Istio and Cilium: Pushing the Boundaries of the Possible on Zero-Trust
Talkat Open Source Summit Europe 2023 · on Tuesday, 2023-09-19· at 16:35· Room 0E-1 (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
Shows how Cilium and Istio actually enforce zero‑trust: installs a kind cluster, deploys Cilium 1.14 (with Hubble) and Istio 1.19, applies Cilium network policies to deny all external egress, enrolls workloads in the mesh, enables strict mTLS, and routes allowed external calls through an Istio egress gateway that performs TLS origination. Demo proves L3 drops external traffic, Istio policies block HTTP methods (DELETE → 405), and observability dashboards show mTLS and traffic metrics.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 3:13CNI basics
- 4:20What is Cilium and eBPF
- 8:20Kubernetes Network Policy
- 10:30Service mesh and Istio
- 12:40Istio Ambient Mesh
- 15:52Zero trust explained
- 21:11Zero trust architecture
- 25:12Demo environment setup
- 27:46Installing Cilium
- 28:27Deploying Istio and tools
- 29:53Deploying sample apps
- 31:38Cilium Network Policy
- 33:07Istio zero trust policies
- 35:17Egress control and service entries
- 38:11Traffic and observability demo
- 39:39Istio dashboard metrics
- 40:01Zero trust best practices
- 40:45Q&A
related talks
32mImplementing Zero Trust in a Kubernetes Cluster with Istio
37mDemystifying Secure Application Communication with Zero Trust and Istio Without Sidecars
29mZero Trust for APIs: From Edge to Mesh with Istio- 37mDemystifying Secure Application Communication with Zero Trust and Istio Without Sidecars
37mWhat's a Zero-Trust Tunnel? Exploring Security and Simpler Operations w...
42mAmbient Mesh: new sidecar less & faster Istio for zero trust
24mZero Trust for Fintech: Building Secure Banking Infrastructure Wit...
44mA Guided Tour of ISTIO Ambient Mesh