apidays LIVE Australia 2021 - How to Achieve Zero-Trust Security With Kuma Service Mesh by Marco Palladino, Kong

•

1 like•1,293 views

apidays LIVE Australia 2021 - Accelerating Digital September 15 & 16, 2021 How to Achieve Zero-Trust Security With Kuma Service Mesh Marco Palladino, CTO & Co-Founder at Kong

Technology

THE CLOUD
CONNECTIVITY COMPANY
THE CLOUD
CONNECTIVITY COMPANY
With Kuma
THE CLOUD CONNECTIVITY
COMPANY
1
https://konghq.com
https://kuma.io
Zero-Trust

THE CLOUD
CONNECTIVITY COMPANY
P A L L A D I N O
Marco
CO-FOUNDER & CTO AT KONG

THE CLOUD
CONNECTIVITY COMPANY
Connectivity Powers Innovation
CONNECTIVITY
NUMBER OF SERVICES

THE CLOUD
CONNECTIVITY COMPANY
Trust is exploitable
4

New York
JULY
Australia
SEPTEMBER
Singapore
APRIL
Helsinki & North
MARCH
Paris
DECEMBER
London
OCTOBER
Jakarta
FEBRUARY
Hong Kong
AUGUST
JUNE
India
MAY
Check out our API Conferences here
50+ events since 2012, 14 countries, 2,000+ speakers, 50,000+ attendees,
300k+ online community
Want to talk at one of our conferences?
Apply to speak here

THE CLOUD
CONNECTIVITY COMPANY
Trust is exploitable
5
X

THE CLOUD
CONNECTIVITY COMPANY
ZERO-TRUST SECURITY
We need virtual passports
for our services.
8

THE CLOUD
CONNECTIVITY COMPANY
1. Kubernetes, VMs, Multi-Cloud
2. Single and Multi-Zone
3. Multi-Mesh, Native Policies, Easy to Use
1000+ Organizations
Have deployed Kuma
as a Service Mesh in the past 12 months
C
O
N
T
R
O
L
P
L
A
N
E
SERVICE
S
E
R
V
I
C
E
Sandbox Project

THE CLOUD
CONNECTIVITY COMPANY
Built to scale with focus on ease
of use.
1st class support for containers,
Kubernetes and VMs
Natively multi-cluster and
multi-zone.
Intelligently route traﬃc across any
platform and any cloud to meet
expectations and SLAs
Restrict access and encrypt all traﬃc by
default to only complete transactions
when identity is veriﬁed
Out of the box connectivity across
multi-cluster, multi-cloud and
multi-platform deployments.

THE CLOUD
CONNECTIVITY COMPANY
Kubernetes Native (CRDs)
Universal CLI
HTTP API
Built-in GUI
EASY TO USE

THE CLOUD
CONNECTIVITY COMPANY
Security
Traﬃc Control
Observability
Advanced Policies
POLICY BASED

THE CLOUD
CONNECTIVITY COMPANY
70+ Observability Charts
Native API Gateway Integration
One-Click Zero Trust
BATTERIES INCLUDED

THE CLOUD
CONNECTIVITY COMPANY
ZERO TRUST WITH KUMA
apiVersion: kuma.io/v1alpha1
kind: Mesh
metadata:
name: default
spec:
mtls:
enabledBackend: ca-1
backends:
- name: ca-1
type: builtin
dpCert:
rotation:
expiration: 1d
conf:
caCert:
RSAbits: 2048
expiration: 10y

THE CLOUD
CONNECTIVITY COMPANY
ZERO TRUST WITH KUMA
apiVersion: kuma.io/v1alpha1
kind: TrafficPermission
mesh: default
metadata:
name: allow-all-traffic
spec:
sources:
- match:
kuma.io/service: '*'
destinations:
- match:
kuma.io/service: '*'

