Lab

Cilium Transparent Encryption with IPSec and WireGuard

Discover Cilium's two options to encrypt traffic: IPsec and WireGuard.

Encryption is required for many compliance frameworks. Kubernetes doesn’t natively offer pod-to-pod encryption. To offer encryption capabilities, it’s often required to implement it directly into your applications or deploy a Service Mesh. Both options add complexity and operational headaches.

Cilium actually provides <strong>two</strong> options to encrypt traffic between Cilium-managed endpoints: IPsec and WireGuard. In this lab, you will be installing and testing both features and will get to experience how easy it is to encrypt data in transit with Cilium.

You will also see how to encrypt specific pod-to-pod traffic using Isovalent Enterprise.

  • 🚀 The Lab Environment

    Explore the lab's environment

  • 🐲 Cilium WireGuard

    Let's start with the simplest encryption option - WireGuard!

  • 🐲 Selective Encryption

    Let's encrypt specific pod-to-pod traffic using Isovalent Enterprise's Selective Encryption feature!

  • ⬢ FIPS Compliance with IPsec

    Some organizations require FIPS-compliant encryption - let's explore IPsec for compliance requirements.

  • 🔐 Managing IPsec: The Compliance Advantage

    Now let's explore why IPsec's complexity pays off - advanced key management and compliance features.

  • 🥋 Exam

    Time to use your knowledge!