Many organizations are discovering the networking complexity involved in running a microservice system. Over the last few years, many influential companies have investigated this problem. At the moment, one popular solution is to use a service mesh. A service mesh allows you to replace traditional host-based network security with service-based security to accommodate the highly dynamic nature of modern runtime environments.
Nic Jackson demonstrates how the open source Consul Connect and Envoy can be used to solve both network segmentation and seamless transport security with mutual TLS within your Kubernetes cluster. Nic then explains how Connect provides encrypted and authorized access to services and data stores that are running outside the cluster and potentially in a separate and isolated network.
Nic Jackson is a developer advocate and polyglot programmer at HashiCorp. He is the author of Building Microservices in Go, which examines the best patterns and practices for building microservices with the Go programming language. In his spare time, Nic coaches and mentors at Coder Dojo, teaches at Women Who Go and GoBridge, and speaks about and evangelizes good coding practice, process, and technique.
©2018, O’Reilly UK Ltd • (800) 889-8969 or (707) 827-7019 • Monday-Friday 7:30am-5pm PT • All trademarks and registered trademarks appearing on oreilly.com are the property of their respective owners. • firstname.lastname@example.org