Leveraging the Linux Kernel for Building a Zero-Trust Environment With...
summary
A Linux kernel module named camet intercepts socket syscalls, issues x509 identities bound to processes, performs the mTLS handshake entirely in kernel space and uplifts sessions to kTLS, while a user-space agent handles CSRs, Kubernetes metadata and policy distribution (OPA-style policies). The design removes sidecars and proxies, enforces access control before sockets open, works on VMs or Kubernetes, keeps private keys out of userland, and is published as open source.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:52Zero trust principles
- 7:14Cloud-native security
- 12:33Service mesh challenges
- 19:41Linux kernel solution
- 24:46Camlet in kernel space
- 31:31Live demo
- 37:20Camlet details & Q&A
related talks
39mProtect Your Application, Not the Network. Add Zero Trust Superpowers to Your Critical...
30mApplication network security and observability in an encrypted future
07mLightning Talk: Enhancing Runtime Protection Leveraging Compliance Frameworks
37mDemystifying Secure Application Communication with Zero Trust and Istio Without Sidecars
28mTrustBase: An Architecture to Repair and Strengthen...
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
26mThe Secure Socket API: TLS as an Operating System Service
26mA DevSecOps Approach to Zero Trust Network Security