end-to-end-encryption-enroute-linkerd (1).pdf

1. 03.28.2022
1
Edge TLS + Mesh mTLS with
EnRoute Ingress and Linkerd
saaras.io // getenroute.io
Creators of EnRoute OneStep Gateway

2. 03.28.2022
2
Welcome to the
workshop!
Follow along and feel free
to ask questions on slack
!
Join slack.saaras.io for discussions
Request an enterprise license
getenroute.io/contact

3. 03.28.2022
3
Presenter
-
Twitter: @SaarasInc
Github: GitHub.com/saarasio
Chintan Thakker

4. 03.28.2022
4
What is this talk
about? • Container Networking
Interface (CNI
)
• Ingress Controller (eg:
EnRoute OneStep
)
• Service Mesh (eg: Linkerd
)
• Demo
Kubernetes Application
Networking and Security

5. 03.28.2022
5
• CN
I
• Service Mes
h
• Ingress

6. 03.28.2022
6
What’s EnRoute
OneStep?
• Ingress Controller API Gatewa
y
• North-S0uth Security and
Tra
ffi
c Managemen
t
• One Step Con
fi
guratio
n
• Kubernetes Native

7. 03.28.2022
7
How is EnRoute
di
ff
erent?
• Built on Envoy Prox
y
• Works for both Kubernetes and
non-Kubernete
s
• Declarative No-YAML
Con
fi
guratio
n
• OSS / Community / Enterprise
getenroute.io/features

8. 03.28.2022
8
What’s Linkerd
service mesh
• Ultralight, ultrafast, security-
fi
rst service mes
h
• CNCF graduated mes
h
• 200+ contributors

9. 03.28.2022
9
Zero Trust
• Never Trust, Always Verif
y
• Use Identities to enforce authn/auth
z
• Use Zero Trust principles for tra
ffi
c entering the
cluster - Ingres
s
• Zero Trust principles inside the cluster - Service
Mesh

10. 03.28.2022
10
Zero Trust: Ingress + Service Mesh

11. 03.28.2022
11
Demo: EnRoute-meshed-with-mTLS
• Install Linker
d
• Install emojivoto example workloa
d
• Mesh emojivoto example workload

12. 03.28.2022
12
Demo: Client-to-EnRoute TLS
• Install EnRout
e
• Mesh EnRoute with Linker
d
• Externally expose emojivoto application using
EnRout
e
• Install ACME Certi
fi
cate for emojivoto application