Service Aware Zero Trust Container Network and Its Offloading to DPU
Talkat KubeCon + CloudNativeCon + Open Source Summit China 2023 · on Wednesday, 2023-09-27· at 15:50· 3层 301明珠厅| 3F The Pearl Hall 301·
summary
Describes implementing service-aware zero-trust for cloud-native container networks by offloading mTLS, transparent IPsec, and Open vSwitch (OVS) functions to a DPU to avoid pod sidecar injection and heavy CPU use. Explains redesigning workflows to work around DPU limitations and proposes modifications to open-source OVS so the offloaded datapath can provide service visibility while delivering line-rate performance.
AI-written summary · about
related talks
32mZero Trust Network Turnkey Solution to Support Zero Trust Service Mesh
26mA DevSecOps Approach to Zero Trust Network Security
35mDemystifying Zero-Trust for Cloud Native Technologies
29mZero Trust Security with Service Mesh
46mZero Trust Cloud VPN Based on VPP and WireGuard
31mTrust no one: implementing zero trust security with Ambient Service Mesh
29mZero Trust for APIs: From Edge to Mesh with Istio
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos