Zero Trust security model permits to secure cloud native applications while encrypting all network communication, authenticating, and authorizing every request. The service mesh can enable Zero Trust using a side-car proxy without changes to the application code. To the best of our knowledge, no previous work has provided a performance analysis of Zero Trust in a multi-cloud environment. This paper proposes a multi-cloud framework and a testing workflow to analyze performance of the data plane under load and the impact on the control plane, when Zero Trust is enabled. The results of preliminary tests show that Istio has reduced latency variability in responding to sequential HTTP requests. Results also reveal that the overall CPU and memory usage can increase based on service mesh configuration and the cloud environment.
@article{arxiv.2105.02334,
title = {Performance Analysis of Zero-Trust multi-cloud},
author = {Simone Rodigari and Donna O'Shea and Pat McCarthy and Martin McCarry and Sean McSweeney},
journal= {arXiv preprint arXiv:2105.02334},
year = {2021}
}
Comments
This paper was submitted for the IEEE CLOUD 2021 Conference and is currently being reviewed