Death of the Trusted Internet
summary
USDS attempts to kill the Trusted Internet Connection by replacing physical chokepoints with a cloud-aware architecture that actually moves packets not policy. Work centers on packet mirroring to Einstein from Amazon gov cloud load balancers, virtualizing TIC as an ELB that replicates traffic, using VPCs and iptables when needed, and avoiding classified signatures in third‑party clouds. Zero‑trust is a goal but impractical now; the mirrored‑ELB prototype proves feasible while exposing cost, performance, and policy complications.
AI-written summary · about
chapters (14)
- 0:00Intro
- 0:35UNITED STATES DIGITAL SERVICE
- 2:20ONCE UPON A TIME
- 4:50TRUSTED INTERNET CONNECTION
- 5:52BACK IN 2007
- 6:33WHERE IS THE PERIMETER?
- 9:44FURTHER COMPLICATIONS
- 11:29CAN WE WORK AROUND IT?
- 14:04ZERO TRUST NETWORK
- 17:56TIC MANAGEMENT LOCATION
- 19:38EINSTEIN
- 25:13THINGS LEFT TO SORT OUT
- 27:20WHY IS THIS SO HARD?
- 29:45CURRENT STATUS
related talks
35mDefense Through Invisibility: Zero Trust Security for the Enterprise
45mZero Trust: Getting to Step One..and What to Do When You Get There
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos
10mEconomics of Zero Trust
23mZero Trust: From Airports to Identity-Aware Proxies
40mZero Trust, Zero Pain: A Practical Implementation with Intrinsic Security
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
28mZero Trust Architecture - Now We Must, But What It Means?