Rethinking Security from the Ground Up with a Microservices Mindset
The presentation at OSCON 2016 by Andy Randall, CEO of Tigera, discussed the importance of rethinking security strategies with a microservices mindset. Project Calico, sponsored by Tigera, emphasizes the need for better security measures to prevent breaches like the ones faced by Sony. The talk highlighted the challenges posed by increased complexity and the importance of resource fungibility in modern cybersecurity practices.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
E N D
Presentation Transcript
Rethinking security from the ground up with a microservices mindset OSCON 2016 Andy Randall | CEO, Tigera | @andrew_randall May 17, 2016 Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Introductions Project Calico is sponsored by Tigera, Inc. | www.tigera.io
For more than two months Sonys hackers roamed freely, identifying what they wanted to steal. This was possible because the studio, with few exceptions, didn t segregate or provide extra security for even its most precious secrets. In effect,once the invaders made it past the network gates they could go anywhere they wanted because Sony hadn t locked any doors. Project Calico is sponsored by Tigera, Inc. | www.tigera.io
DMZ Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Generalizing to the n-tier DMZ (where n usually = 3) Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Fast forward to the present Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Increased complexity Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Resource Fungibility Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Virtualize the n-tier model with layer 2 overlays + virtual firewalls? Virtual L2 network Virtual L2 network Virtual L2 network Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Tear down the walls? Project Calico is sponsored by Tigera, Inc. | www.tigera.io
The opportunity? Project Calico is sponsored by Tigera, Inc. | www.tigera.io
The opportunity? Project Calico is sponsored by Tigera, Inc. | www.tigera.io
The Distributed Firewall eth0 eth0 192.168.1.2 192.168.1.5 10.0.0.1 10.0.0.2 Routing Routing eth0 eth0 eth0 eth0 Network Fabric 192.168.1.4 192.168.1.6 eth0 eth0 192.168.1.7 192.168.1.3 Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Project Calico architecture Developer intent from orchestrator eth0 iptables Felix 192.168.1.2 Routes eth0 192.168.1.4 Route Reflector BGP eth0 Kernel 192.168.1.7 Route as native IP without L2 overlays Project Calico is sponsored by Tigera, Inc. | www.tigera.io
Where this is headed De facto industry standard for policy-driven networking for cloud native applications Flat routed IP networking with fine-grained policy Broad set of overlay options Project Calico is sponsored by Tigera, Inc. | www.tigera.io
