DCSF 19 Zero Trust Networks Come to Enterprise Kubernetes

Jun 26, 20192 likes698 views

The document discusses a presentation about implementing zero trust networks on Docker Enterprise Kubernetes. It begins with motivations for zero trust like changes in app architectures, security threats, and deficiencies of traditional network zoning models. It then covers using Calico and Istio on Docker Enterprise to provide zero trust security with benefits like resilience against compromise and decoupling security from network location. The presentation includes a demo of a sample app and concludes with time for questions.

Spike Curtis
Senior Software Engineer, Tigera
Zero Trust Networks Come to Docker
Enterprise Kubernetes
Brent Salisbury
Software Alliance Engineer, Docker

Agenda
• Motivation for Zero Trust Networks
− Trends in application architecture
− Trends in threat landscape
− Deficiencies of the “Zone” model
• Building Zero Trust with Docker Enterprise, Calico & Istio
− Calico & Istio architecture
− DEMO!
• Conclusion, Q&A

Zero Trust Networking
The network is
always assumed to
be hostile

● Resilient against compromised devices,
workload, and network links
● Security is decoupled from network location
○ Simplified management
○ Flexible deployment
● VPNs are no longer needed
Zero Trust Networking
Advantages

Zero Trust Networking Software
Control Plane Data PlanePlatform

Calico & Istio Architecture
NodeNode
Pod
Workload
Istio
Citadel
Envoy
Felix
Pod
Workload Envoy
Felix
Mutual Authentication &
Encryption
Calico Policy
Dikastes Dikastes
IPTables IPTables

Demo Application
customer summary database

Entergy, a large utility company headquartered in New Orleans, LA has launched an initiative to modernize their application infrastructure. During the initial analysis, Entergy recognized the existing legacy infrastructure’s lack of compatibility with more recent operating systems would stand in the way of progress. As a result, containerization was fast-tracked as the solution that can help them with the various tenants of their strategy: hyperconvergence, SaaS (ServiceNow), and workload portability. Docker Enterprise proved to be the right solution to migrate roughly 850 legacy applications from Windows Server 2003 and 2008 to Windows Server 2016 quickly, securely and economically. Entergy IT has now delivered the ability for the business to run applications on-premise, in the cloud, and future-proofed the applications for migration to new versions of Windows Server. In this session, Entergy will talk about how they are modernizing their infrastructure to become more agile, secure, and enable workload portability.

Getting Started with Runtime Security on Azure Kubernetes Service (AKS)DevOps.com

This document discusses runtime security on Azure Kubernetes Service (AKS). It begins by introducing AKS and how it simplifies Kubernetes deployment and management. It then discusses the security concerns with containers and the need for runtime security. Runtime security involves monitoring activity within containers to detect unwanted behaviors. The document outlines how Sysdig provides runtime security for AKS through its agents that collect syscall data and Kubernetes audit logs. It analyzes this data using policies to detect anomalies and threats across containers, hosts, and Kubernetes clusters. Sysdig also integrates with other tools like Falco and Anchore to provide breadth and depth of security.

Virtual Desktop Infrastructure with Novell Endpoint Management SolutionsNovell

With the adoption of virtualization in the end-user computing space, organizations require solutions that go beyond device management and embrace the dynamic nature of end-user environments. This session will introduce you to the Novell VDI solution, enhanced by Novell ZENworks Configuration Management, and its ability to provide a secure, automated and personalized hosted desktop environment. This session will also focus on the Novell endpoint management technologies that enhance virtual desktop infrastructure.

Shifting security left simplifying security for k8s open shift environmentsLibbySchulze

This document discusses securing secrets in Kubernetes. It describes how attackers were able to hijack cloud resources by accessing unprotected credentials stored in a Kubernetes console. It then provides recommendations for securely managing secrets, including using Conjur to establish identity for applications and enforce authorization. It outlines best practices like regularly rotating secrets and removing hard-coded credentials. The document also describes how Conjur can integrate with Kubernetes to verify application identities and issue credentials without exposing secrets.

Automate Your Container Deployments SecurelyDevOps.com

Operations seeking to make their apps and APIs both performant and available to their users must bake effective application security tooling into their processes and infrastructure configurations. How can development and operations teams release at increasing velocity with app protection built into their CI/CD pipeline? A true next-generation, holistic web application and API protection platform does just that: operations teams can integrate security into their workflows and ensure new infrastructure and app code released to production is both effective and secure in any environment from cloud using containers to datacenters to a hybrid of these. Join application security expert Aneel Dadani from Signal Sciences to learn how your team can automate, deploy at scale safely while gaining layer 7 visibility in production environments. Attendees will learn: What constitutes effective application security within the context of cloud adoption and an ever expanding threat landscape How development teams can gain visibility into how their apps and APIs are being used in production and what vulnerabilities may exist that they overlooked How DevOps teams can scale their application footprint to meet demand while securing your codebase in production How to inspect request traffic at the API gateway or the ingress

CDK - The next big thing - Quang PhuongVietnam Open Infrastructure User Group

The document discusses Cloud Development Kit (CDK) as the next big thing for infrastructure as code (IaC). It provides an overview of IaC and some of its challenges around misconfiguration and security. The introduction of CDK aims to address these challenges by allowing IaC to be implemented as a programming language, inheriting strengths like object-oriented programming and better testing capabilities. Examples are shown for CDK on AWS, Terraform, and Kubernetes to demonstrate how infrastructure can be defined and provisioned code. The document concludes with a proposed practice of using CDK to define cloud infrastructure for a micro-services system from business applications.

DockerCon EU 2017 - General Session Day 1Docker, Inc.

This document discusses Docker and its container platform. It highlights Docker's momentum in the industry with over 21 million Docker hosts and 24 billion container downloads. The document then summarizes Docker's container platform and how it enables applications across diverse infrastructures and throughout the lifecycle. It also discusses how Docker can help modernize traditional applications and provide portability, agility and security. The remainder of the document focuses on how MetLife leveraged Docker to containerize applications, seeing benefits like a 70% reduction in VMs and 66% reduction in costs. It outlines Docker Enterprise Edition and its value in areas like security, multi-tenancy, policy automation and management capabilities for Swarm and Kubernetes.

CSTA - Cisco Security Technical Alliances, New Ecosystem Program Built on the...Cisco DevNet

A session in the DevNet Zone at Cisco Live, Berlin. Cisco Security is committed to an extensible product porfolio that enables integration with many best of breed technology partners. Through the Cisco Security Technical Alliance program (CSTA) customers can leverage more than a dozen APIs and integration points to share data with SIEM, MDM, EDM, IR, Vulnerability Management and many other critical security technologies found in the enterprise. Integration with nearly 100 partner solutions powers automation, provides additional context that speeds the resolution of critical events and increases overall security effectiveness.

