Jun 29, 2022 Implementing Zero Trust for Applications with the Tanzu Application Platform and Tetrate Service Bridge (TSB) More and more organizations today use microservices and distributed architectures to achieve agility and scale; the most recent CNCF survey, for examp Read more
Jun 23, 2022 Why would you need SPIRE for authentication with Istio? Istio 1.14 was released in June of this year, and one of the most notable features of this release is support for SPIRE, which is one of the implement Read more
May 24, 2022 ISTIO: How to enforce egress traffic using Istio’s authorization policies Introduction Recently, the Wiz research team released a blog post that uncovered tenant isolation vulnerabilities in AI services, generating widesprea Read more
May 19, 2022 NIST Standards for Zero Trust: the SP 800-204 Series Introduction This is the second installment in a two-part series on NIST standards for zero trust security. The first installment covers NIST Special Read more
May 16, 2022 Istio component ports and functions in detail In my last blog, I gave you a detailed overview of the traffic in the Istio data plane, but the data plane does not exist in isolation. This article w Read more
May 15, 2022 Envoy API Gateway: The Gateway to a New Frontier Today, the Envoy community announced an exciting new project – Envoy Gateway Read more
May 12, 2022 ISTIO: How to export Istio Observability concerns to Azure Monitor Istio Observability on Azure Monitor The purpose of this lab is to explore the current options available to export Istio known observability mechanism Read more
May 12, 2022 Traffic types and iptables rules in Istio sidecar explained Istio uses iptables for traffic hijacking, and there is one rule chain named ISTIO_OUTPUT which contains the following rules. Read more
May 6, 2022 Validating a Request Payload with Wasm What is a Wasm Plugin? A Wasm plugin lets you easily extend the functionality of your service mesh by adding custom code to the data path. Plugins can Read more