Project Lightning Talk: Simplifying Cloud-Native Security: eBPF-Powered Encryption in... Muyang Tian
Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon events in Hong Kong, China (June 10-11); Tokyo, Japan (June 16-17); Hyderabad, India (August 6-7); Atlanta, US (November 10-13). Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io
Project Lightning Talk: Simplifying Cloud-Native Security: eBPF-Powered Encryption in Sidecarless Service Mesh - Muyang Tian, Maintainer
Service mesh has brought transparent encryption capabilities to cloud-native applications. However, the tight coupling of sidecars with workloads complicates lifecycle management.
Both Isito and Cilium have implemented sidecarless service mesh, utilizing userspace proxies that increase connection hops and introduce single points of failure, with encryption occurring only between proxy links. In this session, we aim to demonstrate how eBPF and programmable kernel modules can significantly address these challenges.
We believe that offloading traffic to eBPF and leveraging kernel innovations to achieve end-to-end secure encryption capabilities is the future direction for sidecarless service mesh. We will discuss how this approach can provide a more efficient and secure network architecture without the need for sidecar proxies.
Finally, we will present use cases and discuss how to maintain encryption capabilities and minimize the impact on applications during scenarios such as failures.