Enabling Fast IT using Containers, Microservices and DAVROS models: an overviewCisco DevNet

A session in the DevNet Zone at Cisco Live, Berlin. As IT strives to become Fast IT, application architectures are undergoing fundamental disruption to enable faster development to deployment lifecycles. As part of this trend, the number of applications being created using microservices architectures and container technologies like Docker is exploding. This new "cloud native" framework makes deployments on-prem or public cloud seamless. In this session, we will look at these evolving trends and how several open source technologies have converged to provide enterprises the ability to innovate at unprecedented levels.

Using Kubernetes to make cellular data plans cheaper for 50M usersMirantis

Enabling application portability with the greatest of ease!Ken Owens

This document discusses enabling application portability with microservices using Project Shipped. It notes the challenges of developing applications in the digital disruption era across multiple languages, data sources, and clouds. Project Shipped enhances the software development lifecycle to provide continuous integration and deployment of microservices across internal and external clouds. It demonstrates using Mantl and Consul for microservice discovery, load balancing and deployment to multiple environments. The presentation concludes by discussing a proof of concept using Project Shipped and Cisco's CMX API to build and deploy a microservice to different environments.

Addressing the 8 Key Pain Points of Kubernetes Cluster ManagementEnterprise Management Associates

The document discusses the key challenges of managing multiple Kubernetes clusters across hybrid multi-cloud environments, including the need for unified operations management, visibility, compliance, policy management, application management, cost efficiencies, collaboration, and self-service capabilities. It introduces Red Hat Advanced Cluster Management as a solution that addresses these challenges through robust multi-cluster lifecycle management, policy-driven governance and compliance, and advanced application lifecycle management.

TechWiseTV Workshop: Cisco CloudCenter (CliQr)Robb Boyd

Migrating .NET Apps to CF, A Strategy for EnterprisesVMware Tanzu

The document discusses migrating .NET applications to Cloud Foundry to improve efficiency. It describes building a shared environment for .NET apps but notes limitations like lack of elasticity. Cloud Foundry provides true runtime elasticity and lifecycle management through BOSH. There are two paths for .NET Cloud Foundry parity: BOSH Windows for legacy apps and .NET Core on Linux. Considerations for migration include making apps cloud-ready and leveraging managed services.

Your Application Deserves Better than Kubernetes Ingress: Istio vs. KubernetesMirantis

F5 Cloud SolutionsMarketingArrowECS_CZ

F5 provides solutions for managing applications in multi-cloud environments through application-centric management rather than centralized management. This involves deploying application services through declarative templates and APIs, monitoring applications through customized analytics dashboards, and streaming telemetry through extensions to integrate with logging and analytics solutions. F5 automation tools include extensions that configure devices, deploy application services, and stream telemetry through a containerized API services gateway.

Cloud Native Security: New Approach for a New RealityCarlos Andrés García

Tsvi Korren, VP of Product Strategy at Aqua Security CISSP, has been an IT security professional for over 25 years. In previous positions at DEC and CA Inc., he consulted with various industry verticals on the process and organizational aspects of security. As the VP of Product Strategy at Aqua, he is tasked with delivering commercial and open source solutions that make Cloud Native workloads the most secure, compliant and resilient application delivery platform.

Cloud nativeKen Owens

The document discusses cloud native computing and digital disruption. Some key points include: - Enterprises are transitioning from traditional IT to cloud-based, mobile-first architectures using agile development practices like microservices and containers. - Cloud native approaches provide agility, flexibility, and treat infrastructure as code. This includes practices like infrastructure as code, software-defined networking, and security. - The Cloud Native Computing Foundation aims to simplify cloud native technologies through reference designs, common tools and taxonomy, and emerging standards. - They welcome open source project involvement and submissions to help standardize interoperable cloud native technologies and patterns. Areas of focus include containers, microservices, CI/CD, networking,

SOCstock 2021 The Cloud-native SOC Anton Chuvakin

The document discusses how a security operations center (SOC) must adapt to monitor organizations that use cloud-native technologies. While the core functions of a SOC remain, aspects like tools, data sources, skills, and processes must change. Specifically, a cloud-native SOC would focus on detection engineering over analyst roles, integrate more closely with development teams, and rely heavily on automation, observability data, and security tools tailored for cloud platforms. The key is for a SOC to modernize its functions while still fulfilling its primary mission of threat detection and response.

building microservicesCisco DevNet

Securing Your Cloud TransformationMarketingArrowECS_CZ

The document discusses managing risk in a digital world and securing cloud transformations. It notes that rapid cloud adoption, dynamic workforces, and fast technology innovation are increasing cloud risk. Specifically, it states that lack of visibility into cloud applications and infrastructure as well as skills shortages are major security challenges. The RSA advantage is then outlined, including expert cloud risk assessment and guidance, identity analytics and continuous monitoring across the entire cloud estate.

Discover the benefits of Kubernetes to host a SaaS solutionScaleway

The Journey to Becoming Cloud Native – A Three Step Path to Modernizing Appli...VMware Tanzu

SpringOne Platform 2016 Speaker: Alois Reitbauer; Chief Technology Strategist, Dynatrace The cloud has transformed the way we build applications. Early adopters prove that the benefits manifest in delivering value faster to the customer, less operational costs and more productive teams. The interesting question is how to get there, especially if you cannot simply start over and get your current applications benched. Through numerous customer engagements we have learned that there is a pattern followed by companies that do this successfully. This talk show you: -How to deploy faster without breaking things -Start decoupling a monolith without breaking your business logic. -Help developers build application using a new paradigm -Dynamically scale your applications to save costs -Manage highly dynamic larger-scale micro services without increasing operational costs As we will walk through the journey we share learning covering challenges and possible solutions on the organizational, development and operational side. As a company that has gone through this transformation itself while onboarding over 500 new customers we have some interesting stories to share.

Security as an Accelerator for Cloud AdoptionMarketingArrowECS_CZ

This document discusses how Check Point software provides security that accelerates cloud adoption. It notes that traditional security is not built for continuous integration and delivery (CI/CD) and causes delays. Check Point's CloudGuard suite provides visibility, compliance, network security, and threat prevention across public clouds, private clouds, and SaaS applications to enable secure DevOps. It also integrates with VMware NSX to provide automated, adaptive security policies and quarantine infected machines through shared security contexts between CloudGuard and NSX controllers.

