetworkPolicy to enforce cluster-wide default deny while allowing DNS — policies apply and the app functions with intended restrictions. Calico offers layer‑3 networking, optional encryption, and enterprise policy tooling.
AI-written summary · about
chapters (7)
- 0:00Introduction and overview
- 3:20Project Calico overview
- 10:07Kubernetes network model
- 15:10Network policy deep dive
- 24:26Zero trust with global policies
- 26:20Demo of network policies
- 30:14Container firewall and Q&A
related talks
23mContainer and Kubernetes security policy design: 10 critical best practices
52mImplementing holistic security for containers and Kubernetes
06mKeynote: Progress Toward Zero Trust Kubernetes Networks
33mNavigating the Container Jungle
44mUnderstanding Calico's eBPF data-plane
40mNoverlay Networks for Health and Wellbeing
39mExploring Container Security: A DevSecOps journey securing a fake shop - Jeremy Guerrand
26mA DevSecOps Approach to Zero Trust Network Security