Security

Zero Trust Security with Cilium and Tetragon on Kubernetes

From zero observability and full trust, to full observability and zero trust with Cilium and Tetragon on Kubernetes.

Using Cilium as the glue to fix gaps in disparate tools

  • Traditional Zero Trust security

    • Many disparate tools on Kubernetes to perform “zero trust” related tasks
    • Manifold leads to an inefficient, complex architecture, resulting in technical debt
    • Often a gap: network security can be partially achieved, but OS security is neglected
    • Service mesh approach often thrown at teams that hardly had time to master Kubernetes first

  • Cilium & Tetragon powered Zero Trust security

    • Provides insight into everything: process, network, encryption
    • Advanced network policies with native HTTP and DNS protocol support
    • The glue between container networking and process level observability
    • Offers historical data for rich context in time
    • Just works, can even be applied to live environments
    • Lightweight: No side-cars, etc.
    • eBPF based, built into the kernel
    • Independent of the application

Make security decisions based on data, not fear

  • Forensic analysis - go back in time to find your incident's root cause.
  • Lower complexity by using a lightweight, sidecar-less solution
  • Lower costs by replacing multiple inefficient tools with a single one with deeper insight
  • Extend security & observability beyond network flows: enforce and visualize security based on enriched data

Security Engineer

"Using Cilium for your Zero Trust needs is eye opening: it enables you to see things that you didn't even know you might need to know. Pods do their things - and with Cilium Zero Trust you get the visualisation into what that is."

Learn more about Cilium Zero Trust