Jak využít cloudu pro zvýšení bezpečnosti vašeho ITMarketingArrowECS_CZ

This document discusses how Thales can help organizations securely adopt cloud applications and manage access. It notes that single sign-on alone in a hybrid IT environment poses security risks if credentials are compromised. Thales' SafeNet Trusted Access allows validating identities, determining trust levels, and applying access controls for cloud services. It can leverage Windows authentication and PKI to enhance convenience without additional authentication. The document also outlines Thales' key management and encryption solutions for data at rest, applications, big data, and the cloud.

Azure F5 SolutionsMarketingArrowECS_CZ

Why modern cloud infrastructure require automationGerald Crescione

Docker adventures in Continuous Delivery - Alex VranceanuITCamp

Cloud Security: Perception Vs. RealityInternap

Sangfor's Presentation.pdfssusera76ea9

This document provides an overview of Sangfor Technologies Inc., a network security company. It discusses Sangfor's history and growth over 23 years, with R&D centers in China, the US, and elsewhere. Sangfor has developed security solutions like next-generation firewalls, endpoint security, and a business intelligence platform. The document highlights Sangfor's focus on innovation through a 20% R&D budget and over 1,500 patents. It also outlines Sangfor's global expansion, with offices and support centers around the world.

More Related Content

What's hot (20)

Enabling Fast IT using Containers, Microservices and DAVROS models: an overviewCisco DevNet

Using Kubernetes to make cellular data plans cheaper for 50M usersMirantis

Enabling application portability with the greatest of ease!Ken Owens

Addressing the 8 Key Pain Points of Kubernetes Cluster ManagementEnterprise Management Associates

TechWiseTV Workshop: Cisco CloudCenter (CliQr)Robb Boyd

Migrating .NET Apps to CF, A Strategy for EnterprisesVMware Tanzu

Your Application Deserves Better than Kubernetes Ingress: Istio vs. KubernetesMirantis

F5 Cloud SolutionsMarketingArrowECS_CZ

Cloud Native Security: New Approach for a New RealityCarlos Andrés García

Cloud nativeKen Owens

SOCstock 2021 The Cloud-native SOC Anton Chuvakin

building microservicesCisco DevNet

Securing Your Cloud TransformationMarketingArrowECS_CZ

Discover the benefits of Kubernetes to host a SaaS solutionScaleway

The Journey to Becoming Cloud Native – A Three Step Path to Modernizing Appli...VMware Tanzu

Security as an Accelerator for Cloud AdoptionMarketingArrowECS_CZ

Jak využít cloudu pro zvýšení bezpečnosti vašeho ITMarketingArrowECS_CZ

Azure F5 SolutionsMarketingArrowECS_CZ

Why modern cloud infrastructure require automationGerald Crescione

Docker adventures in Continuous Delivery - Alex VranceanuITCamp

Enabling Fast IT using Containers, Microservices and DAVROS models: an overviewCisco DevNet

Using Kubernetes to make cellular data plans cheaper for 50M usersMirantis

Enabling application portability with the greatest of ease!Ken Owens

Addressing the 8 Key Pain Points of Kubernetes Cluster ManagementEnterprise Management Associates

TechWiseTV Workshop: Cisco CloudCenter (CliQr)Robb Boyd

Migrating .NET Apps to CF, A Strategy for EnterprisesVMware Tanzu

Your Application Deserves Better than Kubernetes Ingress: Istio vs. KubernetesMirantis

F5 Cloud SolutionsMarketingArrowECS_CZ

Cloud Native Security: New Approach for a New RealityCarlos Andrés García

Cloud nativeKen Owens

SOCstock 2021 The Cloud-native SOC Anton Chuvakin

building microservicesCisco DevNet

Securing Your Cloud TransformationMarketingArrowECS_CZ

Discover the benefits of Kubernetes to host a SaaS solutionScaleway

The Journey to Becoming Cloud Native – A Three Step Path to Modernizing Appli...VMware Tanzu

Security as an Accelerator for Cloud AdoptionMarketingArrowECS_CZ

Jak využít cloudu pro zvýšení bezpečnosti vašeho ITMarketingArrowECS_CZ

Azure F5 SolutionsMarketingArrowECS_CZ

Why modern cloud infrastructure require automationGerald Crescione

Docker adventures in Continuous Delivery - Alex VranceanuITCamp

Similar to DCSF 19 Zero Trust Networks Come to Enterprise Kubernetes (20)

Cloud Security: Perception Vs. RealityInternap

Sangfor's Presentation.pdfssusera76ea9

Cisco Connect Ottawa 2018 dna assurance shortest path to network innocenceCisco Canada

How Cloud Computing will change how you and your team will run ITPeter HJ van Eijk

This document discusses the future of IT and cloud computing. It describes how cloud computing is the latest in a series of disruptive innovations in IT, following mainframes, client-server systems, and the internet. The document outlines how cloud computing enables new capabilities like automated deployment, massive scale through resource pooling, and access from anywhere through broad networks. It also discusses how cloud supply chains have become more complex and how security must be managed throughout these extended ecosystems. Finally, it summarizes that cloud computing is driving the industrialization of IT and that automated testing and quality control are essential to improve productivity.

Network Security Architecture InnoTech

This document discusses the need for adopting an industry standard network security architecture model to improve security without unnecessary complexity. It outlines the evolution of typical network architectures from closed to increasingly open and exposed. This has introduced new threats that cannot be addressed by isolated security solutions alone. The document advocates aligning security controls according to well-defined architectural principles and business needs, and properly managing the integrated system as a whole.

SeattleFall1Victor Angelbeat

The document provides an agenda and details for the Angelbeat Seattle WiFi event. The agenda includes presentations from companies on network security, endpoint security, load balancing, primary storage, WiFi/mobility, network analysis, and cloud services. Guidelines are provided for speakers, including no sales pitches and focusing presentations on end users. Event details cover raffle prizes, post-event vendor follow up options, and social media details with the hashtag #angelbeat.

21092018-C4E-What's Next for the Net? Security, Reliability, Capability, Perf...Center for Entrepreneurship (C4E), University of Cyprus

This document summarizes a presentation by Michael Nelson and Martin Levy of Cloudflare on the future of the internet. Some of the key points made in the presentation include: - The internet is changing faster than ever before and it is difficult to see the changes happening in the underlying infrastructure. - Focus should be placed on data rather than the network itself. - The edge is where much of the innovation and action will take place going forward through services like Cloudflare Workers that allow running custom code at the edge. - Trends include replacing hardware with cloud services, having intelligent systems optimize performance and security at the edge, and democratizing the web through application platforms.

