From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Enforcing network encryption

Enforcing network encryption - Kubernetes Tutorial

From the course: Certified Kubernetes Security Specialist (CKS) Cert Prep

Start my 1-month free trial Buy for my team

Enforcing network encryption

“

- Scenario number eight is about driving that encrypted traffic between pods into our cluster. We want to be able to provide a level of security that's automated that allows us to be able to ensure that the traffic that goes between pods from nodes is going to be encrypted, and we're going to use Cilium to make this happen. So Cilium has a mechanism that allows us to be able to do that pod to pod encryption, using things like WireGuard. And it used to be very difficult to configure, but this makes it a lot easier. But in addition, we also want to be able to test it and we've got to verify that all the traffic is being encrypted, and we want to be able to analyze that traffic with some tools like TCP dump so that we can see that it is working. So we'll go ahead and pause it here, give it a try, get it configured and then come back and we'll go through the answer. And the key to be able to complete this scenario is that we're going to use Cilium to be able to make the hard stuff easy…

Contents