$THE CLOUD CONNECTIVITY COMPANY IN KONG MESH type: OPAPolicy mesh: default name: opa-1 selectors: - match: kuma.io/service: backend conf: policy: inlineString: | package envoy.authz import input.attributes.request.http as http_request default allow = false token = {"valid": valid, "payload": payload} { [_, encoded] := split(http_request.headers.authorization, " ") [valid, _, payload] := io.jwt.decode_verify(encoded, {"secret": "secret"}) } allow { is_token_valid action_allowed }$

THE CLOUD
CONNECTIVITY COMPANY 26
More Connectivity Zero
Trust
Service Mesh
Kuma

THE CLOUD
CONNECTIVITY COMPANY 27
Download at KUMA.IO
Enterprise Offering:
konghq.com/kong-mesh

apidays LIVE Hong Kong 2021 - API Ecosystem & Data Interchange August 25 & 26, 2021 Event-driven APIs & Schema governance for Apache Kafka Hugo Guerrero, APIs & Messaging Developer Advocate at Red Hat ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

apidays LIVE Paris 2021 - Why Can’t Us Consumers Have APIs by Salman Farmanfa...

apidays

O'Reilly author webinar "APIs: A Strategy guide": Transforming Your Business...

Apigee | Google Cloud

London Adapt or Die: Opening Keynote with Chet Kapoor

Apigee | Google Cloud

For the past 15 years, Google has been building powerful cloud infrastructure and investing over $27 billion in data centers worldwide since 2014. Google Cloud Platform is used by over 1 billion users and powers seven cloud products. The document discusses Google's leadership in hybrid cloud offerings, growth in cloud bookings and customer count, and increasing number of API calls processed daily. It also outlines Google's vision for an API-first approach and building digital ecosystems through APIs that enable software and services to connect.

This document discusses an insurance company's transition from a monolithic IT architecture to a microservices architecture using APIs. Some of the key challenges in the transition include ensuring consistent API design, implementing cloud infrastructure securely, complying with regulations, maintaining quality and resilience across many independent services, and aligning planning between multiple API-based products and teams. The goals of the transition are to enable greater agility, simplify global collaboration, and move away from the limitations of the monolithic "culture."

[API Word 2021] - Quantum Duality of “API as a Business and a Technology”

WSO2

Every thriving API program leverages the elements from business and technology equally. Alignment of business and technology strategy, the synergy between business and technical teams, and adaptability to the changes coming from either business or technology are fundamental characteristics of such an environment. Asanka will look at four areas, federation and business models, moving to the cloud, polyglot and heterogeneous approach, and modernizing development during this talk. He will also share real-world examples based on his involvement in numerous success stories.

Openbar Kontich // RPA: A Hype or a Proven Technology? by Tim Vangilbergen & ...

Openbar

The document discusses RoboRana, a robotics competence center that focuses on robotic process automation (RPA) and intelligent automation. It has 23 RPA engineers across 3 locations in Belgium. RoboRana helps clients innovate, digitally transform, and make repetitive processes more efficient using RPA, business process modeling, and intelligent automation technologies like OCR, NLP, and chatbots. The document also discusses the benefits of RPA and intelligent automation, as well as some common pitfalls to avoid when implementing these technologies.

Vizag Virtual Meetup #7: Trending API Topics for 2022

Ravi Tamada

The document discusses API trends for 2022 that were presented at the APIForce conference by Andreas Oberrauter and Amir Khan. The top trends included design-first development, zero trust security, composable business, API lifecycle management, and hyperautomation with RPA integration. Design-first and zero trust approaches were discussed in more detail regarding the benefits they provide around faster development, improved security, and enabling parallel workstreams.

apidays LIVE New York 2021 - API for multi-cloud management platform by Pawel...

apidays

apidays LIVE Australia 2021 - How API’s are securing sensitive customer data ...

apidays

Api architectures for the modern enterprise

CA API Management

Extend your legacy SOA/ESB infrastructure to Mobile & IoT This webinar recording provides a use-case driven discussion around appropriate use of existing middleware infrastructure as well as its shortcomings. It dives deep into how APIs can not only complement an ESB or SOA infrastructure but also fill existing gaps. Watch this webinar recording to learn about: - Strengths and weaknesses of your existing ESB/SOA infrastructure - Architecture strategy: extend and add value to legacy middleware with APIs - Integration / API use cases in Retail, Manufacturing and Telecom - The API360 approach to digital strategy

apidays LIVE Australia 2021 - Planning Your Steps to Data Economy Using APIOp...

