February 2026
Intermediate to advanced
372 pages
10h 6m
German
Content preview from Cilium: Auf und davon (German Edition)
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Kapitel 14. Transparente Verschlüsselung
Diese Arbeit wurde mithilfe von KI übersetzt. Wir freuen uns über dein Feedback und deine Kommentare: translation-feedback@oreilly.com
Die transparente Verschlüsselungs -Funktion von Cilium kann Datenverkehr verschlüsseln, wenn er zwischen von Cilium verwalteten Endpunkten übertragen wird. Sie wird als transparent bezeichnet, da sie für die Pods an beiden Enden nicht sichtbar ist und keine Koordination durch die Workloads selbst erfordert. Cilium verschlüsselt Pakete, wenn sie den Quellknoten verlassen, und entschlüsselt sie, wenn sie den Zielknoten erreichen. Es übernimmt alle Aspekte des Prozesses, einschließlich der Schlüsselverteilung und -verwaltung.
Transparent Encryption kann entweder WireGuard oder IPsec als zugrunde liegende Verschlüsselungstechnologie verwenden. Beide sind branchenübliche Kapselungsmethoden. In diesem Kapitel verwenden wir WireGuard, aber IPsec hat ähnliche Konzepte und die gleichen Abläufe werden mit beiden verschlüsselt. Der IPsec-Modus ist aufwändiger einzurichten, da der Administrator gemeinsame Geheimnisse erstellen und Verschlüsselungsalgorithmen konfigurieren muss. Wenn du jedoch aus regulatorischen Gründen bestimmte Algorithmen oder Schlüssellängen benötigst, kann dies eine attraktive Alternative zur automatischen Konfiguration von WireGuard sein.
Alle YAML-Manifeste, die du in diesem Kapitel verwendest, sowie mehrere praktische Skripte findest du im Verzeichnis „chapter14“ des GitHub-Repositorys des Buches. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.