Service Mesh London: Pints & Protection

Join Service Mesh London for a Fun & Casual Tech Talk Meetup!

Hosted by ControlPlane & Tetrate at the ControlPlane Office in Shoreditch on November 27th!

🍕 Free Pizza & Beer! 🍻
Dive into an evening of tech talk, free pizza, and beer—the perfect chance to geek out with like-minded professionals! Whether you're a seasoned pro or simply curious about code security, join fellow developers, security enthusiasts, and tech fans for a fun and engaging experience. 🚀
Come for the insights, stay for the community! 🤝

Talks 🎤
James Callaghan (ControlPlane):
On Tap: Brewing a DIY Service Mesh
It’s easy to take for granted all the benefits that a service mesh can provide. In this session, we’ll build an example architecture replicating a few mesh features which are essential to the realisation of a zero trust architecture.
Focusing on the Kautz triangle of Identity, Policy and Control, we’ll see how the SPIFFE framework can be used for workload identity, how least privilege authorisation rules can be encoded in Rego, and how these policy decisions can be enforced using Envoy’s external authorisation filter. By walking through a demo of the architecture, hopefully, we can all reinforce our appreciation for service mesh control planes!

Matt Turner (Tetrate):
Envoy WAF Plugin - WASM vs ext_proc
Coraza is the de facto standard cloud-native WAF; a modern Go codebase which implements the mod_security rule format. It's traditionally been hosted in Envoy by being compiled to WASM. Recently it's been ported to run as a stand-alone ext_proc server. Through the lens of Coraza, Matt will show all of Envoy's extension points, the different topologies in which they can be run, and explore the performance differences.

Flagger/FluxCD core maintainer Stefan Prodan (ControlPlane):
Flagger turns 6: Onto a bright future with Gateway API
Stefan Prodan, creator of Flagger, is here to present the latest innovations in progressive delivery on service mesh! Hear what changes have occurred over the last 6 years, how canary releases with traffic shifting can help you sleep easier at night, and what new innovations are underway with Kubernetes' Gateway API.

👉 Don’t miss out—RSVP today