Zero Trust Network Turnkey Solution for Service Mesh - Architecture and Implementation

Overview

Explore a comprehensive Zero Trust Network Turnkey Solution with high performance and scalability in this 32-minute conference talk from CNCF. Discover how to support Zero Trust Service Mesh in the era of remote work and digital transformation. Learn about the overall architecture, implementation of Zero Trust Security Gateway on VPP and WireGuard, and Zero Trust Cloud Gateway on DPDK and WireGuard. Gain insights into accelerating VPP-based WireGuard protocol, implementing DPDK-based WireGuard for high performance, and leveraging SGX for secrets management. Understand the solution's applications in K8s Ingress/Egress Gateway and Edge Cloud Gateway, supporting Zero Trust Service Mesh for Cloud.

Syllabus

Intro
Background
Properties of Zero Trust Networking
ZTNA Architecture
ZTNA Function Split
Zero Trust Network Turnkey Solution
Secure GW Reference Arch
Ingress Load Balancer Reference Arch
WireGuard Implementation
VPP-based WireGuard* Optimization
Key Takeaways
Acknowledgement