Foster Secure Innovation with Your Kubernetes Platform
summary
New Vector is now open source and claims end-to-end container security by passively learning app behavior and enforcing zero-trust controls without sidecars or agents. It inspects live traffic at layer 7 (about 35 protocols), blocks 23+ network attack types, and provides DLP and packet capture. Architecture runs four containers (controller, scanner, manager, enforcer) as a daemonset, scales to ~1,000 nodes in tests, and installs in ~10–15 minutes. Integrates with Rancher and RKE2, exports policies as security-as-code, and supports air-gapped deployments.
AI-written summary · about
chapters (8)
- 0:00Start
- 1:36Areas of Security Consideration
- 3:59Layered Security: Defense in depth
- 5:02Run Time Security: Defense in Depth
- 7:12Runtime Behavioural Inspection
- 18:54Authentication Federation
- 19:38Role Based Access Control
- 20:09Authorised Cluster Endpoints
related talks
34mShift Left and Security-as-Code: Security on Kubernetes
20mCloudy with a Chance of Zero Trust: Navigating Security in the...
06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust Security
46mZero Effort Zero Trust K8s Security for Blocking Zero Day Attacks
38mProtect against unknown security vulnerabilities
31mSafeguarding Kubernetes: Pod Security Admission, NeuVector & Kyverno in the Ring
19m20 minutes + 8 security layers = secure Amazon EKS and Kubernetes
28mGet true zero-trust runtime security in Kubernetes with SUSE NeuVector