apidays

apidays LIVE Paris 2021 - Beyond API Governance: Run your API org like a lean...

apidays

apidays LIVE Paris 2021 - Low-Code API DevOps approach to API Lifecycle Manag...

apidays

apidays LIVE Paris - Connectivity rules everything around us by Marco Palladino

apidays

Building APIs in a Cloud Native Era

Nuwan Dias

apidays LIVE Australia 2021 - SEEK: Establishing a new API integration platfo...

apidays

Introduction to Comoyo

Nordic APIs

Comoyo's mission is to build a leading internet company delivering global services to Telenor's 130 million customers worldwide through building a platform to sell products globally and negotiating content rights and partnerships. Comoyo aims to provide TV and calling services on all devices by connecting services to Telenor's 130 million customers through a global backend for authentication, payments, and analytics. Comoyo also supports open internet development through supporting Mozilla's Firefox OS.

Mobile - Your API Security Blindspot by David Stewart, Approov

apidays

apidays LIVE Paris - Avoid Building a Microservices Death Star by Przemek Kulik

apidays

apidays LIVE Paris 2021 - How to Achieve Zero-Trust Security With Kuma Servic...

apidays

APIdays Paris 2018 - What a Mesh! Laurent Doguin, DevRel VP, Clever Cloud

apidays

What's hot

apidays LIVE Australia 2021 - Leveraging Async APIs to deliver Cross Domain A...

apidays

INTERFACE, by apidays - Aligning teams and strategies behind API investment ...

apidays

apidays LIVE Australia 2021 - Unlocking the Internet of Things with Telco API...

apidays

apidays LIVE Australia 2021 - APIs, open ecosystems, and the emerging future ...

apidays

apidays LIVE Helsinki & North - Bye bye to the insurance monolith - case Eule...

apidays

[API Word 2021] - Quantum Duality of “API as a Business and a Technology”

WSO2

Openbar Kontich // RPA: A Hype or a Proven Technology? by Tim Vangilbergen & ...

Openbar

Vizag Virtual Meetup #7: Trending API Topics for 2022

Ravi Tamada

apidays LIVE New York 2021 - API for multi-cloud management platform by Pawel...

apidays

apidays LIVE Australia 2021 - How API’s are securing sensitive customer data ...

apidays

Api architectures for the modern enterprise

CA API Management

apidays LIVE Australia 2021 - Planning Your Steps to Data Economy Using APIOp...

apidays

apidays LIVE Paris 2021 - Beyond API Governance: Run your API org like a lean...

apidays

apidays LIVE Paris 2021 - Low-Code API DevOps approach to API Lifecycle Manag...

apidays

apidays LIVE Paris - Connectivity rules everything around us by Marco Palladino

apidays

Building APIs in a Cloud Native Era

Nuwan Dias

apidays LIVE Australia 2021 - SEEK: Establishing a new API integration platfo...

apidays

Introduction to Comoyo

Nordic APIs

Mobile - Your API Security Blindspot by David Stewart, Approov

apidays

apidays LIVE Paris - Avoid Building a Microservices Death Star by Przemek Kulik

apidays

What's hot (20)

apidays LIVE Australia 2021 - Leveraging Async APIs to deliver Cross Domain A...

INTERFACE, by apidays - Aligning teams and strategies behind API investment ...

apidays LIVE Australia 2021 - Unlocking the Internet of Things with Telco API...

apidays LIVE Australia 2021 - APIs, open ecosystems, and the emerging future ...

apidays LIVE Helsinki & North - Bye bye to the insurance monolith - case Eule...

[API Word 2021] - Quantum Duality of “API as a Business and a Technology”

Openbar Kontich // RPA: A Hype or a Proven Technology? by Tim Vangilbergen & ...

