Usually, when using Istio on a Kubernetes Cluster by default you create an NLB (Network Load Balancer) to expose your services to the internet, we are going to switch that for an ALB(Application Load Balancer), that way we can use AWS’s ACM to manage TLS keys and certs, and AWS’s WAF for securing your exposed services against common web exploits. This article discusses how to use Amazon’s AWS Certificate Manager (ACM) for TLS key management of Istio IngressGateway and AWS Web Application Firewall (WAF) in a Kubernetes cluster.
Securing your Istio IngressGateway with Using Amazon’s ACM and WAF
0 kommentar(er)
