Mohammed Faizuddin (@thehyphen)
Microservices are awesome 😎
small, contained boxes
clear bounded context
polyglot
🔥
Sweet!
Let's get real for
a moment.
At scale, might look like:
100s of microservices
1000s of production changes a day
10,000s of instances
1,000,000s of users
Security at
massive scale
Many services — many surface areas of attack
Polyglot does not make it any easier
Code Duplication & Developer Productivity
Dependency Tree
Dependency "Forest"
Securing
Microservices
Zero Trust Network
Abstract common parts
Secure interservice communication
Authenticate with Sessions
OAuth 2.0
Payload
Header
Signature
Stateless & self contained
Lightweight
Polyglot support
Okay, JWT looks cool. Now what?
Securing
Microservices
Zero Trust Network
Abstract common parts
Secure interservice communication
Service Mesh
Main purpose:
faster, reliable, secure communication
The side car pattern
Istio
Kong
Sidecar implemented with Envoy Proxy
"We've got dragons, we totally got this war"
mTLS and own Certificate Authority
Istio Architecture
Securing
Microservices
Zero Trust Network
Abstract common parts
Secure interservice communication
👾
Bonus!
RBAC / ABAC
