You Can't Build an NGFW on Linus Torvalds' Creativity
summary
The talk examines challenges of building a next-generation firewall (NGFW) for enterprise use, arguing that ad-hoc, hobbyist-style development (à la Linus Torvalds) is inadequate for such cyber‑security products. It focuses on the engineering, operational, and business requirements that NGFWs impose and discusses the need for deep, disciplined expertise in development, testing, and maintenance to ensure stability of company business processes.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:11What is NGFW
- 2:35Modern firewalls
- 4:01NGFW use cases
- 5:24Linux kernel limits
- 10:44Context switching issues
- 11:45Hardware accelerators
- 14:12TLS performance
- 16:38Regex in NGFW
- 19:08Solution architecture
- 26:56Comparison with others
- 28:43Learning resources
- 29:26Q&A
related talks
04mFirewalls for the Gaming Industry
50mUsing FOSS to Protect Embedded Systems Data in Transit
08mProtecting workloads with next generation firewall
28mKeeping Networks Secure: The Open Way
05mHow Configuring a Firewall has Changed Over the Last 15 Years
22mFirewalld Changes Coming to Your OS- 28mKeeping Networks Secure: The Open Way
58mConducting Defensive Information Warfare on Open Platforms