reasons ■ Better known security controls ■ Better isolation (of resources, fault domains etc.) ■ Compatibility (non-Linux, unikernels) ○ Business reasons ■ Legacy applications ■ Deterministic workloads service owners sometimes #IstioCon Legacy VNF  CNF: Option 2 ● Dedicated Egress Gateway ○ Compatibility reasons ○ Performance & Security #IstioCon Legacy VNF  CNF: Option 3 ● Further performance

Creative Commons Attribution 4.0 International (CC BY 4.0) Istio Security Audit, 2023 Table of contents Table of contents 1 Executive summary 2 Notable findings 3 Project summary 4 Audit scope 6

China TZ 1. Getting involved - Content 2. Getting involved - Financial support The following table describes the event bundles that allow IstioCon to showcase a multi-vendor ecosystem of partners

marked 1337 ip -f inet rule add fwmark 1337 lookup 133 ip -f inet route add local default dev lo table 133 ③ echo 1 > /proc/sys/net/ipv4/conf/eth0/route_localnet #IstioCon Preserve TCP Original Src

High Medium Low Informational 3 | Google Istio Security Assessment Google / NCC Group Confidential Table of Findings For each finding, NCC Group uses a composite risk score that takes into account the severity