11–20 of 20 posts
This is very cool and really needed, can't wait to try it out. One benefit of terminating SSL at the load balancer is that you can read the http traffic sent to your pods. But for those that have SSL terminating at their pods, it would be cool if this tool could be given the SSL certificates of the pods so it can decipher https traffic.
This is very cool and really needed, can't wait to try it out. One benefit of terminating SSL at the load balancer is that you can read the http traffic sent to your pods. But for those that have SSL terminating at their pods, it would be cool if this tool could be given the SSL certificates of the pods so it can decipher https traffic.
Kubeshark (formerly Mizu) is an observability and monitoring tool that captures all the network traffic inside a Kubernetes cluster, including ingress, egress and across containers and pods. Kubeshark can even capture and display the encrypted (TLS) traffic using various Linux kernel technologies. It supports a wide variety of application layer protocols and RPCs like gRPC, GraphQL, etc. Kubeshark is open-source and…
This is very cool and really needed, can't wait to try it out. One benefit of terminating SSL at the load balancer is that you can read the http traffic sent to your pods. But for those that have SSL terminating at their pods, it would be cool if this tool could be given the SSL certificates of the pods so it can decipher https traffic.
TLS termination before the destination? Oof, are you running Cloudflare?
Terminating TLS on the LB doesn't preclude you from also using TLS or mTLS internally though.
This is very cool and really needed, can't wait to try it out. One benefit of terminating SSL at the load balancer is that you can read the http traffic sent to your pods. But for those that have SSL terminating at their pods, it would be cool if this tool could be given the SSL certificates of the pods so it can decipher https traffic.
Just private key is not enough bc of PFS - you need to intercept key exchange to grab a temporary session key
This is very cool and really needed, can't wait to try it out. One benefit of terminating SSL at the load balancer is that you can read the http traffic sent to your pods. But for those that have SSL terminating at their pods, it would be cool if this tool could be given the SSL certificates of the pods so it can decipher https traffic.
Just private key is not enough bc of PFS - you need to intercept key exchange to grab a temporary session key
Kubeshark (formerly Mizu) is an observability and monitoring tool that captures all the network traffic inside a Kubernetes cluster, including ingress, egress and across containers and pods. Kubeshark can even capture and display the encrypted (TLS) traffic using various Linux kernel technologies. It supports a wide variety of application layer protocols and RPCs like gRPC, GraphQL, etc. Kubeshark is open-source and…
Can you talk about the problems it solves for your users? What are the use cases, and why would someone want to use this tool?
Earlier quoted context omitted.
Can you talk about the problems it solves for your users? What are the use cases, and why would someone want to use this tool?
Traffic mapping naturally. A core pattern within Zero Trust and Cyber Security.
Earlier quoted context omitted.
Traffic mapping naturally. A core pattern within Zero Trust and Cyber Security.
What does Zero Trust have to do with traffic mapping?