Thoughts Map

• •

Enabling secure traffic end to end in a multi pod world

As we know the AG terminates the TLS post WAF validations and verifications. Post that the communication between the pods are normally unsecured. Though it is claimed as the highly secured if that layer is compromised the traffic goes unencrypted.

Few Options that helped:

  1. Use Re-Encryption at AG Ingress layer
  2. Use Istio side car mechanism
  3. AG Private with certificate that consumes from public

#k8s #securehttps #encryptiontls #networking