....................................................................................... 62 8. Security Capability .................................................................................... ................................................................................... 69 Network Security Monitoring .................................................................................... ............ 76 Audit Log ............................................................................................................................................ 78 Linux Audit log ............

small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models Installation Observability Network Policy Security Tutorials Advanced Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Architecture Support Linux Distribution Compatibility

for openEuler 059 OneAll 062 StratoVirt 063 Compiler Plugin Framework 065 CONTENTS Robust Security and Rocksolid Reliability 066 IMA 066 KunpengSecL 068 secCrypto 070 secGear 072 secPaver Scenario collaboration Scenario enablement Linux kernel x86, Arm, RISC-V GPU NPU Real-time kernel Security kernel Database Big data Resource orchestration Desktop system Industrial application ... .. Rubik Unified compose platform Unified SDK Unified driver framework Embedded ZVM MICA Strong security and reliability secCrypto secPaver secGear Simplified O&M and development A-Ops SysCare CPDS

small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models Installation Network Policy Security Tutorials Advanced Networking Operations Istio Other Orchestrators Concepts Component Overview Terminology Networking Network Security eBPF Datapath Kubernetes Integration Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Required Kernel Versions

small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models Installation Observability Network Policy Security Tutorials Advanced Networking Cluster Mesh Operations Istio Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility & Considerations

small Cilium setup on your laptop. Intended as an easy way to get your hands dirty applying Cilium security policies between containers. Concepts: Describes the components of Cilium, and the different models Installation Network Policy Security Tutorials Advanced Networking Operations Istio Other Orchestrators Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel

wireguard-vpn-defaultgw Default gateway 3 wireguard-vpn-other-tasks Other tasks 3 wireguard-vpn-security Security tips 3 wireguard-vpn-troubleshooting Troubleshooting 2 Virtualisation and containers 3 Virtual Introduction to crypto libraries 3 openssl OpenSSL 3 gnutls GnuTLS 3 network-security-services-nss Network Security Services (NSS) 3 java-cryptography-configuration Java cryptography configuration and debug 2 Security 3 security-introduction Introduction 3 security-users Users 3 security-smart-cards Smart cards 4 security-smart-cards-ssh SSH 3 security-apparmor AppArmor 3 security-firewall Firewall

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94 4.6 Security of authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 4.6.3 Extra security measures for the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . server services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 4.7.4 Linux security features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

migration, compatibility evaluation, and various development tools such as secPaver, to simplify security configuration. Data center Cloud native Edge HPC Embedded/Industrial … CPU: x86, ARM, RISC-V DPU framework … Linux kernel Real-time kernel … Scenario Enablement Layer Base Service Layer Kernel Security kernel openEuler 21.09 Technical White Paper 06 Platform Framework The openEuler open source Vendors Participating in Vendors with multiple architectures Governments, telecom carriers, security, finance, and electricity Other upstream communities Upstream first openEuler Open Source Community

Building a Secure and Maintainable PaaS Leveraging eBPF to Scale Security and Improve Platform Support Bradley Whitfield October 28, 2020 2 Dragon - Internal Platform as a Service TIP: To change Auditing ❏ Minimize maintenance and performance overhead ❏ Scale past iptables limits ❏ … 4 Network Security and Auditing 5 Scalability and Maintainability Source: https://commons.wikimedia.org/wiki/F picture:Right click on image > Replace image > Select file ❏ Durable log storage and enterprise Security Information and Event Management (SIEM) integration ❏ hubble observe command to help with troubleshooting