How the DoD Use Istio for End-to-End Encryption and Authentication

Explore how the Department of Defense leverages Istio for enhanced security in this 43-minute conference talk. Dive into the practical implementation of service mesh technology for encryption in transit and end-user authentication via SSO across DoD applications. Discover the challenges and design considerations in deploying the Istio ecosystem's authservice, which simplifies SSO integration for Platform One application teams. Learn about the standard mesh use case, Envoy filters, and the "Hello World" example. Gain insights into ongoing improvements, open-source developments, and future steps in service mesh adoption for authentication and authorization, including an upcoming NIST IR on the subject.

Intro
Agenda
Platform 1 Overview
Standard Mesh Use Case
SSO for Free
Auth Service
Envoy Filter
Service Mesh
Hello World
Improvements
Challenges
OSS
Next Steps