3 years ago

Category: Kubernetes, encryption

Given the general trends of the proliferation of threats within the production network and the increased points of privileged access, it is increasingly necessary to adopt a zero-trust network security approach for microservices architectures.

To start, you have to create, distribute, and rotate keys and certificates to a large number of services.

One of the compelling features of Istio is the ability to uniformly administer mTLS for all of your services without sacrificing developer productivity.

The PERMISSIVE mode is particularly useful when migrating to Istio, when there are still services that are not managed by Istio (or mTLS).