Zero Trust Network Turnkey Solution to Support Zero Trust Service Mesh
Talkat KubeCon + CloudNativeCon + Open Source Summit China 2021 · on Thursday, 2021-12-09· at 11:20· Kubecon + CloudNativeCon 演讲厅, 虚拟会议 (Virtual)·
summary
Describes a high-performance, scalable zero-trust networking solution built for cloud and edge use: a VPP-based security gateway and a DPDK-based load balancer/cloud gateway that use WireGuard to enforce zero-trust service mesh policies for Kubernetes ingress/egress and edge gateways. Covers accelerator techniques (IPsec-MB and AVX512) for VPP WireGuard, a DPDK implementation of WireGuard for scalability, and using Intel SGX as a TEE for secrets management.
AI-written summary · about
chapters (12)
- 0:00Intro
- 1:18Background
- 7:09Properties of Zero Trust Networking
- 10:10ZTNA Architecture
- 12:37ZTNA Function Split
- 13:57Zero Trust Network Turnkey Solution
- 16:25Secure GW Reference Arch
- 20:20Ingress Load Balancer Reference Arch
- 25:50WireGuard Implementation
- 28:34VPP-based WireGuard* Optimization
- 30:29Key Takeaways
- 32:11Acknowledgement
related talks
46mZero Trust Cloud VPN Based on VPP and WireGuard
35mDemystifying Zero-Trust for Cloud Native Technologies
29mZero Trust for APIs: From Edge to Mesh with Istio
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos
34mZeroTrust Microservices with Wasm & WireGuard
29mZero Trust Security with Service Mesh
26mA DevSecOps Approach to Zero Trust Network Security
45mZero Trusting as a True Cloud Native Dev