5GSEC / SentryFlow

5G API Observability and Security
Apache License 2.0
3 stars 4 forks source link

North/South Traffic API monitoring #14

Closed nandhued closed 1 week ago

nandhued commented 3 months ago

setup nginx ingress controller and visibility into north-south traffic. Include egress traffic as well. With service-mesh.

nandhued commented 3 months ago

Phase 1: only envoy based support - Istio/Consul, OpenAPI support Phase 2: Sensitive Assets Design Doc WIP

nandhued commented 2 months ago

Able to send collected telemetry to https server. Validate consul with plugin.

nandhued commented 2 months ago

Validation of plugin WIP

nandhued commented 2 months ago

Consul validation: creation works but unable to configure plugin. East-west API security: can only translate http traffic in k8s workloads. If encryption handled by proxy, we have visibility.

nandhued commented 2 months ago

Validating Istio Ambient Mesh with Wasm filter

nandhued commented 2 months ago

grpc calls

nandhued commented 1 month ago

Done w grpc calls and wasm filter. Istio Ambient mesh deprioritized. Next up, nginx.

nandhued commented 1 month ago

Proceeding with changes related to nginx.

nandhued commented 1 month ago

WIP nginx ingress controller changes.

nandhued commented 1 month ago

Using Lua to setup nginx ingress controller changes.

nandhued commented 3 weeks ago

Added support for f5 nginx ingress controller.