~/talk

Zero Trust Database Access Using OpenZiti and JDBC

Talkat Percona Live 2022 · 2022-05-16..05-18· [databases, security]
links:none on file
slides:none on file

OpenZiti provides a JDBC wrapper called cdbc that delegates to existing drivers (Oracle, MySQL, Postgres, Progress) so apps use the same connection strings with a cdbc prefix, embeds SDKs into clients or servers, and runs an overlay with a controller and edge routers that use mutual TLS and ChaCha internals for outbound‑only tunnels. Policies use identity files (JSON or keystore), attributes control access, and live demos show assigning a DB role grants immediate access without VPN. OpenZiti JDBC (cdbc) wrapper and embed SDK in app or server

AI-written summary · about

  1. 0:00Start
  2. 8:07Controller
  3. 12:43Zero Trust Network Access
  4. 14:13Application Access
  5. 25:39Use of the Sdk
  6. 32:22Identities
  7. 34:42Role Attributes
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.