Topic: Zero-trust networking for micro-services & app segmentation

Description:The traditional approach to networking security is to use a firewall based on Layer3/Layer4 information to create a Safe perimeter. This traditional approach is also known as Perimeter-based security.However, the industry evolved over the last decade from monolithic predictive processes that would translate to a couple network endpoints to the massive scaling that you get<a>today</a>with scaled micro-services & cloud-native applications. The dynamic nature & scale of micro-services make it difficult to keep a typical White/Black list firewall model for your network.

This talk will explain the concept behind Zero-Trust networking, & how adding the endpoints context & identity to your network stack can alleviate those issues. More specifically, we will look into How the TCP stack can be modified in order to add any endpoints metadata & how this can be used with Orchestration systems such as Kubernetes to provide large-scale distributed network policing. We will also introduce Trireme as an example implementation for zero-trust networking in Kubernetes.

Agenda:
6:30 pm Pizza, Soda & Networking
7:00 pm Introductions by Dave Nielsen
7:15 pm 1st Talk
8:00 pm 2nd Talk
8:45 pm Q&A
9:00 pm WRap-up
9:30 pm Wrap up & done!

Sponsors: Intel, Aporeto andNavops by Univa