The Cloudcast #362 - Security & Service Meshes
Sep 12, 2018
Aaron Delp & Brian Gracely
In a joint show between The Cloudcast and PodCTL, Brian and Tyler Britten talk with John Morello (@morellonet, CTO at @TwistlockTeam) about how Service Mesh technologies, such as Istio, can be used for more advanced security of containerized applications and Kubernetes environments.
Topic 1 - Welcome to the show. Tell us about your background, and introduce us to Twistlock for anyone that isn’t familiar with the company.
Topic 2 - One of the most popular concepts in the world of containers and Kubernetes is “Service Mesh” (projects like Istio). Let’s talk about the basics of what a service mesh does.
Topic 3 - Service mesh provides routing capabilities, so let’s talk about where security comes into the picture.
Topic 4 - Service mesh introduces a concept in Kubernetes where you deploy multiple containers in a pod, one the application and one the service-mesh proxy. Does security introduce yet another container/agent into a pod?
Topic 5 - What sort of tools are available today for security professionals are service meshes are introduced into a container environment?