Virtualized Firewall: Is it the panacea to secure distributed enterprises?Zscaler

CVDebabrata Mitra

The document provides details about Debabrata Mitra's professional experience and qualifications. He has over 13 years of experience in networking, security and cloud consulting. His core competencies include networking and security design/architecting, cloud design/architecting, automation, project management, and customer service. Currently he works as a design consultant for Cognizant where he has undertaken various projects related to networking, security, cloud and automation. Previously he has worked for Accenture, Wipro Infotech and Cognizant Technology Solutions in roles involving networking, security, project management and technical support. He holds a Diploma in Mechanical Engineering and has undergone various technical trainings.

Introduction of Cloudflare Solution for Mobile PaymentJean Ryu

On 29th Apr, I've run a webinar together with my colleagues about how Cloudflare can help mobile payment industry, focusing on how to accelerate and secure mobile payment applications. Although the rapid move to cloud is happening in every industry, there're still challenges and technical debts that are unaddressed. In this webinar we draw an overview picture of Cloudflare as a Cloud based solution and describes how it can help financial industry and introduces reference customers.

Reducing Cost with DNA AutomationCisco Canada

Are you facing some, or all, of these challenges? -Host Mobility (w/o stretching VLANs) -Network Segmentation (w/o implementing MPLS) -Roles-based Access Control (w/o end-to-end TrustSec) -Common Policy for Wired and Wireless (w/o multiple tools) Using Cisco technologies already available today, you can overcome these challenges and build an evolved Campus network to better meet your business objectives.

#PCMVision: VMware NSX - Transforming SecurityPCM

This document provides information about VMware, including: - VMware is headquartered in Palo Alto with over 17,800 employees worldwide and over $25 billion in revenues. - VMware promotes a software-defined data center approach using technologies like NSX for network virtualization, vSphere for compute virtualization, and vSAN for storage virtualization. - NSX allows for micro-segmentation within the data center, enabling granular security policies to be applied at the workload level for improved security compared to traditional perimeter-based approaches. - VMware AppDefense provides visibility and control over the application lifecycle to detect deviations from intended application behavior and automate security responses.

2021 01-27 reducing risk of ransomware webinarAlgoSec

Micro-segmentation protects your network by limiting the lateral movement of ransomware and other threats in your network. Yet successfully implementing a defense-in-depth strategy using micro-segmentation may be complicated. In this second webinar in a series of two webinars about ransomware, Yitzy Tannenbaum, Product Marketing Manager from AlgoSec and Jan Heijdra, Cisco Security Specialist, will provide a blueprint to implementing micro-segmentation using Cisco Secure Workload (formerly Cisco Tetration) and AlgoSec Network Security Policy Management. Join our live webinar to learn: • Why micro-segmentation is critical to fighting ransomware • Understand your business applications to create your micro-segmentation policy • Validate your micro-segmentation policy is accurate • Enforce these granular policies on workloads and summarized policies across your infrastructure • Use risk and vulnerability analysis to tighten your workload and network security • Identify and manage security risk and compliance in your micro-segmented environment

DPDK Architecture Musings - Andy Harveyharryvanhaaren

The document discusses the goals and requirements of an abstraction layer (AL) for networking applications. The AL aims to decouple innovation between network application vendors and hardware vendors to allow both sides to innovate independently. It seeks to define a common interface that supports different hardware architectures, provides offloads, and enables applications to efficiently move packets while being hypervisor agnostic and portable across systems. The requirements include functional characteristics like packet processing as well as non-functional aspects like security, performance, extensibility, and manageability.

Cisco Secure Firewall Test Drive PresentationDeepankarMitra5

Thinking about SDN and whether it is the right approach for your organization?Cisco Canada

Thinking about SDN and whether it is the right approach for your organization? Have you heard about Cisco’s Application Centric Infrastructure and F5 Synthesis yet? The path to radically simplify and accelerate application deployment and datacenter agility can be a phased approach that leverages your existing investment. Rapid delivery of applications to anyone, anywhere, at any time is complex—and many businesses struggle with it.

Cisco Connect 2018 Thailand - Enabling the next gen data center transformatio...NetworkCollaborators

Patomphon Vimolket introduces Cisco's vision for enabling next-generation data center transformations through software-defined technologies. The document discusses challenges like evolving threats, manual operations, and digital disruption. It presents Cisco's data center reference architecture and portfolio including Cisco CloudCenter, Nexus, UCS, HyperFlex, ACI, Intersight, and security solutions like Tetration and AppDynamics. These provide application visibility, infrastructure optimization, and security to help businesses adapt to challenges like multicloud, microservices, and more dynamic environments.

Cisco DNAMohammad ali Safvati

It’s the difference between doing thousands of tasks manually and having an automated system that helps you focus on business goals. The advent of big data and analytics helps to enable better real-time decision making, automation, and efficiencies necessary to deliver such digitalized applications. Cisco DNA automation and assurance are built on a software-defined networking (SDN) controller, rich contextual analytics, network virtualization and the cloud.

Introducing a Security Feedback Loop to your CI PipelinesCodefresh

Watch the webinar here: https://codefresh.io/security-feedback-loop-lp/ Sign up for a FREE Codefresh account today: https://codefresh.io/codefresh-signup/ We're all looking at ways to prevent vulnerabilities from escaping into our production environments. Why not require scans of your Docker images before they're even uploaded to your production Docker registry? SHIFT LEFT! Codefresh has worked with Twistlock to run Twist CLI using a Docker image as a build step in CI pipelines. Join Codefresh, Twistlock, and Steelcase as we demonstrate setting up vulnerability and compliance thresholds in a CI pipeline. We will show you how to give your teams access to your Docker images' security reports & trace back to your report from your production Kubernetes cluster using Codefresh.

f5_synthesis_cisco_connect.pdfGrigoryShkolnik1

The document outlines an agenda for an F5 Synthesis Information Session. The agenda includes introductions, a discussion of Software Defined Application Services, reference architectures, total cost of ownership models, ecosystem partners, and global services. It also provides an overview of key technology challenges like mobility, cloud computing, threats, and the growth of software-defined networks and APIs.

