How to Reconcile Security and Agility for the Good of Your Applications
summary
NGINX (now part of F5) as a Kubernetes ingress/API gateway that automates security and operations: it uses CRDs like VirtualServer to attach WAF policies managed via GitOps (ArgoCD/GitLab), exposes over 100 Prometheus/Grafana metrics, and its controller handles load balancing, fast scaling and automatic TLS certificate rotation. The built‑in WAF blocks XSS, SQLi and bots in real time, accepts dynamic rule updates roughly every six weeks, and supports live patching so fixes can be applied without stopping deployments.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:05Modernapse four pillars
- 12:21Modern app security
- 15:50Modernapse deployment issues
- 19:22NGINX role in Modernapse
- 26:43Automated WAF demo with NGINX
- 38:15Q&A
related talks
49mProtecting API workloads OWASP Top 10
06mAI Security for Kubernetes: Guardrails, Red Team, and Remediate
37mAchieving High Security at Scale with Microservices
25mKubernetes Ingress-Nginx Security from Beginner to Expert
34mAsk Me Anything
57mThe Kubernetes Sessions Security
40mReimagining Application Networking and Security
37mThe Zero Trust Odyssey: Our Journey to Modernize Internal Access