Vizag Virtual Meetup #7: Trending API Topics for 2022

apidays LIVE New York 2021 - API for multi-cloud management platform by Pawel...

apidays LIVE Australia 2021 - How API’s are securing sensitive customer data ...

Api architectures for the modern enterprise

apidays LIVE Australia 2021 - Planning Your Steps to Data Economy Using APIOp...

apidays LIVE Paris 2021 - Beyond API Governance: Run your API org like a lean...

apidays LIVE Paris 2021 - Low-Code API DevOps approach to API Lifecycle Manag...

apidays LIVE Paris - Connectivity rules everything around us by Marco Palladino

Building APIs in a Cloud Native Era

apidays LIVE Australia 2021 - SEEK: Establishing a new API integration platfo...

Introduction to Comoyo

Mobile - Your API Security Blindspot by David Stewart, Approov

apidays LIVE Paris - Avoid Building a Microservices Death Star by Przemek Kulik

Similar to apidays LIVE Australia 2021 - How to Achieve Zero-Trust Security With Kuma Service Mesh by Marco Palladino, Kong

apidays LIVE Paris 2021 - How to Achieve Zero-Trust Security With Kuma Servic...

apidays

APIdays Paris 2018 - What a Mesh! Laurent Doguin, DevRel VP, Clever Cloud

apidays

Apidays Paris 2023 - Unlock Network Potential Using The Open Gateway API Code...

apidays

Apidays Paris 2023 - Software and APIs for Smart, Sustainable and Sovereign Societies December 6, 7 & 8, 2023 Unlock Network Potential Using The Open Gateway API Code David Del Val, Global Director of Open Gateway at Telefonica ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

OSCON 2018 Getting Started with Hyperledger Indy

Tracy Kuhrt

Presented at OSCON 2018. Hyperledger Indy is a distributed ledger built for decentralized identity and is one of the open source frameworks hosted by Hyperledger. It provides tools, libraries, and reusable components for creating and using independent digital identities rooted on blockchains or other distributed ledgers. In this presentation, I introduce The Linux Foundation and Hyperledger. We look at Decentralized Identity Concepts -- identity models, decentralized identity, zero-knowledge proofs, and verifiable credentials. We look at a demo that utilizes Hyperledger Indy and these concepts. We then look at Hyperledger Indy's software stack and roadmap and touch on how you can get involved.

Consensus 19 Conference: What Happens When Tokens Meet The Enterprrise

Kaleido

The document discusses how blockchain technology can modernize business networks through the Kaleido platform. Kaleido provides a full-stack blockchain solution and middleware services to help enterprises easily develop and run blockchain applications. This includes tools for digital assets, smart contracts, data services, privacy and security, and connectors for integration. The platform aims to simplify blockchain adoption for businesses and supports use cases across various industries.

Corda Blockchain Development Company

Mobiloitte Technologies

CIS 2017 - So you want to use standards to secure your APIs?

Bertrand Carlier

The document discusses OAuth and identity management standards for securing APIs. It provides an overview of OAuth concepts like authorization codes, refresh tokens, and OpenID Connect. It also discusses current challenges around pairing devices, protecting tokens from hijacking, sharing access and consent, and transmitting identity. The document emphasizes that OAuth is a rich ecosystem and to choose the right specifications, integrate them carefully, and avoid a flawed security architecture or false sense of security.

apidays LIVE Paris - Building APIs in a Cloud Native era by Nuwan Dias

apidays

apidays LIVE London 2021 - Quantum Duality of “API as a business” and “API as...

apidays

apidays LIVE New York 2021 - How to Achieve Zero-Trust Security with Kuma Ser...

apidays

INTERFACE, by apidays - How to Achieve Zero-Trust Security by Marco Palladin...

apidays

apidays LIVE New York 2021 - How to Achieve Zero-Trust Security with Kuma Ser...

apidays

This document discusses Kuma, a service mesh that provides zero-trust security and connectivity across Kubernetes and multi-cloud environments. It emphasizes Kuma's abilities to intelligently route traffic, restrict access by default until identity is verified, and provide out-of-the-box connectivity across clusters, clouds, and platforms. Key features highlighted include universal usage across K8s and VMs, attribute-based policies, built-in multi-zone connectivity, and being Kubernetes native, with CLI, HTTP API and built-in GUI for easy usage and policy-based control of security, traffic, and observability.