Cloud Security: Perception Vs. RealityInternap

Sangfor's Presentation.pdfssusera76ea9

Cisco Connect Ottawa 2018 dna assurance shortest path to network innocenceCisco Canada

How Cloud Computing will change how you and your team will run ITPeter HJ van Eijk

Network Security Architecture InnoTech

SeattleFall1Victor Angelbeat

21092018-C4E-What's Next for the Net? Security, Reliability, Capability, Perf...Center for Entrepreneurship (C4E), University of Cyprus

Virtualized Firewall: Is it the panacea to secure distributed enterprises?Zscaler

CVDebabrata Mitra

Introduction of Cloudflare Solution for Mobile PaymentJean Ryu

Reducing Cost with DNA AutomationCisco Canada

#PCMVision: VMware NSX - Transforming SecurityPCM

2021 01-27 reducing risk of ransomware webinarAlgoSec

DPDK Architecture Musings - Andy Harveyharryvanhaaren

Cisco Secure Firewall Test Drive PresentationDeepankarMitra5

Thinking about SDN and whether it is the right approach for your organization?Cisco Canada

Cisco Connect 2018 Thailand - Enabling the next gen data center transformatio...NetworkCollaborators

Cisco DNAMohammad ali Safvati

Introducing a Security Feedback Loop to your CI PipelinesCodefresh

f5_synthesis_cisco_connect.pdfGrigoryShkolnik1

More from Docker, Inc. (20)

Containerize Your Game Server for the Best Multiplayer Experience Docker, Inc.

Raymond Arifianto, AccelByte and Mark Mandel, Google - We have been deploying containerized micro-services for our Game Backend Services for a while. Now we are tackling the challenge to scale up fleets of game dedicated servers in multiple regions, multiple data centers and multiple providers - some in bare metal, some in Cloud. So we leverage docker containerization to deploy Game Servers to achieve Portability, Fast Deployment and Predictability, enabling us to scale up to thousands of servers, on demand, without a sweat.

How to Improve Your Image Builds Using Advance Docker BuildDocker, Inc.

Nicholas Dille, Haufe-Lexware + Docker Captain - Docker continues to be the standard tool for building container images. For more than a year Docker ships with BuildKit as an alternative image builder, providing advanced features for secret and cache management. These features help to make image builds faster and more secure. In this session, Docker Captain Nicholas Dille will teach you how to use Buildkit features to your advantage.

Build & Deploy Multi-Container Applications to AWSDocker, Inc.

Lukonde Mwila, Entelect - As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud. In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics: - Docker Compose - Containerizing an Nginx Server - Containerizing an React App - Containerizing an Node.JS App - Containerizing anMongoDB App - Runing Multi-Container App Locally - Creating a CI/CD Pipeline - Adding a build stage to test containers and push images to Docker Hub - Deploying Multi-Container App to AWS Elastic Beanstalk Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking. After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.

Securing Your Containerized Applications with NGINXDocker, Inc.

How To Build and Run Node Apps with Docker and ComposeDocker, Inc.

Kathleen Juell, Digital Ocean - Containers are an essential part of today's microservice ecosystem, as they allow developers and operators to maintain standards of reliability and reproducibility in fast-paced deployment scenarios. And while there are best practices that extend across stacks in containerized environments, there are also things that make each stack distinct, starting with the application image itself. This talk will dive into some of these particularities, both at the image and service level, while also covering general best practices for building and running Node applications with database backends using Docker and Compose.

Hands-on Helm Docker, Inc.

Distributed Deep Learning with Docker at SalesforceDocker, Inc.

Jeff Hajewski, Salesforce - There is a wealth of information on building deep learning models with PyTorch or TensorFlow. Anyone interested in building a deep learning model is only a quick search away from a number of clear and well written tutorials that will take them from zero knowledge to having a working image classifier. But what happens when you need to deploy these models in a production setting? At Salesforce, we use TensorFlow models to help us provide customers with insights into their data, and we do this as close to real-time as possible. Designing these systems in a scalable manner requires overcoming a number of design challenges, but the core component is Docker. Docker enables us to design highly scalable systems by allowing us to focus on service interactions, rather than how our services will interact with the hardware. Docker is also at the core of our test infrastructure, allowing developers and data scientists to build and test the system in an end to end manner on their local machines. While some of this may sound complex, the core message is simplicity - Docker allows us to focus on the aspects of the system that matter, greatly simplifying our lives.

The First 10M Pulls: Building The Official Curl Image for Docker HubDocker, Inc.

James Fuller, webcomposite s.r.o. - Curl is the venerable (yet very modern) 'swiss army knife' command line tool and library for transferring data with URLs. Recently we (the Curl team) decided to build a release for Docker Hub. This talk will outline our current development workflow with respect to the docker image and provide insights on what it takes to build a docker image for mass public consumption. We are also keen to learn from users and other developers how we might improve and enhance the official curl docker image.

Monitoring in a Microservices WorldDocker, Inc.

Fabian Stäber, Instana - In recent years, we saw a great paradigm shift in software engineering away from static monolithic applications towards dynamic distributed horizontally scalable architectures. Docker is one of the key technologies enabling this development. This shift poses a lot of new challenges for application monitoring, ranging from practical issues (need for automation) to technical challenges (Docker networking) to organizational topics (blurring line between software engineers and operations) to fundamental questions (define what is an application). In this talk we show how Docker changed the way we do monitoring, how modern application monitoring systems work, and what future developments we expect.

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...Docker, Inc.

Clemente Biondo, Engineering Ingegneria Informatica - When the COVID 19 pandemic started, Engineering Ingegneria Informatica Group (1.25 billion euros of revenues, 65 offices around the world, 12.000 employees) was forced to put their digital transformation to the test in order to maintain operational continuity. In this session, Clemente Biondo, the Tech Lead of the Information Systems Department, will share how his company is reacting to this unforeseeable scenario and how Docker-driven digital transformation had paved the path for work to continue remotely. Clemente will discuss learnings moving from colocated teams, manual approaches, email based-business processes, and a monolithic application to a mature DevOps culture characterized by a distributed autonomous workforce and a continuous deployment process that deploys backward-compatible Docker containerized microservices into hybrid multi cloud datacenters an average of twice a day with zero-downtime. He will detail how they use Docker to unify dev, test and production environments, and as an efficient and automated mechanism for deploying applications. Lastly, Clemente shares how, in our darkest hour, he and others are working to shine their brightest light.

Predicting Space Weather with DockerDocker, Inc.

The document discusses how NOAA's Space Weather Prediction Center transitioned from a monolithic architecture to microservices using Docker. It describes how they started with a small verification project, then replaced their critical GOES satellite data source. This improved developers' morale and delivery speed. They encountered some security issues initially but learned from them. The transition was very successful and allowed them to quickly expand their mission to forecast aviation impacts using scientists' models packaged as Docker services.

