CASSANDRA_HOME=$HOME/datastax/ export DSCDEMO_HOME=$HOME/datastax/dsc-1.0.1/demos/portfolio_manager export OPSC_HOME=$HOME/datastax/ export PATH="$PATH:$CASSANDRA_HOME/bin: Portfolio Demo Sample Application Your DataStax Community (DSC) installation contains a demo portfolio manager application that showcases how you can use Apache Cassandra to back a real-time web application developed /usr/share/dse-demos/portfolio_manager • Binary tar file installations: $DSCDEMO_HOME (/dsc-1.0.1/demos/portfolio_manager`). About the Portfolio Demo Use Case The portfolio manager sample application

Surfaces Istio is both a collection of security controls and an attack target. Workload Cluster Edge Operations Workload Data Exfiltration Man-In-The-Middle Denial of Service Privilege Escalation Escalation Application Compromise Control Plane Service mesh security architecture Cluster Workload Edge Operations Ingress Policies Egress Policies WAF / IDS Firewall User AuthN/Z Data Loss Authority K8s Network Policy K8s RBAC Audit Logging Image Verification Admission Control Workload Identity K8s RBAC K8s CNI AuthZ Policy Peer AuthN Policy KMS Control Plane Hardening

1 ServiceEntry #IstioCon V1.6-1.8 Better VM Workload Abstraction A K8s Service and Pods Two separate object with distinct lifecycles Before Workload Entry, a single Istio Service Entry object combined giving a first-class representation for the workloads themselves #IstioCon V1.6-1.8 Better VM Workload Abstraction Item Kubernetes Virtual Machine Basic schedule unit Pod WorkloadEntry Component selector: app: foo Istio Workload Entries labels: app: foo class: vm #IstioCon V1.6-1.8 Better VM Workload Abstraction ● Workload Entry ○ single non-Kubernetes workload ○ mTLS using service account

services - Global IPAM, Access-control Policy store, etc. ● AZ Control Plane ○ Syncs specs to workload K8s clusters in the AZ ○ Shared-Nothing Architecture ■ Hosts services catering to the AZ, e Configuration watch Client Traffic tunneled to Ingress Gateways One Istio Deployment per workload K8s cluster #IstioCon Step 3: Evolve into AZ architecture ● One Istio deployment per K8s cluster Server Istiod East-West Gateway watch API Server Pods, Services Workload Cluster API Server Pods, Services Workload Cluster watch Services talk directly #IstioCon Step 4: Evolving

©2021 Aspen Mesh. All rights reserved. Key Platform Requirements Multi-Vendor Real-Time (RAN) Workload Mobility Networking outside CNF Encryption & Authorization between CNFs 5 ©2021 Aspen Mesh. privileges ● Integrate with PKI minted Intermediate CA ● Enable ECC certificates ● Configure workload certificate TTLs ● Enable strict mutual TLS (mTLS) instead of auto ● Use dedicated egress gateways changes ● SPIFFE only certificates ● Configuring workload certificate TTLs ● RSA to ECC migration ● Missing www-authenticate header ● Tuning per-workload proxy concurrency ● Consuming Istio generated

perf) is a benchmark tool for Knative which can generate specific Knative Service provisioning workload and provides aggregated data of Knative Service ready duration. o Knative Performance Testing Framework ensure enough capacity Leveraged Metrics to monitor Istio & Knative components’ CPU and MEM under workload to avoid CPU throttling and OOM and ensure enough capacity. In Istio 1.5.4: Istio scalability PILOT_DEBOUNCE_MAX=10s are the env vars on pilot that can be tuned. o Set PILOT_DEBOUNCE_AFTER=1s helps under our workload. (we tested with 100ms, 1s, 2s, 5s, 10s) o With 800 Knative Services in total, ingress_ready p98

the Internet .................................................................. 46 3.1.1. Network Manager ..................... 46 3.1.2. Using a Cable Connection ......... 47 3.1.3. Using a Wireless Card Package Managers ..... 209 6.5. Using Add/Remove Applications ........ 210 6.6. Using Synaptic Package Manager ....... 215 6.7. Installing a Single Package File .......... 220 6.7.1. Installing/Uninstalling a Partition .......................... 381 10.2.1. Installing GParted by Using Synaptic Package Manager ............... 381 10.2.2. Partitioning Using GParted .... 386 10.3. Boot-up Options ........

Lite User Guide 24.2.ea. Page 9 of 1010. Pending Transactions Auto and manual commit modes Query Manager Data transfer Data import and replace Search overview Data Search Database full text Search Install Snap Installation Statistics collection Admin preferences in DBeaver Command line Session manager Troubleshooting in DBeaver License administration DBeaver Lite User Guide 24.2.ea. Page 12 of personal account Insert the License key into the License Manager Import of Monthly Subscription license License extension License Manager To start using commercial versions of DBeaver you can request

Code Editor Dashboards Transaction log Pending Transactions Auto and manual commit modes Query Manager Data transfer Data import and replace Data migration Data transfer via email Data transfer external read only License administration overview Admin preferences in DBeaver Command line Session manager Troubleshooting in DBeaver License administration DBeaver Ultimate User Guide 24.2.ea. Page 13 personal account Insert the License key into the License Manager Import of Monthly Subscription license License extension License Manager To start using commercial versions of DBeaver you can request

Code Editor Dashboards Transaction log Pending Transactions Auto and manual commit modes Query Manager Data transfer Data import and replace Data migration Data transfer via email Entity Relation Error Log Tutorials Support and development Admin preferences in DBeaver Command line Session manager Troubleshooting in DBeaver DBeaver User Guide 24.2.ea. Page 13 of 1171. Background Tasks Troubleshooting personal account Insert the License key into the License Manager Import of Monthly Subscription license License extension License Manager To start using commercial versions of DBeaver you can request