Keynote: Demystifying Secure Application Communication with Zero Trust: Identity, Integri...
summary
Demo builds a Node.js server and curl client in k3d, shows a full manual OpenSSL mTLS flow with generated keys, CSRs and certs, then flips a label to enroll the namespace in Istio ambient mesh to get mutual TLS without changing code or restarting pods. Uses k9s for visibility and a mesh dashboard to show authenticated principals and TCP metrics. Claims: mTLS provides identity, confidentiality, integrity and the mesh enforces it automatically.
AI-written summary · about
chapters (10)
- 0:00Securing cloud-native communication
- 1:25Identity for application security
- 3:57Confidentiality and data integrity
- 4:38Mutual TLS secures communication
- 5:23Live demo: unsecured communication
- 9:20Manual Mutual TLS setup
- 13:14Deploy Mutual TLS server/client
- 15:04Simplify Mutual TLS with service mesh
- 16:10Visualize Mutual TLS metrics
- 18:39Demo summary
related talks
37mDemystifying Secure Application Communication with Zero Trust and Istio Without Sidecars- 37mDemystifying Secure Application Communication with Zero Trust and Istio Without Sidecars
34mFrom Kubelet to Istio: Kubernetes Network Security Demystified
29mZero Trust for APIs: From Edge to Mesh with Istio
06mKeynote: Progress Toward Zero Trust Kubernetes Networks
39mProtect Your Application, Not the Network. Add Zero Trust Superpowers to Your Critical...
46mSecure your Microservices with ZeroTrust approach
26mA DevSecOps Approach to Zero Trust Network Security