Become a Docker Power User With Microsoft Visual Studio CodeDocker, Inc.

Brian Christner, 56k + Docker Captain - In this session, we will unlock the full potential of using Microsoft Visual Studio Code (VS Code) and Docker Desktop to turn you into a Docker Power User. When we expand and utilize the VS Code Docker plugin, we can take our projects and Docker skills to the next level. In addition to using VS Code, we streamline our Docker Desktop development workflow with less context switching and built-in shortcuts. You will learn how to bootstrap new projects, quickly write Dockerfiles utilizing templates, build, run, and interact with containers all from VS Code.

How to Use Mirroring and Caching to Optimize your Container RegistryDocker, Inc.

Monolithic to Microservices + Docker = SDLC on Steroids!Docker, Inc.

Ashish Sharma, SS&C Eze - SS&C Eze provides various products in the stock market domain. We spent the last couple of years building Eclipse which is an investment suite born in cloud. The journey so far has been very interesting. The very first version of the product were a bunch of monolithic windows services and deployed using Octopus tool. We successfully managed to bring all the monolithic problem to the cloud and created a nightmare for ourselves. We then started applying microservices architecture principles and started breaking the monolithic into small services. Very soon we realized that we need a better packaging/deployment tool. Docker looked like a magical solution to our problem. Since its adoption, It has not only solved the deployment problem for us but has made a deep impact on different aspects of SDLC. It allowed us to use heterogeneous technology stacks, simplified development environment setup, simplified our testing strategy, improved our speed of delivery, and made our developers more productive. In this talk I would like to share our experience of using Docker and its positive impact on our SDLC.

Kubernetes at Datadog ScaleDocker, Inc.

Kubernetes networking can be complex to scale due to issues like growing iptables rules, but newer solutions are helping. Pod networking uses CNI plugins like flannel or Calico to assign each pod an IP and allow communication. Service networking uses kube-proxy and iptables or IPVS for load balancing to pods. DNS is used to resolve service names to IPs. While Kubernetes networking brings flexibility, operators must learn the nuances of their specific CNI plugin and issues can arise, but the ecosystem adapts quickly to new needs and changes don't impact all workloads.

Labels, Labels, Labels Docker, Inc.

Andy Clemenko, StackRox - One underutilized, and amazing, thing about the docker image scheme is labels. Labels are a built in way to document all aspects about the image itself. Think about all the information that the tags inside your clothing carry. If you care to look you can find out everything about the garment. All that information can be very valuable. Now think about how we can leverage labels to carry similar information. We can even use the labels to contain Docker Compose or even Kubernetes Yaml. We can even include labels into the CI/CD process making things more secure and smoother. Come find out some fun techniques on how to leverage labels to do some fun and amazing things.

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment ModelDocker, Inc.

Micro Focus uses Docker Hub at scale to support its software delivery and deployment model. Some key points: - Docker Hub is used as the registry service for Micro Focus container images - It allows for optimized, secure, reliable and cost-effective software delivery through deployments and updates of container images to customers and partners - Micro Focus leverages features like private repositories, offline/online access, signing and scanning of images, and integration with CI/CD pipelines - Over 1,650 organizations, 450 repositories, and 18 teams are used on Docker Hub to manage access and deliver software from Micro Focus

Build & Deploy Multi-Container Applications to AWSDocker, Inc.

Lukonde Mwila, Entelect As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud. In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics: - Docker Compose - Containerizing an Nginx Server - Containerizing an React App - Containerizing an Node.JS App - Containerizing anMongoDB App - Runing Multi-Container App Locally - Creating a CI/CD Pipeline - Adding a build stage to test containers and push images to Docker Hub - Deploying Multi-Container App to AWS Elastic Beanstalk Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking. After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...Docker, Inc.

Elton Stoneman, Docker Captain + Container Consultant and Trainer How do you provide a SaaS offering when your product is a 10-year old Fortran app, currently built to run on Windows 10? With Docker and Kubernetes of course - and you can do it in a week (... to prototype level at least). In this session I'll walk through the processes and practicalities of taking an older Windows app, making it run in containers with Kubernetes, and then building a simple API wrapper to host the whole stack as a cloud-based SaaS product. There's a lot of technology here from a real world case study, and I'll focus on: - running Windows apps in Docker containers - building a .NET Core API which can run in Linux or Windows containers - running the stack in Kubernetes with Docker Desktop locally and AKS in the cloud - configuring AKS workloads in Azure to burst out to Azure Container Instances And there's a core theme to this session: Docker and Kubernetes are complex technologies, but they're the key to modern development. If you invest time learning them, they make projects like this simple, portable, fast and fun.

Developing with Docker for the Arm ArchitectureDocker, Inc.

This virtual meetup introduces the concepts and best practices of using Docker containers for software development for the Arm architecture across a variety of hardware systems. Using Docker Desktop on Windows or Mac, Amazon Web Services (AWS) A1 instances, and embedded Linux, we will demonstrate the latest Docker features to build, share, and run multi-architecture images with transparent support for Arm.

Containerize Your Game Server for the Best Multiplayer Experience Docker, Inc.

How to Improve Your Image Builds Using Advance Docker BuildDocker, Inc.

Build & Deploy Multi-Container Applications to AWSDocker, Inc.

Securing Your Containerized Applications with NGINXDocker, Inc.

How To Build and Run Node Apps with Docker and ComposeDocker, Inc.

Hands-on Helm Docker, Inc.

Distributed Deep Learning with Docker at SalesforceDocker, Inc.

The First 10M Pulls: Building The Official Curl Image for Docker HubDocker, Inc.

Monitoring in a Microservices WorldDocker, Inc.

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...Docker, Inc.

Predicting Space Weather with DockerDocker, Inc.

Become a Docker Power User With Microsoft Visual Studio CodeDocker, Inc.

How to Use Mirroring and Caching to Optimize your Container RegistryDocker, Inc.

Monolithic to Microservices + Docker = SDLC on Steroids!Docker, Inc.

Kubernetes at Datadog ScaleDocker, Inc.

Labels, Labels, Labels Docker, Inc.

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment ModelDocker, Inc.

Build & Deploy Multi-Container Applications to AWSDocker, Inc.

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...Docker, Inc.

Developing with Docker for the Arm ArchitectureDocker, Inc.

