All You Need for Application Network Security on the Platform
summary
A practical overview of configuring network security for applications running on Kubernetes platforms, covering policies, settings and common misconfigurations that lead to unexpected behavior. It examines Kubernetes-native controls and platform features for managing inter-service communication and shows how overly complex or incorrect configurations can break intended security outcomes.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 1:09Kubernetes network attack example
- 4:26Theoretical attack basics
- 7:40Network segmentation issues
- 9:03Istio auth and authZ
- 12:19How Istio mTLS works
- 14:42Istio disablement problems
- 16:34iptables container risks
- 17:38Istio network security control
- 19:04Kubernetes Network Policy
- 21:31Cilium Network Policy
- 24:44Cilium auth and caching
- 26:09Network segmentation summary
- 28:17Cluster config control
- 31:29Policy Engine automation
- 34:38Security conclusions
- 36:05Q&A
- 37:50Kubernetes version compatibility
- 39:35Certification and products
- 40:35Pod direct communication ban
- 42:03Cilium L3 vs L7 policies
- 44:35Cloud Kubernetes security
- 46:46Conclusion
related talks
34mKubernetes Security 101: Best Practices to Secure Your Cluster
32mNot-So-Spooky Security Strategies
24mOne stop talk for kubernetes security !!
35mCloud Native Security for the Rest of Us
35mKubernetes Security - Challenge and Opportunity?
37mCloud Native Security 101 - Introduction, Workflows and Best practices
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
41mKubernetes Security Jumpstart