Kubernetes Podcast from Google LeakSignal with Wesley Hales and Max Bruce
10 snips
Aug 21, 2023 Wesley Hales and Max Bruce, co-founders of LeakSignal, discuss layer seven cybersecurity solutions and their use of WebAssembly technology. They delve into the implementation and potential of Proxy WASM, the components of LeakSignal, and the limitations of eBPF for complex scanning.
AI Snips
Chapters
Transcript
Episode notes
Real-time Traffic Analysis
- LeakSignal analyzes real-time traffic (layers 4-7) in service meshes.
- It focuses on both request and response data, unlike traditional edge security.
Shifting Security Focus
- Traditional security focuses on edge protection (e.g. API gateways, load balancers).
- Microservice security is gaining interest, focusing on internal traffic analysis and zero-trust principles.
Envoy at Scale
- A financial organization uses 3,000-4,000 Envoy instances for ingress traffic.
- This handles 1.5 million requests per second as a proxy layer.