Recently uploaded (20)

Massive Power Outage Hits Spain, Portugal, and France: Causes, Impact, and On...Aqusag Technologies

TrustArc Webinar: Consumer Expectations vs Corporate Realities on Data Broker...TrustArc

Most consumers believe they’re making informed decisions about their personal data—adjusting privacy settings, blocking trackers, and opting out where they can. However, our new research reveals that while awareness is high, taking meaningful action is still lacking. On the corporate side, many organizations report strong policies for managing third-party data and consumer consent yet fall short when it comes to consistency, accountability and transparency. This session will explore the research findings from TrustArc’s Privacy Pulse Survey, examining consumer attitudes toward personal data collection and practical suggestions for corporate practices around purchasing third-party data. Attendees will learn: - Consumer awareness around data brokers and what consumers are doing to limit data collection - How businesses assess third-party vendors and their consent management operations - Where business preparedness needs improvement - What these trends mean for the future of privacy governance and public trust This discussion is essential for privacy, risk, and compliance professionals who want to ground their strategies in current data and prepare for what’s next in the privacy landscape.

DevOpsDays Atlanta 2025 - Building 10x Development Organizations.pptxJustin Reock

Building 10x Organizations with Modern Productivity Metrics 10x developers may be a myth, but 10x organizations are very real, as proven by the influential study performed in the 1980s, ‘The Coding War Games.’ Right now, here in early 2025, we seem to be experiencing YAPP (Yet Another Productivity Philosophy), and that philosophy is converging on developer experience. It seems that with every new method we invent for the delivery of products, whether physical or virtual, we reinvent productivity philosophies to go alongside them. But which of these approaches actually work? DORA? SPACE? DevEx? What should we invest in and create urgency behind today, so that we don’t find ourselves having the same discussion again in a decade?

Electronic_Mail_Attacks-1-35.pdf by xploitniftliyevhuseyn

How analogue intelligence complements AIPaul Rowe

Artificial Intelligence is providing benefits in many areas of work within the heritage sector, from image analysis, to ideas generation, and new research tools. However, it is more critical than ever for people, with analogue intelligence, to ensure the integrity and ethical use of AI. Including real people can improve the use of AI by identifying potential biases, cross-checking results, refining workflows, and providing contextual relevance to AI-driven results. News about the impact of AI often paints a rosy picture. In practice, there are many potential pitfalls. This presentation discusses these issues and looks at the role of analogue intelligence and analogue interfaces in providing the best results to our audiences. How do we deal with factually incorrect results? How do we get content generated that better reflects the diversity of our communities? What roles are there for physical, in-person experiences in the digital world?

Transcript: #StandardsGoals for 2025: Standards & certification roundup - Tec...BookNet Canada

Book industry standards are evolving rapidly. In the first part of this session, we’ll share an overview of key developments from 2024 and the early months of 2025. Then, BookNet’s resident standards expert, Tom Richardson, and CEO, Lauren Stewart, have a forward-looking conversation about what’s next. Link to recording, presentation slides, and accompanying resource: https://bnctechforum.ca/sessions/standardsgoals-for-2025-standards-certification-roundup/ Presented by BookNet Canada on May 6, 2025 with support from the Department of Canadian Heritage.

Generative Artificial Intelligence (GenAI) in BusinessDr. Tathagat Varma

ThousandEyes Partner Innovation Updates for May 2025ThousandEyes

Linux Professional Institute LPIC-1 Exam.pdfRHCSA Guru

Dev Dives: Automate and orchestrate your processes with UiPath MaestroUiPathCommunity

This session is designed to equip developers with the skills needed to build mission-critical, end-to-end processes that seamlessly orchestrate agents, people, and robots. 📕 Here's what you can expect: - Modeling: Build end-to-end processes using BPMN. - Implementing: Integrate agentic tasks, RPA, APIs, and advanced decisioning into processes. - Operating: Control process instances with rewind, replay, pause, and stop functions. - Monitoring: Use dashboards and embedded analytics for real-time insights into process instances. This webinar is a must-attend for developers looking to enhance their agentic automation skills and orchestrate robust, mission-critical processes. 👨‍🏫 Speaker: Andrei Vintila, Principal Product Manager @UiPath This session streamed live on April 29, 2025, 16:00 CET. Check out all our upcoming Dev Dives sessions at https://community.uipath.com/dev-dives-automation-developer-2025/.

TrsLabs - Fintech Product & Business ConsultingTrs Labs

Hybrid Growth Mandate Model with TrsLabs Strategic Investments, Inorganic Growth, Business Model Pivoting are critical activities that business don't do/change everyday. In cases like this, it may benefit your business to choose a temporary external consultant. An unbiased plan driven by clearcut deliverables, market dynamics and without the influence of your internal office equations empower business leaders to make right choices. Getting things done within a budget within a timeframe is key to Growing Business - No matter whether you are a start-up or a big company Talk to us & Unlock the competitive advantage

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

Talk at the final event of Data Fusion Dynamics: A Collaborative UK-Saudi Initiative in Cybersecurity and Artificial Intelligence funded by the British Council UK-Saudi Challenge Fund 2024, Cardiff Metropolitan University, 29th April 2025 https://alandix.com/academic/talks/CMet2025-AI-Changes-Everything/ Is AI just another technology, or does it fundamentally change the way we live and think? Every technology has a direct impact with micro-ethical consequences, some good, some bad. However more profound are the ways in which some technologies reshape the very fabric of society with macro-ethical impacts. The invention of the stirrup revolutionised mounted combat, but as a side effect gave rise to the feudal system, which still shapes politics today. The internal combustion engine offers personal freedom and creates pollution, but has also transformed the nature of urban planning and international trade. When we look at AI the micro-ethical issues, such as bias, are most obvious, but the macro-ethical challenges may be greater. At a micro-ethical level AI has the potential to deepen social, ethnic and gender bias, issues I have warned about since the early 1990s! It is also being used increasingly on the battlefield. However, it also offers amazing opportunities in health and educations, as the recent Nobel prizes for the developers of AlphaFold illustrate. More radically, the need to encode ethics acts as a mirror to surface essential ethical problems and conflicts. At the macro-ethical level, by the early 2000s digital technology had already begun to undermine sovereignty (e.g. gambling), market economics (through network effects and emergent monopolies), and the very meaning of money. Modern AI is the child of big data, big computation and ultimately big business, intensifying the inherent tendency of digital technology to concentrate power. AI is already unravelling the fundamentals of the social, political and economic world around us, but this is a world that needs radical reimagining to overcome the global environmental and human challenges that confront us. Our challenge is whether to let the threads fall as they may, or to use them to weave a better future.

