2022-06-14 - EMCO: Cloud Native SASE

Topic Leader(s)

• @Srinivasa Addepalli

• @Nadathur Sundar

Topic Description

Topic Overview

The Service Mesh, the communication fabric for microservice-based applications, is increasingly becoming a platform for security. EMCO, today, addresses automation of service mesh for secure communication with external clients and for secure communication of inter-microservice communication either in the same cluster or across clusters.  Envoy with WASM is enabling realization of threat security coming from various vendors.  Next generation SASE can also benefit from these technologies.  In this talk, we will talk about current SASE, its challenges and how cloud native SASE addresses these challenges.  We will also describe the gaps we found in service mesh technologies to address SASE.  In particular we will talk about one gap in Envoy. It is called TLS inspection with TLS Splicing and Bumping.  We also will address how EMCO can play a role in automating the configuration for TLS inspection,  bringing up / upgrades of  WASM based threat security modules and K8s native configuration of threat security modules.

Slides & Recording

Presentation Slides:

2022-dtf-EMCO-Cloud-Native-SASE.pdf

Presentation Recording:

Agenda

Awesome presentation

• Point 1

• Point 2

Minutes

Action Items