Modern Service Networking With Consul Connect, Envoy and Kubernetes
summary
Shows Consul Connect securing Kubernetes services with Envoy sidecars, automatic mutual TLS and identity-based authorization, using a local Consul agent and Helm chart for deployment. Demonstrates pod annotation consul-connect=true to inject Envoy, certificate issuance and seamless root rotation via cross-signing, and optional Vault PKI or SDK bypass for ultra-low latency. Claims production-scale usage (millions of downloads, clusters over 20,000 nodes), covers intention-based allow/deny policies, and live demo mostly deploys but hits a network-proxy glitch.
AI-written summary · about
chapters (15)
- 0:00Start
- 2:44Example attack on vulnerable service
- 6:25Network segmentation
- 8:31dynamic environments
- 14:13Control Plane
- 15:30Service Mesh Architecture Data Plane
- 17:12Sidecar pattern
- 21:45Health Checks
- 24:00Certificate Format
- 24:15Consul Architecture Certificate Authority Rotation
- 25:43Intentions
- 26:06Data plane How Connect Secures Trafic
- 29:43How do we segment the network?
- 30:21Automatic sidecar injection
- 36:26Architecture Overview
related talks
13mLightning Talk - Connecting and Migrating Heterogeneous Applications with Consul Servi...
54mCloud Native Communication: Using Ambassador and Consul Connect with Java Apps
58mConsul + Vault Learn Lab: Consul API Gateway
45mMulti-Runtime Service Mesh With Consul
45mSecure Together: Consul + Vault
23mVault for Secrets Management and TLS in Consul K8s
44mScaling Microservices with Kubernetes
58mUsing Service Meshes and Kubernetes to Solve Service-to-Service Communications...