Andrew Marnell: Transforming Business Strategy Through Data-Driven InsightsAndrew Marnell

HCL Nomad Web – Best Practices and Managing Multiuser Environmentspanagenda

Webinar Recording: https://www.panagenda.com/webinars/hcl-nomad-web-best-practices-and-managing-multiuser-environments/ HCL Nomad Web is heralded as the next generation of the HCL Notes client, offering numerous advantages such as eliminating the need for packaging, distribution, and installation. Nomad Web client upgrades will be installed “automatically” in the background. This significantly reduces the administrative footprint compared to traditional HCL Notes clients. However, troubleshooting issues in Nomad Web present unique challenges compared to the Notes client. Join Christoph and Marc as they demonstrate how to simplify the troubleshooting process in HCL Nomad Web, ensuring a smoother and more efficient user experience. In this webinar, we will explore effective strategies for diagnosing and resolving common problems in HCL Nomad Web, including - Accessing the console - Locating and interpreting log files - Accessing the data folder within the browser’s cache (using OPFS) - Understand the difference between single- and multi-user scenarios - Utilizing Client Clocking

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

Splunk Security Update | Public Sector Summit Germany 2025Splunk

Linux Support for SMARC: How Toradex Empowers Embedded DevelopersToradex

Toradex brings robust Linux support to SMARC (Smart Mobility Architecture), ensuring high performance and long-term reliability for embedded applications. Here’s how: • Optimized Torizon OS & Yocto Support – Toradex provides Torizon OS, a Debian-based easy-to-use platform, and Yocto BSPs for customized Linux images on SMARC modules. • Seamless Integration with i.MX 8M Plus and i.MX 95 – Toradex SMARC solutions leverage NXP’s i.MX 8 M Plus and i.MX 95 SoCs, delivering power efficiency and AI-ready performance. • Secure and Reliable – With Secure Boot, over-the-air (OTA) updates, and LTS kernel support, Toradex ensures industrial-grade security and longevity. • Containerized Workflows for AI & IoT – Support for Docker, ROS, and real-time Linux enables scalable AI, ML, and IoT applications. • Strong Ecosystem & Developer Support – Toradex offers comprehensive documentation, developer tools, and dedicated support, accelerating time-to-market. With Toradex’s Linux support for SMARC, developers get a scalable, secure, and high-performance solution for industrial, medical, and AI-driven applications. Do you have a specific project or application in mind where you're considering SMARC? We can help with Free Compatibility Check and help you with quick time-to-market For more information: https://www.toradex.com/computer-on-modules/smarc-arm-family

Rusty Waters: Elevating Lakehouses Beyond Sparkcarlyakerly1

Spark is a powerhouse for large datasets, but when it comes to smaller data workloads, its overhead can sometimes slow things down. What if you could achieve high performance and efficiency without the need for Spark? At S&P Global Commodity Insights, having a complete view of global energy and commodities markets enables customers to make data-driven decisions with confidence and create long-term, sustainable value. 🌍 Explore delta-rs + CDC and how these open-source innovations power lightweight, high-performance data applications beyond Spark! 🚀

Cybersecurity Identity and Access Solutions using Azure ADVICTOR MAESTRE RAMIREZ

Drupalcamp Finland – Measuring Front-end Energy ConsumptionExove

Massive Power Outage Hits Spain, Portugal, and France: Causes, Impact, and On...Aqusag Technologies

TrustArc Webinar: Consumer Expectations vs Corporate Realities on Data Broker...TrustArc

DevOpsDays Atlanta 2025 - Building 10x Development Organizations.pptxJustin Reock

Electronic_Mail_Attacks-1-35.pdf by xploitniftliyevhuseyn

How analogue intelligence complements AIPaul Rowe

Transcript: #StandardsGoals for 2025: Standards & certification roundup - Tec...BookNet Canada

Generative Artificial Intelligence (GenAI) in BusinessDr. Tathagat Varma

ThousandEyes Partner Innovation Updates for May 2025ThousandEyes

Linux Professional Institute LPIC-1 Exam.pdfRHCSA Guru

Dev Dives: Automate and orchestrate your processes with UiPath MaestroUiPathCommunity

TrsLabs - Fintech Product & Business ConsultingTrs Labs

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

Andrew Marnell: Transforming Business Strategy Through Data-Driven InsightsAndrew Marnell

HCL Nomad Web – Best Practices and Managing Multiuser Environmentspanagenda

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

Splunk Security Update | Public Sector Summit Germany 2025Splunk

Linux Support for SMARC: How Toradex Empowers Embedded DevelopersToradex

Rusty Waters: Elevating Lakehouses Beyond Sparkcarlyakerly1

Cybersecurity Identity and Access Solutions using Azure ADVICTOR MAESTRE RAMIREZ

Drupalcamp Finland – Measuring Front-end Energy ConsumptionExove

DCSF 19 Zero Trust Networks Come to Enterprise Kubernetes

1. Spike Curtis Senior Software Engineer, Tigera Zero Trust Networks Come to Docker Enterprise Kubernetes Brent Salisbury Software Alliance Engineer, Docker

2. Agenda • Motivation for Zero Trust Networks − Trends in application architecture − Trends in threat landscape − Deficiencies of the “Zone” model • Building Zero Trust with Docker Enterprise, Calico & Istio − Calico & Istio architecture − DEMO! • Conclusion, Q&A

3. Intra-Security Zone Traffic

4. Intra-Security Zone Traffic Hairpin

5. Cost Analysis

6. Inefficient Provisioning

7. Compute Provisioning

8. Distributing Policy Across Compute

9. Growing Attack Surface

10. Growing Attack Surface

11. Zero Trust Networking The network is always assumed to be hostile

12. Zero Trust Networking

13. Zero Trust Networking

14. LAN Zero Trust Networking

15. WAN Zero Trust Networking

16. Internet Zero Trust Networking

17. ● Resilient against compromised devices, workload, and network links ● Security is decoupled from network location ○ Simplified management ○ Flexible deployment ● VPNs are no longer needed Zero Trust Networking Advantages

18. Zero Trust Networking Software Control Plane Data PlanePlatform

19. Calico & Istio Architecture NodeNode Pod Workload Istio Citadel Envoy Felix Pod Workload Envoy Felix Mutual Authentication & Encryption Calico Policy Dikastes Dikastes IPTables IPTables

20. Demo Application customer summary database

21. Q&A

DCSF 19 Zero Trust Networks Come to Enterprise Kubernetes

Recommended

More Related Content

What's hot (20)

Similar to DCSF 19 Zero Trust Networks Come to Enterprise Kubernetes (20)

More from Docker, Inc. (20)

Recently uploaded (20)

DCSF 19 Zero Trust Networks Come to Enterprise Kubernetes