From the course: Kubernetes: Service Mesh with Istio
Unlock this course with a free trial
Join today to access over 24,900 courses taught by industry experts.
Security in Istio - Kubernetes Tutorial
From the course: Kubernetes: Service Mesh with Istio
Security in Istio
- [Instructor] When you're running an app made up of microservices, like the BookInfo application with its product page, reviews, and details services, security is very critical because it's possible for an attacker intercept traffic between these services, and even modify it before the request reaches its destination. Imagine a request from product page to reviews being tampered with or sensitive data being exposed. To prevent this from happening, the traffic between services needs to be encrypted. But encryption alone isn't enough, we also need to control who can access what. For instance, product page should only talk to reviews or details service and not to some rogue service pretending to be part of your application. This is where Istio steps in to secure your application. It provides encryption, whereby Istio uses mutual TLS to encrypt traffic between services automatically. For example, when the product page requests data from details, Istio ensures that no one can spy on or…