Authentication, Security, and Performance for the Internet of Things

Cloudflare

Cloudflare for IoT provides authentication, security, and performance solutions for connecting Internet of Things devices. It offers a global network to speed up and secure connections for IoT applications. The platform provides features like bot management, web application firewalls, and DDoS protection. Cloudflare Spectrum is a solution that proxies and encrypts non-HTTP TCP traffic to mitigate DDoS attacks and block traffic from specific IP addresses.

GOTO Copenhagen - Radical Agility with Autonomous Teams and Microservices in ...

Jan Löffler

What we've built at Zalando is complex. Supporting – profitably – a publicly traded ecommerce company that does business in 15 diverse European markets, with more than 16 million active users who all speak different languages, use different payment methods, prefer different shipping methods, and have different product tastes, has required nonstop innovation. Until recently we've focused on building a unified, comprehensive retail system, quickly, that solves just our problems. But to truly fight against complexity--particularly the accidental complexity that slows down our development process--we have adopted a microservices architecture. And when it comes to DevOps, we’ve gone a step beyond the "You build it, you run it" motto--working in autonomous teams with DevOps treated as a "first-class entity.” In this talk, Jan Löffler (Head of Platform Engineering) will share Zalando's experience implementing “Radical Agility” from a DevOps perspective. “Radical Agility” is the Zalando technology team’s multi-pronged approach to managing the complexity that results from building an architecture of massive size. Jan will focus on how microservices enable Zalando’s engineers to move faster and build systems that scale, at scale, and avoid dependencies. He will show how microservices, in conjunction with a cloud infrastructure, support teams as they try strive for autonomy. Finally, he will draw upon his experiences to show how this all works in practice, and discuss what is organizationally and architecturally necessary to make DevOps a top priority for all members of your tech organization.

Hyperledger Fabric - Blockchain for the Enterprise - FOSDEM 20190203

Arnaud Le Hors

Kaleido Overview - Full-Stack B2B Platform for Modern Business Networks

Kaleido

Enterprise Single Sign On

WSO2

BlockchainLAB Hackathon

Aleksandr Kopnin

This document provides information about a blockchain hackathon being organized by Luxoft, including: - The hackathon will focus on applying blockchain to newer industries like education, healthcare, and smart mobility. - It will include challenges in each of these areas and provide development networks for Ethereum and Hyperledger Fabric for participants to build solutions. - Support materials include skeleton applications, network configurations, and a support channel for participants to get help during the hackathon.

Microsoft Ignite 2019 - API management for microservices in a hybrid and mult...

Tom Kerkhove

Microservices are on the cusp of becoming the dominant style of software architecture in the enterprise. The benefits that are realized—increased developer velocity, improved organizational agility, and reduced time-to-market of new services—are a powerful catalyst that is driving this transformation. As practitioners, how do we successfully fit microservices into the models and processes we already have in place? Join Tom Kerkhove, an Azure Architect with many years of experience helping enterprises make this exact transition, for a hands-on experience demonstrating how he helps enterprises make the transition to API-first architectures and microservices in a hybrid, multi-cloud world.

Confluent Cloud Networking | Rajan Sundaram, Confluent

HostedbyConfluent

Introduction to networking options available in Confluent Cloud Self Serve provisioning of confluent Kafka clusters. VPC Peering, VNet Peering, Transit Gateway and Private Link Options for AWS, GCP, Azure networking offering. Caveats of confluent's cloud networking solutions customers should be aware of. Details of two major pieces of the architecture of Confluent Cloud - Data Plane Network and Control Plane.

Similar to apidays LIVE Australia 2021 - How to Achieve Zero-Trust Security With Kuma Service Mesh by Marco Palladino, Kong (20)