The Tale of Smokey and the Crypto Bandits How Okteto uses Falco to keep users happy and our platform healthy Ramiro Berrelleza October 28, 2020 ● Co-founder of Okteto ● Former architect @ Atlassian malicious actions without requiring human intervention Future Ideas The Tale of Smokey and the Crypto Bandits Ramiro Berrelleza October 28, 2020

Replication 3 service-ldap-usage Simple LDAP user and group management 3 service-ldap-with-tls SSL/TLS 3 service-ldap-backup-restore Backup and restore 2 Kerberos 3 kerberos-introduction Introduction synchronisation 3 network-dpdk The DPDK library 2 Cryptography 3 introduction-to-crypto-libraries Introduction to crypto libraries 3 openssl OpenSSL 3 gnutls GnuTLS 3 network-security-services-nss Network DNSSEC cryptography selection 3 openssh-crypto-configuration OpenSSH crypto configuration 3 Level Path Navlink 3 troubleshooting-tls-ssl Troubleshooting TLS/SSL 2 Virtualisation and containers 3 Virtual

. . . . . . 177 5 Apache SSL/TLS Encryption 181 5.1 Apache SSL/TLS Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182 5.2 SSL/TLS Strong Encryption: An Introduction . . . . . . . . . . . . . . . 183 5.3 SSL/TLS Strong Encryption: Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192 5.4 SSL/TLS Strong Encryption: How-To . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196 5.5 SSL/TLS Strong Encryption: FAQ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200 6 Guides, Tutorials, and HowTos 213 6.1 How-To

. . . . . . 177 5 Apache SSL/TLS Encryption 181 5.1 Apache SSL/TLS Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182 5.2 SSL/TLS Strong Encryption: An Introduction . . . . . . . . . . . . . . . 183 5.3 SSL/TLS Strong Encryption: Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192 5.4 SSL/TLS Strong Encryption: How-To . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196 5.5 SSL/TLS Strong Encryption: FAQ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200 6 Guides, Tutorials, and HowTos 213 6.1 How-To

. . . . . . 183 5 Apache SSL/TLS Encryption 187 5.1 Apache SSL/TLS Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188 5.2 SSL/TLS Strong Encryption: An Introduction . . . . . . . . . . . . . . . 189 5.3 SSL/TLS Strong Encryption: Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198 5.4 SSL/TLS Strong Encryption: How-To . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202 5.5 SSL/TLS Strong Encryption: FAQ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208 6 Guides, Tutorials, and HowTos 221 6.1 How-To

. . . . . . 183 5 Apache SSL/TLS Encryption 187 5.1 Apache SSL/TLS Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188 5.2 SSL/TLS Strong Encryption: An Introduction . . . . . . . . . . . . . . . 189 5.3 SSL/TLS Strong Encryption: Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198 5.4 SSL/TLS Strong Encryption: How-To . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202 5.5 SSL/TLS Strong Encryption: FAQ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208 6 Guides, Tutorials, and HowTos 221 6.1 How-To

绑定指定地址与端口 配置文件 配置片段 缓存指南 内容协商 动态共享对象(DSO) 环境变量 日志文件 从 URL 映射到文件系 统 性能调谐 安全技巧 服务器全局配置 SSL/TLS 加密 执行 CGI 前的用户切 换(suEXEC) URL 改写与 mod_rewrite 虚拟主机 指引/教程 认证，授权与访问控制 CGI 与动态内容 .htaccess 文件 between servers through memcached EC keys are now supported in addition to RSA and DSA. Support for TLS-SRP (available in 2.4.4 and later). mod_proxy The ProxyPass directive is now most optimally configured -V. mod_ssl Added a support for RFC 2817, which allows connections to upgrade from clear text to TLS encryption. mod_imagemap mod_imap has been renamed to mod_imagemap to avoid user confusion. Program

绑定指定地址与端口 配置文件 配置片段 缓存指南 内容协商 动态共享对象(DSO) 环境变量 日志文件 从 URL 映射到文件系 统 性能调谐 安全技巧 服务器全局配置 SSL/TLS 加密 执行 CGI 前的用户切 换(suEXEC) URL 改写与 mod_rewrite 虚拟主机 指引/教程 认证，授权与访问控制 CGI 与动态内容 .htaccess 文件 between servers through memcached EC keys are now supported in addition to RSA and DSA. Support for TLS-SRP (available in 2.4.4 and later). mod_proxy The ProxyPass directive is now most optimally configured -V. mod_ssl Added a support for RFC 2817, which allows connections to upgrade from clear text to TLS encryption. mod_imagemap mod_imap has been renamed to mod_imagemap to avoid user confusion. Program

绑定指定地址与端口 配置文件 配置片段 缓存指南 内容协商 动态共享对象(DSO) 环境变量 日志文件 从 URL 映射到文件系 统 性能调谐 安全技巧 服务器全局配置 SSL/TLS 加密 执行 CGI 前的用户切 换(suEXEC) URL 改写与 mod_rewrite 虚拟主机 指引/教程 认证，授权与访问控制 CGI 与动态内容 .htaccess 文件 between servers through memcached EC keys are now supported in addition to RSA and DSA. Support for TLS-SRP (available in 2.4.4 and later). mod_proxy The ProxyPass directive is now most optimally configured -V. mod_ssl Added a support for RFC 2817, which allows connections to upgrade from clear text to TLS encryption. mod_imagemap mod_imap has been renamed to mod_imagemap to avoid user confusion. Program

绑定指定地址与端口 配置文件 配置片段 缓存指南 内容协商 动态共享对象(DSO) 环境变量 日志文件 从 URL 映射到文件系 统 性能调谐 安全技巧 服务器全局配置 SSL/TLS 加密 执行 CGI 前的用户切 换(suEXEC) URL 改写与 mod_rewrite 虚拟主机 指引/教程 认证，授权与访问控制 CGI 与动态内容 .htaccess 文件 between servers through memcached EC keys are now supported in addition to RSA and DSA. Support for TLS-SRP (available in 2.4.4 and later). mod_proxy The ProxyPass directive is now most optimally configured -V. mod_ssl Added a support for RFC 2817, which allows connections to upgrade from clear text to TLS encryption. mod_imagemap mod_imap has been renamed to mod_imagemap to avoid user confusion. Program