veyepar: Macro Security for your Microservices

Author(s):	Sreejith Anujan
Location	Room 9
Date	jan Thu 16	Days Raw Files
Start	15:45	First Raw Start	error-in-template
Duration	0:100:0	Offset	None
End	17:25	Last Raw End
Chapters
Total cuts_time	None min.

https://lca2020.linux.org.au/schedule/presentation/21/
raw-playlist raw-mp4-playlist encoded-files-playlist mp4 svg png

assets release.pdf Macro_Security_for_your_Microservices.json
logs
Admin: episode episode list cut list raw files day marks day marks day image_files

State:

Locked:

clear this to unlock

Locked by:

user/process that locked.

Start:

initially scheduled time from master, adjusted to match reality

Duration:

length in hh:mm:ss

Name:

Video Title (shows in video search results)

Emails:

email(s) of the presenter(s)

Released:

has someone authorised pubication

Normalise:

Channelcopy:

m=mono, 01=copy left to right, 10=right to left, 00=ignore.

Thumbnail:

filename.png

Description:

markdown

Breaking down a monolithic application into atomic services offers various benefits, including better agility, better scalability and better ability to reuse services.  However, microservices also have particular security needs -

Traffic encryption to defend against man-in-the-middle attack.
Fine grained access control and mutual TLS.
Auditing tools to identity who did what at what time!

Istio addresses the security challenges developers and operators face in a distributed microservice architecture. Istio provides strong identity, powerful policy, transparent TLS encryption, and authentication, authorization and audit (AAA) tools to protect your microservices and data.

In this hands on tutorial session, attendees will 
1) Understand the high level architecture of Istio 
2) Custom policy enforcement to  limit traffic to a service
3) Service Traffic encryption using Mutual TLS

Takeaway: Learn how  Istio enforces security features to mitigate insider and external threats against  your data, endpoints, communication and platform , wherever you run your microservices.

Pre-requisites: 
Intermediate understanding of container technology and microservices architecture. BYOD with a modern browser and an internet connection to access cloud based labs.

Comment:

production notes