Tools

LEADER 04627cam a2200541 i 4500

001 on1523697305;

003 OCoLC;

005 20260618025508.0;

006 m o d ;

007 cr unu||||||||;

008 250616s2025 ncua obm 000 0 eng d;

035 a| (Sirsi) o1523697305;

035 a| (OCoLC)1523697305;

049 a| EREE;

090 a| QA76.9.A25;

100 1 a| Roach, Collin,e| author.?| UNAUTHORIZED;

245 10 a| Kubernetes and Istio as a Zero Trust overlay /c| by Collin Roach.;

264 1 a| [Greenville, N.C.] :b| [East Carolina University],c| 2025.;

300 a| 1 online resource (54 pages) :b| color illustrations;

336 a| textb| txt2| rdacontent;

337 a| computerb| c2| rdamedia;

338 a| online resourceb| cr2| rdacarrier;

347 a| text fileb| application/pdfc| 1007.78 KB2| rda;

538 a| System requirements: Adobe Reader.;

538 a| Mode of access: World Wide Web.;

502 b| M.S.c| East Carolina Universityd| 2025.;

500 a| Presented to the Faculty of the Department of Technology Systems.;

500 a| Advisor: Ciprian Popoviciu;

500 a| Title from PDF t.p. (viewed June 5, 2026).;

650 0 a| Information technology.=| ^A194901;

520 3 a| The emergence of Zero Trust security frameworks led to multiple solutions proposed for creating dynamic, point-to-point overlays for the endpoints of an enterprise information technology (IT) fleet. Some of these solutions reuse old technologies such as virtual private networks (VPNs) and generic route encapsulation (GRE) tunnels which add significant overhead and come with scalability constraints. On the other hand, the rapid adoption of Cloud based services led to the development of hyperscale frameworks to support the creation and maintenance of dynamic overlays. For example, Istio is a management infrastructure that supports Kubernetes with respect to end-to-end authentication, authorization and secure resource connectivity of server instances in a cloud-based application. In application platforms, this is handled by tools such as Kubernetes which orchestrates workloads between nodes; Istio is a management platform that supports Kubernetes to handle end-to-end verification and authentication for these platforms. The objective of this research is to investigate the feasibility of using Istio as an end-point authentication and authorization mechanism combined with dynamic overlay management in support of a zero-trust deployment model. This implementation would adapt Istio to distributed endpoints rather than cloud compute resources used in a micro services application infrastructure. With Istio, traffic between endpoints was inspected at a central location where relevant policies are applied. With Istio, every endpoint was identified and verified while traffic to and from that endpoint is scrubbed and logged. Following a review of the current research on this topic, the conceptual model was presented, and the practical tests performed in support of the envisioned architecture. To test the alternative hypothesis, Istio's ability to support cloud-based endpoints outside a Kubernetes infrastructure was evaluated. Then, Istio's ability to support endpoints outside a cloud infrastructure was evaluated on devices such as a Raspberry Pi or a laptop encompassing both ARM and Intel-based processors. The impact of Kubernetes and Istio as a Zero Trust framework on intra-cluster communication was promising; however, Kubernetes and Istio experienced high latency during tests evaluating inter-cluster communications. Kubernetes and Istio can be used to effectively manage endpoint assets; however, it may not be ideal for all assets or scenarios.;

504 a| Includes bibliographical references.;

650 0 a| Computer security.=| ^A257308;

650 0 a| Electronic data processingx| Distributed processing.=| ^A419191;

653 a| Cloud;

653 a| Zero Trust;

653 a| Kubernetes;

653 a| Istio;

700 1 a| Popoviciu, Ciprian,e| degree supervisor.1| https://id.oclc.org/worldcat/entity/E39PCjtVkCRpB4kWC83hBvVbv3=| ^A1010507;

994 a| C0b| ERE;

710 2 a| East Carolina University.b| Department of Technology Systems.?| UNAUTHORIZED;

856 40 z| Access via ScholarShipu| http://hdl.handle.net/10342/14032;

949 o| wjh;

596 a| 1 4;

998 a| 6584067;

999 a| CLICK ON WEB ADDRESSw| ASISc| 1i| 6584067-1001l| JNETm| JOYNERr| Ys| Yt| JNE3ETDu| 6/16/2025x| ETDz| JERESOURCE;

999 a| CLICK ON WEB ADDRESSw| ASISc| 1i| 6584067-2001l| HSLELECm| HSLr| Ys| Yt| HEETDu| 6/16/2025x| ETDz| HERESOURCE;

Kubernetes and Istio as a Zero Trust overlay / by Collin Roach.

Author/creator	Roach, Collin author.
Other author	Popoviciu, Ciprian, degree supervisor.
Other author	East Carolina University. Department of Technology Systems.
Format	Theses and dissertations
Publication	[Greenville, N.C.] : [East Carolina University], 2025.
Description	1 online resource (54 pages) : color illustrations
Supplemental Content	Access via ScholarShip
Subjects	Information technology. Computer security. Electronic data processing--Distributed processing.

Summary	The emergence of Zero Trust security frameworks led to multiple solutions proposed for creating dynamic, point-to-point overlays for the endpoints of an enterprise information technology (IT) fleet. Some of these solutions reuse old technologies such as virtual private networks (VPNs) and generic route encapsulation (GRE) tunnels which add significant overhead and come with scalability constraints. On the other hand, the rapid adoption of Cloud based services led to the development of hyperscale frameworks to support the creation and maintenance of dynamic overlays. For example, Istio is a management infrastructure that supports Kubernetes with respect to end-to-end authentication, authorization and secure resource connectivity of server instances in a cloud-based application. In application platforms, this is handled by tools such as Kubernetes which orchestrates workloads between nodes; Istio is a management platform that supports Kubernetes to handle end-to-end verification and authentication for these platforms. The objective of this research is to investigate the feasibility of using Istio as an end-point authentication and authorization mechanism combined with dynamic overlay management in support of a zero-trust deployment model. This implementation would adapt Istio to distributed endpoints rather than cloud compute resources used in a micro services application infrastructure. With Istio, traffic between endpoints was inspected at a central location where relevant policies are applied. With Istio, every endpoint was identified and verified while traffic to and from that endpoint is scrubbed and logged. Following a review of the current research on this topic, the conceptual model was presented, and the practical tests performed in support of the envisioned architecture. To test the alternative hypothesis, Istio's ability to support cloud-based endpoints outside a Kubernetes infrastructure was evaluated. Then, Istio's ability to support endpoints outside a cloud infrastructure was evaluated on devices such as a Raspberry Pi or a laptop encompassing both ARM and Intel-based processors. The impact of Kubernetes and Istio as a Zero Trust framework on intra-cluster communication was promising; however, Kubernetes and Istio experienced high latency during tests evaluating inter-cluster communications. Kubernetes and Istio can be used to effectively manage endpoint assets; however, it may not be ideal for all assets or scenarios.
General note	Presented to the Faculty of the Department of Technology Systems.
General note	Advisor: Ciprian Popoviciu
General note	Title from PDF t.p. (viewed June 5, 2026).
Dissertation note	M.S. East Carolina University 2025.
Bibliography note	Includes bibliographical references.
Technical details	System requirements: Adobe Reader.
Technical details	Mode of access: World Wide Web.

Availability

Library	Location	Call Number	Status	Item Actions
	Electronic Resources	Access Content Online	✔ Available

Kubernetes and Istio as a Zero Trust overlay / by Collin Roach.

Click here for more information about this title

Availability